Public Terminal Authentication Using Triple-Factor Code Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication mechanisms for public terminals, such as ATMs and POS systems, are susceptible to compromise due to single-factor authentication, posing risks of unauthorized access and lack of trust in user identity verification.
Innovation Solution
A triple-factor authentication system using a physical credential, mobile device authentication, and user-selected authentication mechanism within a secure application, involving a unique code generation and verification process through a secure server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single-factor authentication (e.g., PIN-based) is used, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The authentication process is divided into three distinct factors: (1) possession of a physical credential device, (2) possession of a mobile device with authentication application, and (3) knowledge of a password or biometric verification. Each factor is independently verified through separate technical mechanisms, ensuring that no single point of failure compromises the entire authentication system.
Solution Approach 2:
The authentication system combines multiple authentication modalities into a composite verification process. The system integrates physical credential verification, mobile device authentication, and password/biometric checks into a unified triple-factor authentication mechanism, where all three factors must succeed for authorization to be granted.
2Reliability
If triple-factor authentication is implemented, then security and reliability are improved, but device complexity increases
Solution Approach 1:
A secure server acts as an intermediary that coordinates the triple-factor authentication process. The server receives verification results from all three authentication factors, performs centralized validation, and returns a unified authentication decision. This intermediary approach simplifies the overall system architecture by centralizing the complex validation logic in a dedicated component.
Solution Approach 2:
The mobile device authentication application serves multiple functions: it stores security credentials, performs authentication verification, communicates with the secure server, and interfaces with the public terminal. This multi-functional design reduces the need for separate dedicated devices for each authentication factor, thereby managing system complexity.
3Reliability
If multiple authentication factors are used, then security is improved, but authentication time and overhead increase
Solution Approach 1:
The mobile device authentication application pre-stores security credentials and establishes authentication pathways before the actual authentication event. The system prepares verification mechanisms in advance, so that during the authentication process, verification can proceed efficiently without requiring real-time complex computations or external validations for each factor.
Solution Approach 2:
The secure server provides immediate feedback to both the public terminal and mobile device regarding authentication status. As each authentication factor is verified, the system receives feedback signals that enable rapid progression through the authentication stages, minimizing delays and allowing the process to complete quickly once all three factors are validated.
Data Source
AI summary
Systems and methods for authenticating a user to access a public terminal are described. Disclosed embodiments may include reading, using the physical credential reader, a user identifier from the physical credential device. Disclosed embodiments may also include transmitting the public terminal identifier and the user identifier to a secure server. Further, disclosed embodiments may include receiving, after completing the transmission, a unique code from the secure server. Disclose embodiments may additionally include displaying the unique code on the display device. Disclosed embodiments may include receiving, after displaying the unique code, an authentication message from the secure server. Disclosed embodiments may further include, responsive to receiving the authentication message, authorizing the user to use a terminal command at the public terminal.