Multi-factor authentication with increased security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication methods, such as tap-to-login processes, are prone to human error, server resource inefficiencies, and unauthorized access due to timeouts and geographical location vulnerabilities.
Innovation Solution
Implementing a system where a push notification during authentication is only received if the mobile device and user are authenticated beforehand, with the option to reject or not forward requests, and requiring devices to be in close geographical proximity, thereby enhancing security by ensuring only authorized users can access systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If push notification is sent to mobile device during authentication, then user can be notified of login attempt, but unauthorized users can receive and respond to requests leading to security breaches
Solution Approach 1:
The system performs preliminary authentication of the mobile device and user before sending the push notification. The mobile device must be authenticated and have an active authentication session established beforehand. This preliminary action ensures that only authorized devices and users can receive and respond to authentication requests, preventing unauthorized access while maintaining reliable notification delivery.
2Productivity
If authentication requests are sent to multiple devices, then more users can be notified, but server resources are consumed and timeouts occur
Solution Approach 1:
The system establishes an active authentication session in advance on the mobile device. When a login attempt occurs, the system checks whether the mobile device has an active authentication session before sending notifications. This preliminary setup allows rapid authentication decisions without consuming server resources for devices without active sessions, eliminating timeouts and reducing server resource usage.
3Ease of operation
If user can authenticate from any location, then ease of access is improved, but geographical vulnerabilities allow attacks from remote locations
Solution Approach 1:
The system implements location-based authentication by determining the geographical location of both the mobile device and the device attempting login. It compares these locations and only allows authentication when they are in approximate proximity. This local quality constraint ensures that authentication is convenient for legitimate users at the same location while preventing remote attacks, as the second device must be physically near the authenticated mobile device.
Data Source
AI summary
A multi-factor authentication method and system is provided such that a push notification during an authentication process is only received if a mobile device and user are authenticated prior to receiving the push notification. Either the mobile device itself or a second device sending the push notification may be programmed to either reject or not forward the authentication request. Additionally, using the method of the present invention, enhanced security is provided by requiring the location of the mobile device and the second device to be approximately in the same geographical location.