Credential-less Authentication via Trusted Device Token
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication methods, such as passwords and multifactor authentication, are vulnerable to attacks and cumbersome for users, leading to potential security breaches and user frustration due to the need for manual credential entry and complex password management.
Innovation Solution
A secure authentication system that relies on a single trusted device, like a smartphone, for multifactor authentication, eliminating the need for manual credential entry by using a bonded device with linked authentication factors such as QR codes, PINs, or biometrics, which communicates securely with an access management system to verify user identity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional user ID and password authentication is used, then the authentication process is simple and familiar to users, but it is vulnerable to phishing, key-logging, hacking, and password interception attacks
Solution Approach 1:
The patent extracts the authentication credentials from the user device and stores them on a remote server. The user device only retains a token or identifier, while the actual authentication data resides remotely, eliminating the vulnerability of local credential storage to key-logging and phishing attacks.
Solution Approach 2:
The patent introduces a server as an intermediary between the user and the authentication system. The server acts as a trusted third party that verifies credentials and communicates with the user device, preventing direct exposure of sensitive authentication data and protecting against interception attacks.
2Reliability
If complex passwords with multiple factors are required, then authentication security is improved, but user convenience deteriorates due to difficulty in memorization and manual entry
Solution Approach 1:
The patent implements self-service authentication where the system automatically manages complex credentials, tokens, and authentication factors on the server side. Users simply interact with a simplified interface without needing to manually manage or remember complex authentication data, eliminating the burden of password complexity while maintaining security.
Solution Approach 2:
The patent replaces manual credential entry and management with automated electronic authentication mechanisms. The system automatically handles credential verification, token generation, and authentication factor validation, eliminating the need for users to manually type or manage complex passwords.
3Ease of operation
If passwords are stored locally for easy access, then user convenience is improved, but security deteriorates as stored passwords become vulnerable to theft and unauthorized access
Solution Approach 1:
The patent extracts password storage from the local device and relocates it to a secure remote server. The local device only stores non-sensitive tokens or identifiers, eliminating the security risk of local password storage while maintaining quick access through automated authentication.
Solution Approach 2:
The patent introduces a secure server as an intermediary that holds and manages password storage. The server acts as a trusted custodian that provides authenticated access to credentials without exposing them to local device vulnerabilities, combining security with convenient access.
Data Source
AI summary
The present disclosure relates generally to computer security and human-computer interaction, and, more particularly, to systems and methods for providing improved user authentication and verification techniques by way of credential-less or near credential-less user input.