Passwordless Access Control Using Disposable Authentication Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing two-factor authentication systems require users to remember multiple usernames and passwords, which is cumbersome and compromises security when users resort to writing them down, leading to potential breaches.
Innovation Solution
A customizable two-factor authentication method using unique identification codes sent via email or SMS, eliminating the need for usernames and passwords, where the code verifies user identity and grants access based on predefined privileges, enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication systems use usernames and passwords for secure access, then security is improved, but user convenience deteriorates because users must remember multiple credentials across different systems
Solution Approach 1:
The patent introduces a third-party authentication service as an intermediary that manages credentials on behalf of users. Instead of users remembering multiple usernames and passwords, the service sends authentication codes to users via email or SMS, eliminating the need for users to memorize credentials while maintaining security through centralized credential management.
Solution Approach 2:
The patent replaces the traditional username/password credential model with a copy-based system where authentication codes are generated and sent to users. The system maintains a copy of the authentication code in its database and sends a copy to the user's communication device, allowing verification without requiring users to remember the original credentials.
2Ease of operation
If users write down usernames and passwords to remember them, then ease of operation is improved, but security deteriorates due to increased risk of breaches
Solution Approach 1:
The authentication service performs self-service by automatically generating, sending, and managing authentication codes without requiring user intervention to remember or write down credentials. The system handles the entire authentication process autonomously, eliminating the need for users to create or store passwords while maintaining strong security.
Solution Approach 2:
The patent uses disposable authentication codes that are single-use or time-limited. Each authentication code is generated fresh for each login attempt and becomes invalid after use or after a predetermined time period, eliminating the need for users to remember permanent passwords while maintaining security through ephemeral credentials.
3Ease of operation
If third-party password management programs are used to track credentials, then ease of operation is improved, but device complexity increases and users must still provide usernames and passwords
Solution Approach 1:
The patent extracts the credential storage and management function from the user's device and relocates it to a centralized authentication service. Instead of requiring users to install and configure third-party password management software, the service handles all credential management externally, simplifying the user experience while reducing the complexity burden on user devices.
Data Source
AI summary
A security system for a computer environment implements a highly customizable and secure method for providing data and other electronic access to a computer system that does not require users to login to an electronic (computerized) system using a username and password, thereby eliminating the need for the users to remember usernames and passwords. Furthermore, the security system enables the computer system to provide limited access to elements of the computer system based on a subset of the user's total or overall privileges in the computer system, based on tasks the user is requested to perform, based on time, or based on any of a number of criteria. Still further, the security system enables a user to be directed, in the first instance when accessing the computer system, to a particular page or component of the computer system instead of to a “home page” of the computer system.