Three-Fold Security Layer for Virtual Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures for accessing secured data, such as those using virtual applications, only provide two layers of protection (log-in credentials and a randomly generated token), making it relatively easy for unauthorized users to gain access if they obtain these credentials.
Innovation Solution
Implementing a three-fold security layer that requires physical contact between a user device and a physical identifier, which automatically generates a unique token for access, combining user credentials (username and password) with the physical identifier's credentials for validation by a security manager.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If two-layer security (credentials and random token) is used, then ease of operation is improved, but security reliability deteriorates
Solution Approach 1:
The security system is segmented into three distinct layers: (1) user credentials (username and password), (2) physical identifier ( NFC-enabled device), and (3) dynamically generated unique token. Each layer provides independent security validation, so compromising one layer does not grant access without the others. This segmentation resolves the contradiction by maintaining operational simplicity while significantly enhancing security reliability.
Solution Approach 2:
A security manager acts as an intermediary component that coordinates validation across all three security layers. The security manager receives credentials from the user device, validates them against stored information, generates the unique token, and controls access to the virtual application. This intermediary ensures that no single component has excessive authority, improving security while maintaining ease of operation.
2Reliability
If physical identifier contact is required, then security reliability is improved, but device complexity increases
Solution Approach 1:
The user device automatically performs multiple functions without requiring manual user intervention: it detects the physical identifier through NFC contact, extracts the embedded credentials, validates them through the security manager, and automatically receives and inputs the generated unique token. This self-service automation reduces the perceived complexity for users while maintaining the three-layer security structure.
Solution Approach 2:
The patent replaces manual mechanical operations (physically writing down and manually entering tokens) with electronic/NFC-based automated processes. The physical identifier communicates credentials wirelessly through NFC, and the system automatically generates and inputs tokens electronically, eliminating the need for manual token handling and reducing operational complexity.
3Ease of operation
If automatic token generation is implemented, then ease of operation is improved, but loss of time in validation increases
Solution Approach 1:
The system performs preliminary validation of user credentials (username and password) against stored information in the security manager before generating the unique token. This preliminary action ensures that only authenticated users proceed to token generation, and the entire process including token generation and input is automated, reducing both user effort and overall validation time compared to manual token handling.
Solution Approach 2:
The manual process of writing down and physically entering tokens is replaced with an automated electronic system that generates tokens through NFC communication and automatically inputs them into the virtual application. This substitution eliminates the time-consuming manual operations while maintaining security, as the automated electronic token input is both faster and more secure than manual entry.
Data Source
AI summary
The invention is directed to methods and systems for managing access to secured data. In particular, the invention provides a three-fold security layer to manage access to a virtual application by verifying a user device, user credentials, and a physical identifier. Each of the user device, user credentials, and the physical identifier is associated with a user and identification of each is required to grant access to the virtual application. A user may enter, from an authorized user device, user credentials, such as a user name and password. The user may then physically contact the physical identifier and the user device in order to automatically generate a unique token required to automatically gain access to the virtual application.