Stopgap Authenticator Tokens for Low-Integrity Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Older and/or lower quality mobile devices with less advanced public key authenticators are limited in their ability to participate in financial transactions requiring a higher level of security due to hardware and software deficiencies.
Innovation Solution
A stopgap authenticator system that includes a processor and memory device, which receives a signed challenge from a public key authenticator, determines its integrity, collects additional stopgap authenticator data such as user identifiers, transaction history, and behavioral biometrics, and generates a stopgap authenticator token for real-time transaction approval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a public key authenticator is used on older or lower quality mobile devices, then device accessibility and ease of operation are improved, but authentication security and reliability deteriorate due to hardware and software deficiencies
Solution Approach 1:
The patent introduces a stopgap authenticator as an intermediary component that bridges the gap between basic public key authenticators and the required security standards. This stopgap authenticator collects additional data from multiple sources (device security data, user personal identifiers, transaction history, behavioral biometrics) and generates enhanced authentication tokens that compensate for the limitations of older devices, allowing them to participate in high-security transactions without requiring advanced hardware capabilities
2Reliability
If additional authentication data is collected and processed, then authentication reliability is improved, but system complexity and processing time increase
Solution Approach 1:
The patent segments the authentication process into distinct phases: data collection phase (gathering device security data, user identifiers, transaction history, and behavioral biometrics), processing phase (comparing data against hidden profiles and generating stopgap authenticator tokens), and authentication phase (using the generated tokens for transaction approval). This segmentation allows the system to manage complexity by handling different types of data and processing operations in separate, organized stages rather than all at once
Data Source
AI summary
A computer-implemented method includes: receiving a signed challenge from a public key authenticator of a mobile device registered to a financial account of a user; receiving a transaction request and transaction data associated with the signed challenge; determining that the public key authenticator satisfies a basic integrity requirement; receiving stopgap authenticator data including device security data and one or more of the following: a user personal identifier, a user personal credential, transaction history data of the user, and behavioral biometrics data generated at the user mobile device; comparing the stopgap authenticator data to a hidden profile for the financial account to determine that a matching threshold is satisfied; based on the satisfaction of the matching threshold and of the basic integrity requirement, generating a stopgap authenticator token; and transmitting the stopgap authenticator token and the transaction data for real-time transaction approval.