Token-Based Authentication Combining for Access Control Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems face inefficiencies in determining and granting user privileges due to the complexity of processing individual attributes for access control, which can lead to slower and less efficient access decisions.
Innovation Solution
The system employs token-based access control, where tokens representing multiple attributes are used to facilitate faster and more efficient access decisions by combining authentication methods and updating privileges dynamically based on changing conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual attributes are processed for access control decisions, then comprehensive security evaluation is achieved, but processing time increases and efficiency decreases
Solution Approach 1:
The patent combines multiple individual attributes into consolidated tokens that represent aggregated user characteristics, authentication methods, and device properties. This merging reduces the number of discrete attributes the system must process while preserving the comprehensive security evaluation capability through the combined token information.
Solution Approach 2:
The system performs preliminary processing by pre-computing and storing attribute combinations as tokens before access decisions are needed. These tokens are generated in advance based on user profiles, authentication methods, and device characteristics, allowing the access control system to make rapid decisions by simply retrieving and evaluating pre-prepared tokens rather than processing raw attributes in real-time.
2Measurement precision
If multiple authentication methods are combined to determine privileges, then security accuracy improves, but processing complexity increases
Solution Approach 1:
The patent merges information from multiple authentication methods into a single comprehensive token that encapsulates all authentication results. This consolidation maintains the accuracy of privilege determination by preserving all authentication method outcomes while reducing processing complexity through unified token evaluation rather than separate analysis of each authentication method.
Solution Approach 2:
The token structure is designed as a universal container that can hold information from various authentication methods (password, biometric, multi-factor, etc.) and device attributes. This multi-functional token design allows the system to handle diverse authentication scenarios with a single processing framework, reducing complexity while maintaining precision across different authentication types.
Data Source
AI summary
According to one embodiment, an apparatus may store a first and second subject token that indicate a first authentication method performed by the user and a second authentication method performed by the user respectively. The apparatus may detect at least one new subject token indicating at least one different authentication method performed by the user. The apparatus may then determine that a particular combination of subject tokens in the first subject token, second subject token, and the at least one new subject token indicates a privilege should be granted to the user, and facilitate the granting of the privilege to the user.