Safe Case Continuous Authentication via Dynamic Trust Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multifactor authentication methods are inadequate in ensuring continuous and secure access to devices, as they fail to effectively manage trust scores and provide secure authentication when the device is compromised or the user's possession changes, leading to potential unauthorized access.
Innovation Solution
A challenge and response method in a safe case system that includes a housing for a personal communication device, sensors, and a decision unit, which generates authentication scores based on trait data and weights, providing challenges and adjusting authentication factors dynamically to maintain secure access, even when traditional authentication methods are unavailable or compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional single-factor or two-factor authentication is used, then ease of operation is improved, but reliability deteriorates as attackers can compromise user devices
Solution Approach 1:
The system dynamically adjusts authentication requirements based on real-time trust scores and contextual factors. When a device's trust score drops below a threshold, the system automatically implements additional authentication challenges, transforming static authentication into a dynamic, adaptive process that responds to changing security conditions
Solution Approach 2:
The system continuously monitors device behavior, location, and other contextual factors to calculate trust scores, providing feedback loops that adjust authentication requirements in real-time. This feedback mechanism allows the system to respond to potential compromises by increasing authentication scrutiny without requiring manual intervention
2Reliability
If continuous monitoring of trust scores is implemented, then reliability is improved, but device complexity increases
Solution Approach 1:
The system applies continuous authentication monitoring selectively rather than uniformly. Full continuous monitoring is applied only when trust scores fall below thresholds or suspicious activities are detected, while normal operations use standard authentication, avoiding unnecessary complexity in low-risk scenarios
Solution Approach 2:
The safe case system serves multiple functions: it acts as a physical protective case, a secure authentication device, a trust score calculator, and a challenge generator. By consolidating these functions into a single universal device, the system reduces overall system complexity while maintaining continuous authentication capabilities
3Reliability
If multifactor authentication is implemented, then reliability is improved, but ease of operation deteriorates when additional authentication factors are required
Solution Approach 1:
The system dynamically adjusts the number and type of authentication factors required based on real-time trust assessments. When trust scores are high, fewer factors are required, maintaining ease of operation. When trust scores drop or suspicious behavior is detected, additional factors are automatically requested, enhancing security only when necessary
Data Source
AI summary
Disclosed is an apparatus performing a method including: receiving, by a decision unit coupled to a plurality of sensors at least partially supported by a housing which holds a personal communication device, trait data of a user of the personal communication device and determining whether or not a first authentication score generated based on a first set of trait data and a first set of weights assigned to the first set of trait data is above a pre-determined threshold. In some embodiments, the method includes providing a challenge to the user based on a determination that the first authentication score is below the pre-determined threshold, and gating electronic access to the personal communication device based on whether or not a second authentication score generated based on a second set of trait data and the first set of weights is above the pre-determined threshold.