Multi-Factor Dynamic Password Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password-based security systems on electronics devices are inadequate due to the use of simple, easily remembered passwords that compromise security, as they are often not strong enough to prevent unauthorized access.
Innovation Solution
Implementing a multi-factor password system that includes various types of information, such as alpha-numeric strings, fingerprints, voice samples, device orientation, and location, which are defined and authenticated by the user, providing enhanced security through multiple authentication factors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a simple password or PIN is used for authentication, then ease of operation is improved, but security is compromised
Solution Approach 1:
The authentication system is segmented into multiple independent factors (knowledge-based password, possession-based token, biometric characteristics). Each factor can be authenticated separately, allowing users to combine familiar simple passwords with additional security layers without requiring complex memorization of a single authentication string.
Solution Approach 2:
The authentication mechanism uses composite authentication materials combining multiple types of factors: knowledge factors (passwords), possession factors (tokens, smartphones), and biometric factors (fingerprints, facial recognition). This composite approach strengthens security while maintaining ease of use through automated multi-factor verification.
2Reliability
If a strong password with multiple factors is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The authentication system is designed with universal multi-functionality where a single framework handles multiple authentication factors and scenarios. The system can adapt to different authentication requirements (device unlock, transaction authorization, remote access) using the same core multi-factor authentication mechanism, reducing overall system complexity.
Solution Approach 2:
The system performs self-service authentication by automatically selecting and verifying appropriate factors based on the authentication scenario and user profile. The authentication server autonomously determines which factors to require and manages the verification process without manual configuration, simplifying deployment and usage.
3Adaptability or versatility
If dynamic password values for multiple scenarios are stored, then adaptability is improved, but loss of information increases
Solution Approach 1:
The system performs preliminary action by pre-configuring and pre-storing authentication factor mappings for different scenarios before actual authentication occurs. Scenario-specific password values and factor combinations are established in advance and stored securely, allowing rapid retrieval and verification during authentication without requiring real-time computation or user memory.
Solution Approach 2:
An authentication server acts as an intermediary between the user and the authentication system. The server manages the complex storage and retrieval of scenario-specific password values, handling the information management burden centrally. Users interact only with the simplified interface while the server processes the complex scenario-based password matching.
Data Source
AI summary
A method and apparatus for performing authentication may comprise: determining a first value of a dynamic password applicable for a first scenario, the dynamic password having a plurality of values for a plurality of scenarios defined by at least one parameter; authenticating a user in the first scenario by a device based on the first value of the dynamic password; determining a second value of the dynamic password applicable for a second scenario; and authenticating the user in the second scenario by the device based on the second value of the dynamic password.