Router-Connected Authentication Device for Transaction Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Financial institutions face challenges in preventing unauthorized access and fraudulent transactions due to the vulnerability of traditional password and two-factor authentication methods, which can be compromised by malevolent actors gaining access to customer information.
Innovation Solution
A user authentication device (UAD) is physically and electrically connected to a user's router, transmitting a unique identifier to a remote authentication server to confirm the user's identity and enforce additional security policies before allowing transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional password and two-factor authentication methods are used, then ease of operation is improved, but security reliability deteriorates
Solution Approach 1:
The patent introduces a router as an intermediary device between the user's computing device and the authentication server. The router runs an authentication manager that mediates the authentication process by generating authentication codes and verifying them, thereby enhancing security without significantly impacting user convenience.
Solution Approach 2:
The patent replaces traditional mechanical authentication methods (passwords, SMS codes) with a system-based approach where the router automatically generates and manages authentication codes. This substitution of mechanical user actions with an automated system process improves both security and ease of operation.
2Reliability
If additional authentication measures are implemented, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent makes the router serve multiple functions: it acts as a network router, runs an authentication manager, generates authentication codes, and communicates with authentication servers. This multi-functionality consolidates security infrastructure into an existing device, reducing overall system complexity.
Solution Approach 2:
The patent combines the authentication management functionality with the router device, merging network routing and authentication verification into a single integrated system. This consolidation reduces the number of separate components needed and simplifies the overall architecture.
3Reliability
If physical connection to router is required, then security reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements a system where the router automatically performs authentication verification without requiring user intervention. The authentication manager on the router self-manages the entire process of generating codes, receiving them from the computing device, and verifying them against the server, making the physical connection requirement transparent to the user.
Data Source
AI summary
A user authorization device (or UAD) physically connected to a user's router to aid in the authentication of the user. A bank server polls the user's router to verify that the UAD is connected to the router before granting the user the capability to perform transactions on the user's account that would be otherwise restricted. The bank server implements a set of policies designed by the user that require the UAD to be present for some transactions with the account to be performed. The presence of this device thus adds an extra layer of security to such financial transactions beyond the use of a username and password.