Token-Based Authentication System for Mobile Banking Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing banking systems require multiple authentications across various services for actions involving higher risk levels, leading to user frustration, increased security risks, and inefficient use of system resources.
Innovation Solution
Implementing a token-based authentication system where a user is authenticated to a token level, creating an authorization token that can be used for subsequent actions, thereby reducing the need for repeated authentications and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentications are required across various services for higher risk level actions, then security is improved, but user experience deteriorates and system resources are wasted due to redundant authentication tasks
Solution Approach 1:
The system performs authentication in advance and stores the result as cached authentication data. When a user needs to access services, the system checks the cache first, eliminating the need for repeated authentications. This preliminary action maintains security by validating authentication results while improving user experience by removing redundant authentication steps.
Solution Approach 2:
The cached authentication data is designed to be universally applicable across multiple services and risk levels. A single authentication result can be reused for various actions including checking balances, transferring funds, and other banking operations, making the authentication mechanism multi-functional and eliminating service-specific re-authentication requirements.
2Reliability
If multiple authentications are required across various services for higher risk level actions, then security is improved, but system resources are consumed inefficiently due to redundant authentication tasks
Solution Approach 1:
The system performs authentication once and caches the result for future use. This preliminary authentication action eliminates the need for repeated authentication processing across multiple services, significantly reducing system resource consumption while maintaining security through validated cached results.
Solution Approach 2:
The system recovers computational resources by discarding redundant authentication processing. Instead of performing the same authentication multiple times, the system recovers and reuses the initial authentication result through caching, improving productivity by eliminating wasteful resource consumption on duplicate authentication tasks.
3Productivity
If token-based authentication is implemented to reduce repeated authentications, then user experience and system efficiency are improved, but authentication complexity increases
Solution Approach 1:
The system introduces an authentication cache as an intermediary layer between the user and multiple services. This cache stores and manages authentication tokens, handling the complexity of token generation, validation, and expiration automatically. The intermediary simplifies the user experience while managing authentication complexity behind the scenes, improving system efficiency without burdening users with complexity.
Data Source
AI summary
Disclosed herein are system, method, and computer program product embodiments for authenticating a mobile user via an authentication method determined based on a token level associated with the action being completed. An authentication token is created corresponding to the token level and the authentication token is sent to the mobile device. This authentication token may be used to authenticate subsequent actions and engage various services to complete the actions using application programming interfaces. The authentication token stored on the mobile device obviates the need for a user to authenticate multiple times to complete actions requiring a similar token level. The system may authenticate the identity of the mobile user using various authentication methods.