US20240134954
2024-04-25
Physics
G06F21/335
Recent advancements in secure authentication focus on passwordless methods, enhancing user access to restricted resources. The process begins when a user requests access from their client device, which is linked to a specific network address. The system intercepts this request and generates a unique session identifier for the user, facilitating a seamless authentication experience without traditional passwords.
Legacy security measures are increasingly inadequate due to the shift towards cloud-based applications and mobile computing. Traditional techniques often rely on well-defined enterprise perimeters, which are now blurred as users operate outside of these boundaries. This has resulted in security vulnerabilities, excessive IT overhead, and a poor user experience due to cumbersome authentication processes.
The proposed method employs dual-mode authentication that combines physical characteristics of the user with the generated session identifier. After intercepting the access request, the system validates the user's identity by confirming their physical authentication against stored biometric data. This approach mitigates the risks associated with relying solely on passwords or biometrics.
The unique session identifier can take various forms, such as barcodes or alphanumeric sequences, and may be one-time-use for enhanced security. Users can validate this identifier through optical scanning or other means. Successful validation allows for secure connections between the client device and the target resource without direct exposure to potential threats.
This passwordless authentication system can be integrated into various client devices, including mobile applications. It emphasizes user convenience by separating sensitive biometric data from application interfaces while ensuring robust security. Overall, this innovative approach aims to provide a more secure, flexible, and efficient method for accessing network-restricted resources.