Skill-Based Authentication System for Fraud Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to unauthorized access when fraudsters obtain authentication factors such as tokens or secrets, as they can lead to fraudulent transactions before the user notices the compromise.
Innovation Solution
Implementing a skill-based authentication system that determines a user's skill profile and provides challenges based on that profile, using skill points as an additional authentication factor, which can be tested through skill-based tests related to various subjects or games, and evaluated within time restrictions to limit external assistance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication factors (tokens, secrets, biometrics) are used, then authentication can be performed, but the system becomes vulnerable to unauthorized access when these factors are obtained by fraudsters
Solution Approach 1:
The patent transforms the authentication parameter from static factors (tokens, secrets, biometrics) to dynamic skill-based challenges. The system changes the nature of authentication from verifying possession of a factor to verifying demonstration of a skill, where the challenge and response parameters are dynamically generated and time-limited, making them unusable by fraudsters who cannot replicate the user's actual skill in real-time.
2Reliability
If skill-based authentication is implemented, then authentication security is enhanced, but the authentication process becomes more complex
Solution Approach 1:
The patent creates a universal skill-based authentication framework that can accommodate multiple types of skills and challenges (gaming, trivia, cognitive tasks) through a single system architecture. The challenge generation module can dynamically select from various skill types, and the verification process follows a unified flow, reducing the need for separate authentication systems for different skill domains.
Solution Approach 2:
The system introduces an intermediary challenge-response mechanism between the user and the authentication decision. Rather than directly verifying identity, the system uses skill challenges as an intermediary test that indirectly proves identity through demonstrated capability, adding a layer of verification that is both secure and adaptable to different user profiles.
3Reliability
If skill-based challenges are used as authentication factor, then unauthorized access is reduced, but the authentication time increases
Solution Approach 1:
The patent implements partial verification by allowing authentication to proceed with a subset of challenges rather than requiring completion of all possible challenges. The system can adjust the number and difficulty of challenges based on risk assessment, user profile, and security requirements, enabling a balance between security and speed by performing only the necessary portion of skill verification.
Solution Approach 2:
The system uses periodic, time-limited challenges that are designed to be completed within specific time frames. The challenges are structured with time constraints that prevent excessive authentication time while still providing sufficient verification, and the periodic nature allows for multiple attempts or escalation to more rigorous challenges only when necessary.
Data Source
AI summary
There is disclosed herein techniques for use in skill-based authentication. The techniques comprise determining a skill associated with a user. Also, the techniques comprise providing a user challenge based on the skill. Further, the techniques comprise receiving a user response to the user challenge. Additionally, the techniques comprise determining whether to authenticate the user based on the user response.