Multi-Factor Authentication Flow for Biometric Failure Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods face challenges in maintaining security and convenience, particularly when biometric authentication fails, leading to impaired user experience and potential security risks.
Innovation Solution
A multi-factor authentication system that combines biometric, knowledge, and possession information, allowing for alternative authentication methods when primary biometric authentication is unsuccessful, ensuring security through dual authentication success even if one method fails.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric authentication is used as the primary authentication method, then authentication speed and convenience are improved, but security is worsened when biometric authentication fails
Solution Approach 1:
The patent sets up alternative authentication methods (knowledge-based and possession-based) in advance as backup options. When biometric authentication fails, the system seamlessly transitions to these pre-prepared alternative methods, ensuring that security is not compromised while maintaining user convenience. This cushioning mechanism prevents authentication failure from becoming a security vulnerability.
Solution Approach 2:
The patent dynamically changes the authentication parameters (method type, complexity, number of factors) based on the success or failure of previous authentication attempts. When biometric authentication succeeds, the system uses a streamlined process. When it fails, the system adjusts by introducing additional authentication factors or changing to knowledge/possession-based methods, thereby adapting the security level to the situation.
2Reliability
If multiple authentication factors are required, then security is improved, but authentication complexity and user burden increase
Solution Approach 1:
The patent implements a dynamic authentication system where the number and type of authentication factors required changes based on the authentication flow. The system starts with simpler biometric authentication and only introduces additional knowledge or possession factors when necessary (upon failure). This dynamic adjustment maintains security while minimizing the perceived complexity and user burden during successful authentication scenarios.
Solution Approach 2:
The patent segments the authentication process into distinct stages: primary biometric authentication, and alternative knowledge/possession-based authentication. Each segment can be independently evaluated and executed. This segmentation allows the system to apply multiple factors only when needed, rather than requiring all factors simultaneously, thereby reducing overall system complexity while maintaining security through layered verification.
3Ease of operation
If alternative authentication methods are provided when biometric authentication fails, then user convenience is improved, but security vulnerabilities may increase
Solution Approach 1:
The patent introduces a determination unit as an intermediary that mediates between the biometric authentication result and the alternative authentication methods. This intermediary evaluates whether switching to alternative methods is appropriate and manages the transition securely. It prevents direct exposure of alternative authentication credentials while still providing user convenience, thereby reducing security vulnerabilities associated with having multiple authentication pathways.
Solution Approach 2:
The patent converts the potential harm of biometric authentication failure into a benefit by seamlessly transitioning to alternative authentication methods. Rather than letting authentication failure create a security vulnerability or user frustration, the system uses the failure as a trigger to activate pre-prepared alternative pathways that are equally secure. This transforms a harmful scenario into an opportunity to demonstrate system robustness and user convenience.
Data Source
AI summary
Provided are: performing first authentication using biometric information about an authentication target person; performing second authentication using first knowledge information indicating matters known by the authentication target person, or first possession information indicating matters had by the authentication target person; performing third authentication using second knowledge information that is different from the first knowledge information and that indicates matters known by the authentication target person, or second possession information that is different from the first possession information and that indicates matters had by the authentication target person; and performing a determination operation of determining that authentication of the target person is successful in a case where both the first authentication and the second authentication are successful, and of determining that the authentication of the target person is successful in a case where both the second authentication and the third authentication are successful even when the first authentication is not successful.