Preemptive Two-Factor Authentication Token Generation

Solution Overview

Problem

Users face burdensome and time-intensive two-factor authentication (2FA) processes when accessing promoted applications on electronic devices, leading to significant user dropout due to the difficulty and complexity of fetching and entering 2FA codes.

Innovation Solution

A method and system that pre-emptively generates and transmits a 2FA code during the installation of a second application, allowing seamless sign-in without requiring users to enter the code, by prompting users to authorize preemptive sign-in and using a private key to generate and embed the authentication code in a message sent to the second application.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If two-factor authentication is implemented for security, then security is improved, but user burden and time consumption increase

Engineering Contradiction:

ImprovesecurityVSAvoiduser burden

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary action by pre-generating and storing the second factor authentication token during the initial account setup or application installation phase. This allows the authentication process to be completed automatically in the background without requiring user intervention during actual login, thus maintaining security while eliminating user burden.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements self-service by automatically generating and managing authentication tokens without requiring user involvement. The mobile application autonomously handles token generation, storage, and transmission to the server, enabling the authentication system to serve itself and eliminating the need for users to manually enter or manage security codes.

Inventive Principle:

Principle #25Self-service

2Reliability

If two-factor authentication code entry is required, then security is improved, but time consumption increases

Engineering Contradiction:

ImprovesecurityVSAvoidtime consumption

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary action by pre-generating and storing the second factor authentication token during the initial account setup or application installation phase. This allows the authentication process to be completed automatically in the background without requiring user intervention during actual login, thus maintaining security while eliminating user burden.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system ensures continuity of useful action by maintaining the authentication token in a ready-to-use state within the mobile application. The token is continuously available and can be automatically transmitted to the server when needed, eliminating interruptions and time losses associated with manual code entry and retrieval.

Inventive Principle:

Principle #20Continuity of useful action

3Reliability

If manual 2FA code fetching and entry is required, then security is improved, but user dropout increases

Engineering Contradiction:

ImprovesecurityVSAvoiduser retention

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system implements self-service by automatically generating and managing authentication tokens without requiring user involvement. The mobile application autonomously handles token generation, storage, and transmission to the server, enabling the authentication system to serve itself and eliminating the need for users to manually enter or manage security codes.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary action by pre-generating and storing the second factor authentication token during the initial account setup or application installation phase. This allows the authentication process to be completed automatically in the background without requiring user intervention during actual login, thus maintaining security while eliminating user burden.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP3603014B1Methods and systems of performing preemptive generation of second factor authentication

Publication Date: 2021.12.01 GOOGLE LLC

Figure 1
Figure 2
Figure 3

AI summary

A method includes prompting, by a first application installed on a client electronic device, a user to install a second application on the client electronic device, and prompting, by the first application, the user to authorize preemptive sign-in to the second application. In response to receiving an indication from the user to install the second application and receiving an indication from the user to authorize preemptive sign-in to the second application, the second application is installed, and a two-factor authentication code that authorizes the user to sign into the second application is generated. The method includes sending a message to the second application, launching the second application, and automatically signing the user into the second application without requiring the user to provide the two-factor authentication code or any other form of second-factor authentication.