Partitioned Authentication Tokens Across Prioritized User Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing two-factor authentication systems are hindered by the reliance on a single user device, which can lead to accessibility issues and security vulnerabilities when that device is unavailable, and require users to carry all devices for authentication, compromising convenience and security.
Innovation Solution
A system that partitions authentication tokens and distributes them to multiple user devices based on priority and probability, using machine learning to predict device possession, ensuring authentication occurs only when the tokens are received in the correct order.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single user device is used for two-factor authentication, then the authentication process is simple and fast, but the system becomes vulnerable to security risks and accessibility issues when the device is unavailable
Solution Approach 1:
The authentication token is segmented into multiple portions and distributed across different user devices. Each device receives only a portion of the token, and all portions must be collected in the correct order to complete authentication. This segmentation improves reliability by eliminating single-point failure while managing complexity through automated token distribution.
2Reliability
If multiple devices are required for authentication, then security is improved, but users must carry all devices simultaneously which reduces convenience
Solution Approach 1:
The system dynamically determines which devices are currently accessible to the user and adjusts the authentication process accordingly. Rather than requiring all registered devices, the system identifies available devices in real-time and distributes token portions only to those devices, maintaining security while improving convenience.
3Reliability
If additional devices are added to the authentication process, then security is enhanced, but the system becomes more complex and users may be wrongly locked out
Solution Approach 1:
The system incorporates feedback mechanisms where devices provide information about their availability and status. The authentication server uses this feedback to dynamically adjust which devices participate in the authentication process, preventing false lockouts while maintaining security. The system learns from user behavior patterns to improve device selection.
Data Source
AI summary
Disclosed embodiments may include a method for authentication using partitioned authentication tokens. The system can receive an indication of a first and second user device associated with a user. The indication can include a priority order of the first and second user device. The system can then receive an authentication request associated with the user from an application. The system can generate an authentication token to authenticate the user and partition the authentication token to create a first token portion and a second token portion. The system can determine which device of the first and second user device has a higher priority based on the priority order and can transmit the first token portion and the second token portion to the devices in order of priority. The system can receive a receipt of the token portions and transmit instructions to the application to authenticate the user.