Second Factor Authorization via Paired Device Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques to detect and prevent malware infections are ineffective, as they fail to detect malware during inbound traffic and may allow compromised devices to access sensitive information before detection.
Innovation Solution
A system that generates a second factor authorization by using a paired device to verify requests from user devices, particularly for accessing sensitive websites, thereby preventing unauthorized access and protecting personal information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Difficulty of detecting and measuring
If malware detection techniques are implemented on devices, then detection capability is improved, but reliability is worsened because malware can avoid detection and compromise devices before detection occurs
Solution Approach 1:
A second factor determination unit is introduced as an intermediary between the user device and the web site. This unit receives requests from the user device, verifies authorization using a paired device, and only allows approved requests to reach the web site. The intermediary blocks malicious traffic before it can reach sensitive sites, preventing malware from compromising personal information even when device-based detection fails.
2Difficulty of detecting and measuring
If device scanning is performed to detect malware, then detection capability is improved, but loss of time increases because detection may occur after compromise has already occurred
Solution Approach 1:
The system performs preliminary verification before allowing access to sensitive websites. Instead of scanning devices after potential compromise, the second factor determination unit proactively verifies each request against authorized paired devices before traffic reaches the web site. This preliminary action prevents time loss by blocking malicious requests in advance, before any data compromise can occur.
3Reliability
If second factor authorization is required for all web site access, then reliability is improved by preventing unauthorized access, but device complexity increases due to additional authorization mechanisms
Solution Approach 1:
The patent applies local quality by implementing second factor authorization selectively rather than universally. The trigger database identifies specific web sites that require enhanced security verification, and the second factor determination unit applies additional authorization checks only to those sites. This targeted approach maintains high security for sensitive websites while avoiding the complexity burden on all device traffic.
Data Source
AI summary
A system for generating a second factor authorization for a request to access a web site includes a data store having a computer readable medium storing a program for generating the second factor authorization, and a processor. A packet receiving unit receives the request from a user device via a local network to access the web site via an external network. A trigger database stores the web site. A device database stores a rule associated with the user device for the web site, and a corresponding paired device with the user device. A second factor determination unit requests a second factor authorization from the corresponding paired device in response to the packet receiving unit receiving the request. A communication unit communicates the request to the external network in response to a valid assertion from the paired device based on the second factor authorization.