Partial Pool Authentication Using Trusted Contact Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are reluctant to provide identifiable information for authentication in virtual environments, necessitating a method that allows minimal data disclosure while ensuring secure access.
Innovation Solution
A partial pool credentialing system that delegates authentication to user contacts, using minimal initial credentials to verify identity through a network of trusted individuals, adjusting security thresholds based on risk analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication requiring full identifiable information is used, then authentication security is improved, but user privacy protection deteriorates
Solution Approach 1:
The authentication system segments the credential verification process into multiple independent parts: the user provides minimal identifying information (first set of credentials), and separate verification is performed through trusted contacts (second set of credentials). This segmentation allows authentication to proceed without requiring the user to disclose complete sensitive information, thus maintaining security while protecting privacy.
Solution Approach 2:
The system introduces trusted contacts as intermediaries in the authentication process. These contacts serve as mediators who can verify the user's identity through alternative means without the user needing to provide sensitive personal information directly to the system. The intermediaries bridge the gap between authentication requirements and privacy protection.
2Loss of information
If minimal authentication input is required, then user privacy protection is improved, but authentication reliability deteriorates
Solution Approach 1:
The system merges multiple verification sources to compensate for the minimal input provided by the user. The first set of credentials from the user is combined with the second set of credentials from trusted contacts, creating a composite authentication mechanism that achieves high reliability despite each individual input being minimal or partial.
Solution Approach 2:
The system employs partial action by requiring only minimal credentials from the user (not full traditional authentication), while compensating with additional verification steps through trusted contacts. This partial approach from the user side is balanced by excessive verification through multiple independent credential sets, achieving overall authentication reliability.
Data Source
AI summary
Systems, computer program products, and methods are described herein for partial pool credentialing and authentication. The present invention is configured to receive a user request to access an account within a virtual environment using minimal authentication input from the user. Next, the system determines a set of contacts of the account comprising other accounts within the virtual environment that have a relationship with the user's account. The system may then transmit a request to the contacts for partial authentication credentials associated with the first account. The system then receives submitted partial authentication credentials from the contacts, determines that the submitted partial authentication credentials match the partial authentication credentials associated with the user's account, and authenticates the user to access the first account within the virtual environment. The authentication pool of the user and contacts can be monitored over time for improved security.