Multi-Device Identity Verification With Synchronized TOTP Confirmation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods, particularly on mobile devices, face challenges in balancing security and user experience, with biometric solutions like facial verification posing a risk of similar face recognition and existing assistive methods being limited in application and post-initiated.
Innovation Solution
A multi-device assistive identity verification system and method that allocates an identity key to a user, shares it with an authorized sharer, and requires simultaneous confirmation from both parties using tokens generated by a time-based one-time password (TOTP) algorithm, ensuring security and user experience through synchronized verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric verification (facial recognition) is used for identity verification, then user experience and convenience are improved, but security risks increase due to similar face recognition
Solution Approach 1:
The identity verification process is segmented into multiple independent verification steps: initial biometric verification followed by secondary verification through shared secret code or multi-factor authentication. This segmentation allows the system to maintain convenience while adding security layers to prevent similar face recognition attacks.
Solution Approach 2:
A shared secret code or second factor acts as an intermediary between the user and the verification system. This intermediary element is required in addition to biometric data, creating a multi-layered verification process that prevents unauthorized access even when biometric data is compromised.
2Reliability
If multi-device assistive interaction is implemented for identity verification, then security is improved by avoiding similar face risks, but system complexity increases
Solution Approach 1:
The verification system is designed to work across multiple device types (mobile phones, tablets, computers) using universal protocols. The same verification logic and interface patterns are applied regardless of device, managing complexity through consistency while enabling multi-device security.
Solution Approach 2:
The verification process creates digital copies of user identity attributes (hashed biometric data, shared secrets) that can be verified across multiple devices without requiring the original biometric scanner. This copying approach simplifies the multi-device architecture by using portable verification credentials.
3Measurement precision
If simultaneous confirmation from user and sharer is required, then verification accuracy is improved, but verification time increases
Solution Approach 1:
The shared secret code or second verification factor is pre-configured and stored securely before the verification event. This preliminary action allows the verification process to proceed quickly during the actual transaction, as the secondary factor is already prepared and does not require real-time generation or complex computation.
Solution Approach 2:
The system enables users to pre-configure their own verification methods and share credentials with authorized parties through self-service setup processes. This reduces verification time during actual use, as the verification mechanisms are already established and do not require real-time configuration or complex coordination.
Data Source
AI summary
The present disclosure provides a multi-device assistive identity verification method and system. The method includes: receiving an identity key allocation request and an identity key sharing request of a user; and allocating and storing an identity key, and sending the identity key to the user and a sharer. The method further includes: when a transaction request of the user is received, inviting the user and the sharer to assist in confirmation, and comparing tokens to perform identity verification.