Web-Enabled Device Local Authentication for Financial Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems for accessing account information, such as online banking, require lengthy authentication processes even when using web-enabled devices like TVs or gaming consoles, which do not meet the need for immediate communication of financial information.

Innovation Solution

Implementing a method where web-enabled devices store user authentication information locally, allowing for efficient re-authentication by retrieving and verifying a personal identification number (PIN) or remote control passcode, thereby reducing the need for continuous server authentication and enabling quicker access to account information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication processes are used on web-enabled devices, then security is maintained through server validation, but access time increases significantly

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authentication actions by storing validated authentication information locally on the web-enabled device during an initial server connection. This pre-stored information enables subsequent rapid re-authentication without requiring repeated server validation, thus resolving the contradiction between security and access time.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The invention creates a local copy of authenticated user information on the web-enabled device. This copy includes authentication credentials that were previously validated by the server, allowing the device to independently verify user identity without continuous server communication, thereby reducing authentication time while maintaining security through the use of validated credentials.

Inventive Principle:
Principle #26Copying

2Reliability

If full authentication processes are required for each access, then account security is ensured, but user convenience deteriorates

Engineering Contradiction:
Improveaccount securityVSAvoidaccess convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs the complex authentication sequence in advance during an initial server connection, storing the validated authentication state locally. Subsequent accesses only require retrieving and verifying this pre-established authentication information, making the operation simple and convenient while maintaining the security benefits of the original full authentication process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The web-enabled device is empowered to perform self-authentication using locally stored validated credentials. The device independently verifies user identity against stored authentication information without requiring real-time server validation, enabling convenient local operation while the initial server validation ensures security.

Inventive Principle:
Principle #25Self-service

3Speed

If authentication information is stored locally on web-enabled devices, then re-authentication speed increases, but device complexity increases

Engineering Contradiction:
Improvere-authentication speedVSAvoidauthentication system complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The invention simplifies the approach by creating a straightforward local copy of authentication information rather than implementing complex cryptographic protocols or multiple verification layers. The local storage contains essential authentication credentials that can be quickly retrieved and verified, achieving fast re-authentication with minimal added complexity to the device.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The system extracts only the essential authentication information needed for rapid re-authentication and stores it locally, rather than implementing complete authentication protocols on the device. This extraction of core functionality enables fast speed while keeping the device complexity manageable by focusing only on the critical authentication elements.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS9419956B2Systems and methods for authenticating a user for accessing account information using a web-enabled device
Publication Date: 2016.08.16 BANK OF AMERICA CORP
  • US9419956B2 patent drawing
  • US9419956B2 patent drawing
  • US9419956B2 patent drawing

AI summary

Systems, methods, and computer program products are provided for authenticating and efficiently re-authenticating a user with a financial institution in order to gain access to account information using a web-enabled device. The web-enabled device stores user profiles associated with the user including authentication information provided by the user during primary authentication. The device retrieves the authentication information upon secondary authentication, that is, validation of the user's identity, which in some embodiments, includes local validation of a personal identification number (“PIN”) and/or a remote control passcode (“RCP”). As such, the web-enabled device re-authenticates the user without requiring authentication communication with a financial institution server, and thereafter, the user interacts with an application running on the web-enabled device to retrieve desired account information from the financial institution server.