Multifactor Authentication Code Generation on Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multifactor authentication processes can be burdensome for users, especially on mobile devices with limited input capabilities, requiring them to manually enter multiple authentication factors such as usernames, passwords, and numeric codes, which increases access time and complexity.
Innovation Solution
A system where a seed value is securely stored on the user's device to automatically generate a multifactor authentication code, eliminating the need for user input by integrating it with the authentication request, thus supporting multifactor authentication on mobile devices without requiring manual entry of codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multifactor authentication requires multiple authentication factors (username, password, numeric code), then security is improved, but user burden and access time increase
Solution Approach 1:
The system enables self-service authentication by automatically generating the numeric code through an authentication application on the user's device. The application retrieves the code based on stored authentication credentials and inputs it automatically, eliminating the need for manual code entry by the user while maintaining the security benefits of multifactor authentication.
Solution Approach 2:
The authentication credentials including the numeric code generation capability are pre-configured and stored in the authentication application before the authentication process begins. This preliminary setup allows the system to automatically generate and submit the numeric code during authentication without requiring the user to manually input it at the time of access.
2Reliability
If multifactor authentication requires manual entry of numeric codes, then security is improved, but accessibility on mobile devices deteriorates due to limited input capabilities
Solution Approach 1:
The authentication application on the mobile device performs self-service by automatically generating and submitting the numeric code without requiring manual input from the user. The application utilizes the device's capabilities to retrieve authentication credentials and automatically complete the code entry process, making multifactor authentication accessible despite limited input capabilities on mobile devices.
Solution Approach 2:
The authentication application acts as an intermediary between the user's authentication credentials and the authentication system. It automatically translates the user's credentials into the required numeric code format and submits it through the appropriate interface, eliminating the need for direct manual code entry by the user on the mobile device.
3Reliability
If multiple authentication factors are required, then security is improved, but access time increases
Solution Approach 1:
Authentication credentials are pre-configured and stored in the authentication application before the authentication process begins. This preliminary setup enables the system to quickly retrieve and automatically generate the numeric code during authentication, significantly reducing the time required compared to manual code entry while maintaining security.
Solution Approach 2:
The authentication application automatically generates and submits the numeric code without requiring user interaction, eliminating the time-consuming manual entry process. This self-service capability maintains the security benefits of multifactor authentication while dramatically reducing access time by automating the code generation and submission process.
Data Source
AI summary
An application executing on a user device can receive a request to access a remote computer system. The application can automatically obtain an authentication code that is generated based at least in part on a seed value, which can be stored in the user device. The application can automatically generate an authentication request based at least in part on the access information and the authentication code, and transmit the authentication request to remote computer system.