Temporary Password Generation for Secure Record Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control measures for online information, such as user names and passwords, may inadvertently allow unauthorized individuals to access sensitive information, even among authorized groups, due to lack of additional security layers.
Innovation Solution
A method and system that generate and provide a temporary password, valid for a limited time, to control access to records created in response to electronic messages, ensuring that only authorized individuals with the password can access information generated from processed messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user names and passwords are provided to people serving a particular role, then access to information is granted to authorized groups, but the risk of unauthorized use by individuals within those groups increases
Solution Approach 1:
The access control mechanism is segmented into multiple layers: first, role-based authentication with user names and passwords provides initial access control; second, a temporary password mechanism is introduced as an additional layer that must be validated before accessing specific records. This segmentation ensures that even if someone has valid credentials for their role, they cannot access specific information without the additional temporary password, thereby reducing the risk of unauthorized use within authorized groups.
2Object-affected harmful factors
If a temporary password mechanism is added to control access to specific records, then security against unauthorized use is improved, but the complexity of the access control system increases
Solution Approach 1:
A communication interface acts as an intermediary between users and the database system. This intermediary layer handles the complex temporary password validation logic, parsing incoming electronic messages, generating temporary passwords, and verifying them against stored records. By placing the complex validation logic in this intermediary layer rather than embedding it throughout the entire system, the complexity is localized and managed more efficiently, reducing the overall system complexity while maintaining enhanced security.
3Measurement precision
If temporary passwords are generated for each electronic message, then access control precision is improved, but the processing time and system overhead increase
Solution Approach 1:
The system performs preliminary actions by pre-generating temporary passwords at the time of message processing and storing them in the database along with the record. This allows the temporary password to be ready and validated quickly when access is requested, rather than generating it on-demand during the access request itself. The preliminary generation and storage of temporary passwords reduces the processing time during actual access operations while maintaining precise control over who can access specific records.
Data Source
AI summary
A method, computing device and computer program product generate a temporary password to control access to a record created in response to an electronic message. An electronic message is parsed to separately identify a plurality of fields that provide different types of information. Record(s) are accessed from a database that are associated with the information provided by at least one field. An action to be initiated by the electronic message is determined to either be taken or to be rejected based upon information provided by the field(s) of the electronic message and also based upon information from the record(s) accessed from the database. If the action is rejected, a record of the electronic message is created for transmission along with information regarding the rejection. A temporary password is also generated to control access to the record created regarding the electronic message and its rejection. The response includes the temporary password.