Password-less Authentication Mechanism for User Account Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems rely on password-based modes, which can be insecure, inconvenient, and consume computing resources, while also presenting challenges such as password guessing, phishing, and resource consumption.
Innovation Solution
A system that allows users to disable password-based authentication modes and enable password-less modes, such as biometric, QR-code-based, email-based, SMS-based, physical key-based, or mobile-app-based authentication, through a request from a user device, reducing the need for password entry and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used, then users can access account data and functions, but security vulnerabilities increase and computing resources are consumed
Solution Approach 1:
The patent extracts the password verification step from the authentication process by implementing password-less authentication methods. The system removes the password-based authentication mechanism and replaces it with alternative authentication approaches that do not require password entry, thereby eliminating the security vulnerabilities and resource consumption associated with password handling while maintaining account access capability
2Ease of operation
If password-based authentication is used, then users can access account data and functions, but the authentication process becomes slower and more inconvenient
Solution Approach 1:
The patent implements preliminary action by pre-configuring authentication credentials during account setup or device pairing. Instead of requiring users to enter passwords during each authentication event, the system performs authentication setup in advance, storing cryptographic credentials that enable automatic or seamless authentication. This eliminates the time and inconvenience of password entry while maintaining secure access to account data and functions
Data Source
AI summary
A system can receive a request from a user device to disable a password-based mode of authentication associated with a user account. The user account can have a password usable for accessing account data associated with the user account and account functions associated with the user account. The system can receive verification from the user device for the request. The system can disable the password-based mode of authentication associated with the user account. The system can enable a password-less mode of authentication associated with the user account. The password-less mode of authentication can enable the user device to access account data associated with the user account and account functions associated with the user account without requiring the user to enter the password.