Passive MFA Server Using Biometric and Device Data for Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing online user authentication systems introduce friction and delays due to active multi-factor authentication (MFA) steps, which can lead to transaction failures and reduced security.

Innovation Solution

A passive Multi-Factor Authentication (MFA) system that uses an Access Control Server (ACS) and a passive MFA server to authenticate users based on passive biometrics data and device data, eliminating the need for active authentication steps.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If active multi-factor authentication steps are implemented, then security is improved, but transaction completion rate deteriorates due to friction and delays

Engineering Contradiction:

Improveauthentication securityVSAvoidtransaction completion rate

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary authentication by collecting and analyzing user behavior data, device characteristics, and biometric information during the initial session setup phase, before the actual transaction occurs. This preliminary analysis creates a baseline profile that enables automatic authentication decisions without requiring active user participation during the transaction, thus maintaining security while eliminating friction.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authentication system serves itself by automatically analyzing user behavior patterns, device data, and biometric information without requiring active user input. The system uses machine learning models to autonomously evaluate authentication confidence scores and make authorization decisions, replacing manual authentication steps with automated self-service authentication that eliminates friction while maintaining security.

Inventive Principle:

Principle #25Self-service

2Reliability

If active authentication challenges are required, then authentication reliability is improved, but user experience deteriorates due to delays and potential transaction failures

Engineering Contradiction:

Improveauthentication reliabilityVSAvoiduser experience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system replaces mechanical authentication interactions (such as entering passwords, responding to challenge questions, or performing active biometric scans) with automated analysis of passive user behavior data, device characteristics, and continuous biometric monitoring. This substitution eliminates the need for deliberate user actions while maintaining authentication reliability through sophisticated data analysis and machine learning models.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system continuously monitors and analyzes user behavior patterns, device data, and biometric information in real-time, providing feedback to the authentication decision engine. This feedback mechanism enables dynamic adjustment of authentication confidence scores based on observed user characteristics, allowing the system to maintain high reliability while operating passively without disrupting user experience.

Inventive Principle:

Principle #23Feedback

3Speed

If passive biometrics and device data analysis are used, then authentication speed is improved, but system complexity increases due to predictive data models

Engineering Contradiction:

Improveauthentication speedVSAvoidsystem complexity

Core Design Contradiction:

SpeedVSDevice complexity

Solution Approach 1:

The system segments the authentication process into distinct functional modules: data collection components that gather user behavior and device information, machine learning models that analyze the data, and decision engines that evaluate authentication confidence scores. This segmentation allows each component to be optimized independently and facilitates parallel processing, maintaining high authentication speed while managing system complexity through modular architecture.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS20250047666A1Systems and methods for passive multi-factor authentication of device users

Publication Date: 2025.02.06 MASTERCARD INT INC

AI summary

A passive Multi-Factor Authentication (MFA) system includes a passive MFA server that receives, from a user computing device, passive biometrics data and device data collected during a current session on a remote site; submits the passive biometrics data to a user profile model, and in response receives a user authentication confidence score; and submits the device data to a device profile model, and in response receives a device authentication confidence score. The passive MFA server is also configured to receive a user authentication request for a current payment transaction associated with the current session on the remote site, and transmit the user authentication confidence score and the device authentication confidence score to an Access Control Server (ACS) configured to determine that the scores satisfy a predefined threshold for passively authenticating a user of the user computing device during the current session, without conducting an active authentication process with the user.