Secure Login Cookie Authentication for Checkout Speed

Solution Overview

Problem

Current multifactor authentication systems for digital channel users are prone to errors and vulnerabilities, such as forgotten security questions and guessable answers, leading to increased complexity and time consumption during the checkout process.

Innovation Solution

Implementing a system where an online payment server processor authenticates users based on predefined factors, including user identifiers, passwords, and biometric data, with a secure login cookie sent to the user device, allowing for faster checkout by bypassing traditional login credentials and utilizing biometric authentication or PIN entry for subsequent transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional multi-factor authentication with security questions is used, then security is provided, but the checkout process becomes complex and time-consuming

Engineering Contradiction:

Improveauthentication securityVSAvoidcheckout process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs authentication actions in advance by issuing a secure login cookie after initial login, which is stored on the user's device. This preliminary authentication eliminates the need to repeat security questions during subsequent checkout transactions, reducing complexity while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the authentication state through a secure login cookie that represents the user's authenticated status. This cookie can be presented without requiring the user to re-answer security questions, simplifying the checkout process while preserving authentication reliability.

Inventive Principle:

Principle #26Copying

2Reliability

If traditional multi-factor authentication with security questions is used, then security is provided, but the authentication time increases

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs authentication actions in advance by issuing a secure login cookie after initial login, which is stored on the user's device. This preliminary authentication eliminates the need to repeat security questions during subsequent checkout transactions, reducing complexity while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the authentication state through a secure login cookie that represents the user's authenticated status. This cookie can be presented without requiring the user to re-answer security questions, simplifying the checkout process while preserving authentication reliability.

Inventive Principle:

Principle #26Copying

3Productivity

If secure login cookie authentication is implemented, then checkout speed is improved, but authentication security may be compromised

Engineering Contradiction:

Improvecheckout speedVSAvoidauthentication security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system applies different authentication mechanisms to different scenarios: secure login cookie for fast checkout when available, and traditional multi-factor authentication with security questions when the cookie is not present or expired. This localized application of authentication methods optimizes both speed and security appropriately for each context.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The secure login cookie acts as an intermediary that carries authentication information between the server and client. It enables fast authentication by mediating the verification process without requiring direct interaction with security questions, while the server can still validate it against stored authentication data.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11842349B1Multifactor authentication systems and methods

Publication Date: 2023.12.12 CITICORP CREDIT SERVICES INC (USA)

AI summary

Multifactor authentication systems and methods employ an online payment server processor that authenticates a user in an online session with a merchant website server processor based on data representing one or more predefined authentication factors received from a user device processor over a communication network and sends data representing a secure user login cookie to the user device processor over the communication network based on the authentication of the user in the online session with the merchant website server processor. Thereafter, the online payment server processor authenticates the user in a subsequent online session with the merchant website server processor based in part on identifying the data representing the secure user login cookie on the user device and in part on data representing a second predefined authentication factor received from the user device processor over the communication network.