Authenticator Push Delivery Checks for Offline MFA

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Multi-factor authentication (MFA) using push notifications fails when network connectivity is unavailable, preventing access to protected resources.

Innovation Solution

Implement a delivery status request workflow for push notifications, checking if the notification is successfully delivered to the authenticator application, and if not, provide an alert to use an alternative authentication channel.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If push notification authentication is used for MFA, then user authentication security is improved, but system reliability deteriorates when network connectivity is unavailable

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidnetwork connectivity adaptability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system proactively checks push notification delivery status before completing authentication, and provides alternative authentication channels in advance when delivery fails, ensuring authentication can proceed even without network connectivity

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary delivery status check between push notification sending and authentication completion, allowing the system to detect delivery failures and switch to alternative authentication methods

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If push notification delivery is monitored with delivery status requests, then authentication reliability is improved, but system complexity increases

Engineering Contradiction:

Improvepush notification delivery reliabilityVSAvoidauthentication system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system implements feedback by monitoring push notification delivery status and using this information to determine whether to proceed with authentication or provide alternative channels, improving reliability through status-based decision making

Inventive Principle:

Principle #23Feedback

3Adaptability or versatility

If alternative authentication channels are provided when push notifications fail, then system versatility is improved, but operational complexity increases

Engineering Contradiction:

Improveauthentication channel versatilityVSAvoiduser operation simplicity

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system dynamically adapts the authentication process by switching between push notification and alternative channels based on delivery status, providing versatility while maintaining operational simplicity through automated channel selection

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS12425403B2Authenticator push notification check in offline mode

Publication Date: 2025.09.23 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A technique for multi-factor authenticating a user on a first device, the user having an associated second device configured with an authenticator application, and wherein the authenticator application is offline. In this scenario, and responsive to receipt of a request to access a protected resource, a push notification is sent to the authenticator. While the push notification remains pending, a delivery status of the push notification is requested. Upon determining based on the delivery status that the authenticator is offline, an alert is provided to the user, preferably in a user interface of the first device, and indicates the delivery status of the push notification. The alert also includes an instruction to the user to attempt an authentication through an alternative communication channel. The user is then permitted to access the protected resource only upon completing the authentication through the alternative communication channel.