Velocity-Based Authentication Reducing False Alarms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional risk-based authentication systems face issues in accurately determining user velocity, leading to false alarms due to incorrect location estimation, such as when users connect through VPNs or have multiple devices reporting different locations.
Innovation Solution
A method and system that process authentication requests by calculating the velocity between two requests and determining the likelihood that a second location is associated with the user's actual location, generating an authentication result based on this likelihood, which helps in reducing false alarms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If velocity-based risk assessment is used to detect potential fraud, then security detection capability is improved, but false alarm rate increases due to incorrect location estimation
Solution Approach 1:
The patent introduces location history as an intermediary element to mediate between the user's current reported location and the velocity calculation. Instead of directly using current location data which may be inaccurate due to VPNs or multiple devices, the system compares current location against historical location patterns to determine if the reported location is credible before incorporating it into velocity calculations.
Solution Approach 2:
The system implements feedback by continuously monitoring location data over time and using historical location patterns to validate current location reports. When a location report deviates significantly from historical patterns, the system flags it for further verification, creating a feedback loop that improves location accuracy assessment and reduces false velocity-based alarms.
2Reliability
If strict velocity threshold enforcement is applied to prevent fraud, then security reliability is improved, but user convenience deteriorates due to false alarms
Solution Approach 1:
The patent applies dynamics by making the velocity threshold adaptive rather than static. The system adjusts velocity thresholds based on user-specific historical patterns, allowing flexible accommodation of legitimate high-velocity scenarios (such as business travelers) while maintaining strict enforcement against fraudulent patterns. This dynamic approach preserves user convenience for legitimate users while maintaining security.
3Reliability
If location data from multiple devices is aggregated for velocity calculation, then comprehensive risk assessment is improved, but measurement accuracy deteriorates due to conflicting location reports
Solution Approach 1:
The patent segments the location data analysis by treating each device separately and evaluating their location patterns independently before aggregation. Instead of mixing location data from multiple devices which creates conflicts, the system analyzes each device's location history separately, then combines the insights to form a comprehensive but accurate velocity assessment that respects device-specific location patterns.
Data Source
AI summary
There is disclosed some techniques for processing an authentication request. In one example, a method comprises the step of determining the velocity between authentication requests of a user associated with the requests. Additionally, the method determines the likelihood that a location associated with one of the requests is associated with the user location. Furthermore, the method generates an authentication result based on the likelihood that a location associated with one of the requests is associated with the user location.