User Verification Manager Using Static and Behavioral Indicators
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional information handling systems rely solely on user credentials for verification, making them vulnerable to cyber threats when credential integrity is compromised.
Innovation Solution
A verification manager generates and verifies both static indicators based on system components and dynamic indicators based on user behavior to ensure secure access, encrypting resources if either indicator is unverified.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional information handling systems rely solely on user credentials for verification, then the verification process is simple and fast, but the system becomes vulnerable to cyber threats when credential integrity is compromised
Solution Approach 1:
The verification process is segmented into multiple independent components: static indicator verification (device fingerprint, hardware characteristics) and dynamic indicator verification (behavioral patterns, biometric data). This segmentation allows the system to distribute verification functions across different modules, reducing the risk that a single point of failure compromises the entire system while maintaining manageable complexity through modular design
Solution Approach 2:
The patent introduces indicator data as an intermediary layer between user credentials and system access. Static indicators (device characteristics) and dynamic indicators (behavioral patterns) serve as mediators that verify user identity without directly exposing credential information. This intermediary mechanism enhances security by adding verification layers while keeping the interface relatively simple through standardized indicator collection and evaluation processes
2Reliability
If the system verifies both static and dynamic indicators, then unauthorized access is prevented more effectively, but the verification time and processing resources increase
Solution Approach 1:
Static indicator data (device fingerprint, hardware characteristics) is collected and verified before the user attempts access. This preliminary verification ensures that only recognized devices can proceed to the access attempt, filtering out many unauthorized access attempts before they consume significant verification resources. The static verification acts as a pre-check that reduces the burden on dynamic verification processes
Solution Approach 2:
The system implements risk-based verification where not all users undergo the complete verification process. Low-risk users with verified static indicators and consistent behavioral patterns may receive expedited access, while high-risk scenarios trigger full verification. This partial action approach maintains high security for critical cases while reducing verification time for routine access, balancing security and efficiency
3Reliability
If the system encrypts local storage resources when verification fails, then data protection is enhanced, but the system operation becomes more complex
Solution Approach 1:
The verification manager automatically manages the encryption state of local storage resources based on verification outcomes without requiring manual intervention. When verification fails, the system self-service encrypts the storage resources; when verification succeeds, it automatically decrypts them for normal operation. This automation enhances data protection while maintaining operational simplicity, as users interact with a unified interface that handles encryption transparency
Solution Approach 2:
The system pre-configures encryption capabilities for local storage resources before verification failures occur. Encryption keys and algorithms are prepared in advance, and the encryption state is toggled based on verification outcomes. This preliminary preparation ensures that data protection is immediately effective when needed, while the automated nature of the process prevents operational complexity from accumulating
Data Source
AI summary
In one embodiment, a method for verifying a user of an information handling system that includes: identifying, by a verification manager of an information handling system of a computing environment, one or more components of the information handling system; generating, by the verification manager, a static indicator associated with the information handling system based on the one or more components; verifying, by the verification manager, the static indicator; identifying, by the verification manager, the user of the information handling system; identifying, by the verification manager, a plurality of behavioral characteristics associated with the user; generating, by the verification manager, a dynamic indicator associated with the user based on the plurality of behavioral characteristics; verifying, by the verification manager, the dynamic indicator; determining, by the verification manager, a user accessibility associated with the information handling system based on the static indicator and the dynamic indicator.


