Proactive Authentication Proof for Multi-Device Offline Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing multi-device authentication systems face challenges with connectivity issues, such as network lags and disconnections, which prevent users from accessing protected resources when devices are offline or disconnected from the network.

Innovation Solution

A proactive user authentication method that generates a proof of authentication on one device, allowing subsequent access to protected resources even when the first device is disconnected from the network, by validating cryptographic information received from a second device against the stored proof of authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time network authentication is implemented, then security is improved, but connectivity issues cause access failures

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidconnectivity issues
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs authentication in advance and stores the authentication result locally on the user device. When the user needs to access a protected resource, the previously obtained authentication result is used directly without requiring real-time network connection, thus resolving the contradiction between security and connectivity reliability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multi-device authentication protocol is used, then security is improved, but network lag causes delays

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication wait time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The authentication process is completed beforehand and the authentication result is cached locally. When accessing protected resources on different devices, the system retrieves and validates the pre-stored authentication result instead of performing the full authentication protocol again, thereby eliminating network lag and reducing authentication wait time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If online authentication is required, then authentication accuracy is improved, but offline access is prevented

Engineering Contradiction:
Improveauthentication accuracyVSAvoidoffline access capability
Core Design Contradiction:
Measurement precisionVSAdaptability or versatility

Solution Approach 1:

The system performs accurate authentication when the device is online and stores the authentication result locally. This allows the device to access protected resources offline using the pre-validated authentication result, thus maintaining both authentication accuracy and offline access capability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The authentication result obtained online is copied and stored locally on the device. This local copy enables offline authentication without compromising the accuracy of the original online authentication process, allowing the system to adapt to both online and offline environments.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10992474B2Proactive user authentication for facilitating subsequent resource access across multiple devices
Publication Date: 2021.04.27 EMC IP HLDG CO LLC
  • US10992474B2 patent drawing
  • US10992474B2 patent drawing
  • US10992474B2 patent drawing

AI summary

Methods, apparatus, and processor-readable storage media for proactive user authentication for facilitating subsequent resource access across multiple devices are provided herein. An example computer-implemented method includes validating an authentication result received via a first user device; generating, in response to validating the authentication result, a proof of authentication that relates to the authentication performed via the first user device; outputting the proof of authentication to the first user device; receiving, via a second user device in connection with a request to access a protected resource, cryptographic information comprising at least a portion of the proof of authentication output to the first user device; validating the cryptographic information received via the second user device against the proof of authentication; and granting, to the second user device, access to the protected resource in response to validating the cryptographic information against the proof of authentication.