Risk Assessment Proxy for User Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer applications face challenges in enhancing user authentication without updating the login page, especially in scenarios with strict change protocols or single sign-on architectures that do not allow amendments to the login mechanism.
Innovation Solution
A risk assessment proxy program is injected to redirect login requests to a collection page with authentication scripts, which collect additional information such as device and behavioral biometrics, enabling a backend risk assessment without modifying the application's code, thereby adapting to various authentication mechanisms and security levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication mechanisms are updated to include additional security metrics, then security level is improved, but device complexity increases
Solution Approach 1:
The authentication mechanism is segmented into multiple independent components: the original application login page, the injected proxy, the collection page, and the risk assessment service. Each component performs a specific function, allowing the system to enhance security without complicating the core application's authentication code.
Solution Approach 2:
A proxy is introduced as an intermediary component between the user and the application. The proxy intercepts login requests, redirects them to the collection page for additional metrics gathering, and then processes the risk assessment before allowing access to the application. This mediator handles the complexity of enhanced authentication without requiring changes to the application itself.
2Measurement precision
If additional authentication scripts are embedded, then measurement precision of user identity is improved, but ease of operation deteriorates
Solution Approach 1:
The system performs preliminary actions by automatically gathering device metrics, browser information, and behavioral biometrics during the login process without requiring users to manually provide this information. The collection page pre-collects authentication metrics before the user completes their login credentials, improving measurement precision while maintaining ease of operation.
3Reliability
If the application code is updated to include risk assessment, then reliability is improved, but ease of manufacture deteriorates
Solution Approach 1:
The proxy serves as an intermediary that implements the risk assessment functionality externally, without requiring modifications to the application's source code. The proxy injects itself into the authentication flow, collects additional metrics through the collection page, performs risk assessment, and then allows or denies access to the application. This approach maintains high reliability while preserving ease of manufacture, as the application itself remains unchanged.
Solution Approach 2:
The risk assessment functionality is extracted from the application code and placed in a separate, independent proxy component. This extraction allows the security enhancement to be implemented and maintained separately from the application development cycle, making it easier to manufacture and deploy without requiring application code updates.
Data Source
AI summary
In a method for authenticating a user, a processor receives a login request for an application. A processor directs the login request to a collection page. The collection page may include an authentication script. A processor receives a risk assessment based on an identity authenticated through the authentication script. A processor grants a level of access to the application based on the risk assessment.