Time-Based Login Delay Module for Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secure computing systems lock out users after a limited number of failed password attempts, causing inconvenience as users must contact IT to reset their passwords and unlock terminals, despite increasing security measures.
Innovation Solution
A delay module is implemented in the login process that uses a time-based function to increase the time between failed authentication attempts, allowing users to attempt logging in multiple times with increasing delays, thereby reducing the need for immediate IT intervention while maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system locks out users after a limited number of failed password attempts, then security is improved, but user convenience deteriorates
Solution Approach 1:
The system dynamically adjusts the authentication mechanism based on the number of failed attempts. Initially, it allows rapid successive attempts, but after a threshold is reached, it transitions to a time-based delay system where the waiting period increases with each subsequent failed attempt, creating a dynamic balance between security and user convenience
Solution Approach 2:
The system changes the time parameter between authentication attempts based on the failure count. Instead of a fixed lockout period, it implements a time-based function where the delay increases exponentially or linearly with each failed attempt, allowing users to retry if needed while progressively increasing the cost of brute-force attacks
2Ease of operation
If the system allows multiple failed authentication attempts, then user convenience is improved, but security deteriorates
Solution Approach 1:
The system converts the potential harm of multiple failed attempts into a benefit by using the time-based delay function. While users can still attempt multiple times for convenience, the increasing time delays between attempts transform what could be a security vulnerability into a protective mechanism that frustrates automated attacks while remaining manageable for legitimate users
3Reliability
If the system implements a fixed lockout after failed attempts, then security is improved, but time loss increases
Solution Approach 1:
The system replaces fixed lockout periods with dynamic time-based delays that adapt to the authentication context. The delay function increases with each failed attempt, creating a progressive time cost that provides security while allowing legitimate users to recover more quickly than traditional fixed lockout policies
Data Source
AI summary
An embodiment generally relates to a method of increasing user convenience. The method includes displaying a log-in user interface and receiving an authentication attempt in the log-in user interface. The method also includes determining a status of the authentication attempt and delaying a completion of an authentication attempt by a time-based function in response to a status being a failed authentication attempt.