Non-Digital Channel Authentication for Secure Password Re-Enablement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password-based authentication systems face challenges in ensuring secure and efficient access to user accounts, particularly when password-less modes are compromised, leading to resource consumption and potential security vulnerabilities.
Innovation Solution
A system that enables a password-based mode of authentication through a non-digital authentication channel, using verified credentials and settings adjustments in a database to grant secure password-based access, while disabling password-less modes to reduce resource consumption and enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-less mode of authentication is used, then security vulnerabilities and resource consumption increase, but user convenience is improved
Solution Approach 1:
The system dynamically switches between password-less and password-based authentication modes based on security requirements and user actions. The authentication mode is not fixed but can be changed in response to security events or user requests, allowing the system to optimize between convenience and security/resource usage in different contexts.
Solution Approach 2:
The system changes the authentication parameter from password-less to password-based by receiving a user request and modifying the authentication setting in the database. This parameter change allows the system to control resource consumption and security characteristics by selecting different authentication modes as needed.
2Reliability
If password-based mode of authentication is enabled, then access security is improved, but authentication process complexity increases
Solution Approach 1:
The system provides dynamic authentication mode selection where users can switch between password-less and password-based modes based on their security needs. The system adapts to user requirements by allowing mode changes through user requests, making the authentication process flexible rather than fixed.
Solution Approach 2:
Users can independently control their own authentication mode by submitting requests to enable or disable password-based authentication. The system allows users to manage their own security settings without requiring administrator intervention, giving users direct control over their authentication preferences.
3Reliability
If password-less mode is compromised, then user account security is weakened, but system resource consumption increases
Solution Approach 1:
The system dynamically responds to security events by allowing users to switch authentication modes. When password-less mode is compromised or security concerns arise, users can request password-based authentication, and the system adapts by changing the authentication setting accordingly.
Solution Approach 2:
The system changes the authentication parameter from password-less to password-based in response to user requests or security events. This parameter change allows the system to balance security and efficiency by selecting the appropriate authentication mode based on current conditions.
Data Source
AI summary
A system can prevent access to a user account via a password-based mode of authentication The system can receive a request from a non-digital authentication channel to enable the password-based mode of authentication to access the user account. The non-digital authentication channel can include an in-network system at a physical location associated with an entity managing the user account. The request can include an authenticated credential associated with the physical location and a verification associated with a user of the user account. The system can confirm the verification and the authenticated credential received in the request. The system can, in response to confirming the verification and the authenticated credential, change a setting in a database associated with the user account to enable the password-based mode of authentication associated with the user account for providing a user device with password-based access to the user account.