Dynamic Authentication via Transaction Proximity Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods lack a robust and dynamic approach to verify user identity, particularly in scenarios where recent transaction patterns and location data can enhance security without necessitating stringent authentication processes.
Innovation Solution
A system that determines a transaction proximity score based on recent transactions and user location, adjusting authentication levels by weighing factors such as elapsed time and historical transaction patterns to request appropriate authentication credentials for user actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then user identity verification is performed, but authentication security is insufficient and cannot dynamically adapt to transaction contexts
Solution Approach 1:
The patent implements dynamic authentication by calculating a transaction proximity score that varies based on multiple factors including time elapsed since last transaction, geographic distance between transactions, and transaction amount. This score dynamically adjusts the authentication level required, making the authentication system adaptable to different transaction contexts rather than using a fixed authentication approach.
Solution Approach 2:
The system changes authentication parameters (authentication level) based on calculated transaction proximity scores. When the score indicates low risk (high proximity to normal behavior patterns), lower authentication levels are applied. When the score indicates higher risk (low proximity to normal patterns), higher authentication levels are required, thus adapting security based on contextual parameters.
2Reliability
If stringent authentication processes are applied, then authentication security is improved, but user convenience deteriorates due to increased authentication requirements
Solution Approach 1:
The patent applies partial authentication action by adjusting the authentication level based on transaction proximity scores. For low-risk transactions (high proximity scores), minimal or no additional authentication is required. For high-risk transactions (low proximity scores), full authentication is applied. This partial application of authentication measures maintains security where needed while improving convenience where risk is low.
3Adaptability or versatility
If dynamic authentication adjustment is implemented, then adaptability and user convenience are improved, but system complexity increases due to multiple data collection and calculation requirements
Solution Approach 1:
The patent uses a multi-functional approach where a single transaction proximity score calculation serves multiple purposes: it evaluates transaction risk, determines authentication level requirements, and guides credential verification intensity. This universal metric consolidates what would otherwise require multiple separate evaluation systems, reducing overall system complexity while maintaining dynamic adaptability.
Data Source
AI summary
Embodiments are directed to systems, methods and computer program products for providing user authentication based on transaction data. Embodiments receive from a user, a request to execute a user action associated with an application, wherein execution of the user action requires validation of authentication credentials; collect a transaction set of data comprising information related to transactions conducted by the user; collect a location set of data comprising information related to a physical location of the user; determine a transaction proximity score associated with the user and the transactions; determine a level of authentication associated with the determined transaction proximity score; determine which authentication types are associated with the level of authentication; request authentication credentials; receive authentication credentials from the user; validate the authentication credentials, thereby resulting in a successful validation of the authentication credentials; and, in response to the successful validation of the authentication credentials, execute the user action.