Mid-Session Trust Assessment for Dynamic Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to assess the ongoing security and authenticity of users or user devices during authenticated sessions, leaving secure websites vulnerable to risks as the trust profile of the user or device can change without continuous monitoring.
Innovation Solution
A system that continuously monitors the trust level of users and devices during authenticated sessions, using security agents to detect changes in security posture and sends enforcement signals to adjust permissions or terminate sessions if the trust level falls below a threshold, with the ability to alert users to security issues and allow reauthentication when issues are resolved.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication is used at the beginning of a secure session, then user authentication is achieved, but ongoing security assessment during the session is not provided
Solution Approach 1:
The system continuously monitors security events during authenticated sessions and provides feedback by updating trust scores and triggering reauthentication when thresholds are breached. This closed-loop feedback mechanism enables ongoing security assessment without requiring complete system redesign.
Solution Approach 2:
The system performs preliminary security assessments continuously during sessions, evaluating trust scores before any security breach occurs. By proactively monitoring and assessing security postures in advance, the system prevents unauthorized access before it happens rather than reacting after breaches occur.
2Reliability
If continuous monitoring of trust level is implemented, then security posture changes are detected, but system complexity increases
Solution Approach 1:
The system leverages existing security events and data from the authentication service to perform self-monitoring of trust levels. By utilizing already-collected security information and automated event processing, the system achieves continuous monitoring without proportionally increasing complexity.
Solution Approach 2:
The system monitors changes in security parameters such as trust scores, event frequencies, and risk thresholds. By focusing on parameter changes rather than comprehensive system analysis, the system achieves targeted monitoring that reduces complexity while maintaining security effectiveness.
3Reliability
If reauthentication is required when trust level drops below threshold, then security is maintained, but user convenience is reduced
Solution Approach 1:
The system dynamically adjusts security requirements based on real-time trust scores and risk assessments. When trust levels are high, normal access is permitted; when trust drops below thresholds, reauthentication is triggered. This dynamic adaptation balances security with user convenience by applying stricter controls only when necessary.
Solution Approach 2:
The system provides feedback to users when reauthentication is required, explaining the security reason and guiding them through the process. This feedback mechanism maintains user convenience by providing clear guidance and context, making the reauthentication process transparent and purposeful rather than abrupt or confusing.
Data Source
AI summary
The present technology provides for receiving communications at an authentication service, and the communication is indicative of a change in a security posture of an authenticated session between a user device and a secure service. The authentication service can then determine that the change in the security posture of the authenticated session impacts the trust level associated with the user device and causes the trust level to fall below the threshold. The authentication service can then send an enforcement signal to a security agent on a network device that provides remedial actions that a user can undertake to improve the security posture of the authenticated session.