Multi-Channel User Profile Authentication System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication systems face challenges in providing secure and convenient access to information and services across various devices and platforms, often requiring increased security measures that may inconvenience users and are not necessary for all consumers.

Innovation Solution

A method and system for creating a user profile that is compatible across multiple authentication channels, including device, application, and authentication channels, which collects and analyzes attributes to optimize data security by calculating a risk score for access decisions, allowing for efficient and secure authentication across different devices and platforms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication systems are used to ensure data security, then security level is improved, but user convenience deteriorates due to increased security measures and input requirements

Engineering Contradiction:
Improvedata securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by collecting device attributes, application attributes, and authentication attributes during initial device registration and previous authentication sessions. This pre-collected information is stored and used to automatically authenticate subsequent sessions without requiring users to re-enter credentials, thereby maintaining security while improving convenience.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The authentication system performs self-service by automatically comparing current device and application attributes against previously stored profiles without requiring active user participation. The system autonomously calculates risk scores and makes authentication decisions based on the degree of match, eliminating the need for users to manually provide security credentials for every session.

Inventive Principle:
Principle #25Self-service

2Adaptability or versatility

If multiple authentication channels are supported across different devices, then adaptability is improved, but system complexity increases

Engineering Contradiction:
Improvemulti-device compatibilityVSAvoidauthentication system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication system achieves universality by creating a unified user profile that aggregates device attributes, application attributes, and authentication attributes across multiple devices and platforms. This single profile structure serves all authentication channels (web, mobile applications, desktop applications) uniformly, allowing the system to handle diverse devices without requiring separate authentication mechanisms for each platform.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system manages complexity through parameter changes by dynamically adjusting the weight and significance of different attribute types based on the authentication context. The risk score calculation adapts parameters such as device type, application sensitivity, and authentication method to determine the appropriate level of verification required, simplifying the decision-making process while maintaining security across varied scenarios.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10938815B2System and methods to establish user profile using multiple channels
Publication Date: 2021.03.02 AETNA INC
  • US10938815B2 patent drawing
  • US10938815B2 patent drawing
  • US10938815B2 patent drawing

AI summary

Embodiments of the disclosure provide a method of establishing a user profile using multiple channels. Embodiments allow compatibility of the user profile across several authentication systems. The user profile is created upon registration and is updated with attributes after authenticating and authorizing the user according to a pre-defined assurance level. The user profile contains attributes pertaining to the user and user device. The attributes can be analyzed by authentication systems to optimize data security.