Testing my sixth authentication factor on Omnitrans bus passes

I know that Bredemarket has pivoted away from full-time identity work in favor of part-time work with local businesses in Ontario, Eastvale, and other cities, but a recent local activity illustrated a possible identity issue that I’d like to explore here. So allow me this tangent; I’ll get back to my Ontario, California content marketing expert content later.

Identities and bus passes

Remember my trip to Eastvale yesterday? I had to use a bus to get there. And to do this, I bought a day pass.

Omnitrans Day Pass, July 23, 2022.

Now this is not the most robust proof of identity. As I recently noted in my JEBredCal blog (one of my other Google identities), it’s extremely easy for multiple people to use this day pass at different times during the day. Even the 7-day and 31-day passes, which must be signed and may be compared against an identity document, are not necessarily free from fraud.

However, this is not critical to Omnitrans, who would rather put up with a small amount of fraud than inconvenience its riders with multiple identity checks.

Identity proofing is more critical in some situations than it is in others.

From https://jebredcal.wordpress.com/2022/07/24/how-important-is-that-identity/.

Of course, if Omnitrans really wanted to, it could achieve the need for fraud prevention by using relatively frictionless forms of identity proofing. Rather than demaning to see a rider’s papers, Omnitrans could use passive methods to authenticate its riders. I won’t go into all the possible methods and their pros and cons here.

However, I would like to explore one possible identity proofing method to see if it would solve the Omnitrans pass use issue.

Returning to my sixth authentication factor

Can my self-proclaimed sixth factor of authentication provide a solution?

You’ll recall that many identity experts recognize five factors of authentication:

  • Something you know.
  • Something you are.
  • Something you have.
  • Something you do.
  • Somewhere you are.

Well, because I felt like it, I proclaimed a sixth factor of authentication.

  • Why?

I said, because I felt like it!

Whoops, “why?” is the sixth authentication factor. I still haven’t rendered it into the “somexxx you xxx” format yet.

Can Omnitrans use the “why?” factor to test the reasonableness that any particular trip is performed by the person who originally bought the pass?

Possibly.

Applying the “why?” question to bus boarding data

Assume the most challenging scenario, in which Omnitrans knows nothing about the person who purchases a 31-day pass. The person pays in cash and is wearing a face mask and sunglasses throughout the entire transaction. Therefore, the only identity information associated with the pass is the location where the pass was purchased, the date/time it was purchased, and some type of pass identification number. For this example, we’ll assume the pass number is 12345.

So Omnitrans really doesn’t know anything of importance about the holder of pass 12345…

…other than how it is used.

I’m making the assumption that Omnitrans logs information about every use of a pass. Since you don’t need to use your pass when you leave the bus, the only information available is when you board the bus.

So let’s look at some fake data.

Date and TimeBusLocation
Monday, July 25, 2022, 6:39 am87Euclid & Holt, Ontario
Monday, July 25, 2022, 6:35 pm87Amazon LGB3, Eastvale
Tuesday, July 26, 2022, 6:39 am87Euclid & Holt, Ontario
Tuesday, July 26, 2022, 6:35 pm87Amazon LGB3, Eastvale
Wednesday, July 27, 2022, 8:42 am87Euclid & Holt, Ontario
Wednesday, July 27, 2022, 6:35 pm87Amazon LGB3, Eastvale
Thursday, July 28, 2022, 6:39 am87Euclid & Holt, Ontario
Thursday, July 28, 2022, 6:35 pm87Amazon LGB3, Eastvale
Thursday, July 28, 2022, 7:20 pm61Plum & Holt, Ontario
Thursday July 28, 2022, 9:52 pm61Ontario Mills, Ontario
Friday, July 29, 2022, 6:39 am87Euclid & Holt, Ontario
Friday, July 29, 2022, 8:35 am87Amazon LGB3, Eastvale
Friday, July 29, 2022, 10:00 am66Vineyard & Foothill, Rancho Cucamonga
Friday, July 29, 2022, 11:26 am14Fontana Metrolink
Friday, July 29, 2022, 11:53 am82Fontana Metrolink
Friday, July 29, 2022, 12:08 pm66Fontana Metrolink
Hypothetical logging of trips on Omnitrans Pass 12345.

Even if you are not familiar with California’s Inland Empire, you can probably classify these trips into the following categories:

  • Trips that are probably legitimate.
  • Trips that may or may not be legitimate.
  • Trips that are probably fraudulent.
  • Trips that are definitely fraudulent.

For the most part, you can’t know with certainty about the legitimacy of most of these trips. Here’s a story that fits the facts.

  • Jack Jones starts his new job at Amazon on Monday, and works Monday and Tuesday with no incident. Jack overslept on Wednesday and was written up. He made sure to arrive at work on time Thursday, and at the end of the day he celebrated with a dinner at a restaurant in the Ontario Mills shopping center. After arriving at work on Friday, Sara Smith picked his pocket and took his pass, fleeing the scene an hour later and making her way to Fontana. She creates several clones of the bus pass and sells them at a discount before fleeing herself. Therefore, all trips beginning on Friday at 8:35 am are fraudulent.

But that might not be the true story. This one also fits the facts.

  • Jack Jones starts his new job at Amazon on Monday, and works Monday and Tuesday with no incident. On Wednesday Jack calls in sick, but lets his housemate Bob Brown (who also works at Amazon) use his pass on Wednesday and Thursday. By Thursday evening, Jack is feeling better, retrieves his pass from his housemate, and goes to Ontario Mills for the evening. On Friday Jack goes to work and is fired. He boards the 87, misses his stop in Ontario, and stays on the bus until he reaches Rancho Cucamonga. Despondent, he decides to visit his friend in Fontana. However, his Fontana friend, Sara Smile, secretly created several clones of Jack’s bus pass and sells them at a discount. Therefore, the Wednesday trips, the Thursday day trips, and all Friday trips beginning at 11:26 am are fraudulent.

Or perhaps some other set of facts fit the data.

  • It’s possible that the pass was stolen before it was ever used and all of the trips are fraudulent.
  • Or perhaps every trip before arriving in Fontana is legitimate, but how can we tell which one (if any) of the three trips from Fontana was undertaken by the true passholder?

But the data that Omnitrans captured provides a way to challenge the pass holder for possibly fraudulent trips.

  • If Omnitrans is really suspicious for some reason, it may choose to challenge every trip that didn’t take place at the “regular” times of 6:39 am or 6:35 pm. “Why are you boarding the 87 bus at this hour of the morning?” “Why are you boarding the 61 bus?”
  • Or Omnitrans may assume that all of the trips are reasonable and don’t necessitate a challenge. Yes, someone can go to work late. Yes, someone can go to Ontario Mills for the evening. Well, all of them are reasonable until Friday at 11:53 am, when a passholder boards a bus at the same location where the same passholder supposedly departed at 11:26 am.

Now even if strict identity checks are used with the “why?” statement, the data alone can’t detect all fraud. If Jack Jones and Bob Brown both work the day shift at Amazon, but on alternate days, how can Omnitrans detect the days when Jack Jones leaves Ontario at 6:39 am, vs. the days when Bob Brown leaves Ontario at 6:39 am?

Again, no identity proofing method is 100% foolproof.

But the “why?” question may detect some forms of fraud.

Or are there really only five factors of authentication after all?

Now I’ll grant that “why?” might not be a sixth factor of authentication at all, but may fall under the existing “something you do” category. This factor is normally reserved for gestures or touches. For example, some facial liveness detection methods require you to move your head up, down, right, or left on command to prove that you are a real person. But you could probably classify boarding a bus as “something you do.”

Anyway, thank you for engaging my tangent. If I can think of a “why?” example that doesn’t involve something you do, I’ll post it here. That will help me in my hopeful (?) quest to become the inventor of the sixth factor of authentication.

What about the businesses in cities where my bus trips took place?

But back to the businesses in Ontario, Eastvale, Rancho Cucamonga, Fontana, and other cities: need some content help? I can create esoteric long-winded content like this, or (what you probably want) more concise, customer-focused content that conveys your important message. My regular work includes case studies, white papers, proposal services, and other types of content. If you need someone to help you create this content:

Update on the Eastvale Restaurant Franchise

Remember the Which Wich in Eastvale that I wrote about in April?

Well, I actually saw it in person this morning.

Which Wich in Eastvale, California.

Based upon the limited hours, I am guessing that the original franchise owner hasn’t sold it yet.

Which Wich in Eastvale, California.

Some additional pictures from Eastvale, including a city informational kiosk and one very large Amazon distribution center.

Nice kiosk.
Big building.

Reminder that if you’re an Eastvale business (or any business) of any type who can benefit from Bredemarket’s content marketing and/or proposal services:

Want to buy an Eastvale restaurant franchise?

You can learn anything via search engines.

You can learn how to order online from the Eastvale, California franchise location of Which Wich Superior Sandwiches.

From https://www.whichwich.com/

You can learn whether people like the location via Yelp reviews.

And if you dig deep enough, you can learn that the franchise location is for sale.

Now I am nowhere near an expert on franchising, but there are possible benefits to buying an established franchise rather than starting a new franchise. For one, you have instant revenue due to the existing sales (gross $480,000 from both foot traffic and delivery orders), so you don’t have to build up your business from scratch.

And the business owner, who is retiring, has some advice for the new owner. Depending upon what source you check, this location opens at 10:00 am and closes at either 6:00 pm or 7:00 pm, presumably because the owner doesn’t want to work early in the morning or late in the evening. But this offers an opportunity for the new owner.

MUST CHANGE THE HOURS OF OPERATION
Please open it for breakfast and dinner. There’s no place except MOD Pizza for dinner in that shopping center.

From https://www.bizbuysell.com/Business-Opportunity/wichwich-sandwich-place/1960565/

So if you want to run a sandwich shop and have six figures to spend, go for it.

And if you buy it and need some specialized marketing help, Bredemarket serves Eastvale businesses. I can’t answer all of a restaurant’s marketing needs (I don’t do menus, for example), but perhaps I can help you write the words for a B2B catering service that augments the restaurant’s regular revenue. Perhaps my Bredemarket 400 Short Writing Service could help you come up with a two-page handout to local businesses needing your catering.

Especially if you expand the shop’s hours and offer breakfast and dinner service.

If you’re an Eastvale business of any type who can benefit from Bredemarket’s content marketing and/or proposal services:

Bredemarket content marketing services for small businesses in and around Ontario, California (the April 8, 2022 iteration)

A minor refresh to what I wrote on March 31, including an updated brochure.

Here’s the text I recently added to my home page.

Bredemarket presently offers its services to identity/biometrics, technology, and general business firms, as well as to nonprofits. I offer my services to firms in my hometown of Ontario, California, as well as firms in EastvaleFontanaMontclairRancho CucamongaUpland, other cities of the Inland Empire West, and throughout the United States.

From https://bredemarket.com/

This post concentrates on the services that Bredemarket can provide to businesses in my local area. Read on if you own a small, arty business in the Emporia Arts District of Ontario…

Ontario, California Emporia Arts District.

…or perhaps a larger, less arty business north of Holt in Ontario, or perhaps even a business in one of the other cities that I mentioned, or one of the ones I didn’t (sorry Narod).

There are a lot of local businesses out there

Even if you don’t count sole proprietors (such as myself) or freelancers, there are somewhere around 7.7 million businesses in the United States. (This figure is from 2016; I’m not sure if it’s gone up or gone down in the last five years.) Now if you include sole proprietors in the total, then you’re talking about 32 million businesses. (This particular number may have actually increased over time.)

Obviously I can’t target them all. Well, I could try, but it would be a little ridiculous.

So what if I took a subset of those 32 million businesses and tried to see if Bredemarket could serve that subset?

The local small business persona

When you want to market to a particular group, you develop a persona that represents that group. You can then develop a profile of that persona: the persona’s needs, aspirations, and expectations; the persona’s underlying goals and values; and perhaps some other elements. The persona may be developed via extensive research, or perhaps via…a little less quantification.

When I initially looked at this topic last September, I concentrated on a particular persona, but my thoughts on this topic have evolved over time. While I will still serve artists as I initially proposed last September, I’m now thinking of other businesses that can best use the type of content that I provide.

For example, the business may be an incorporated business that is based on the Inland Empire West, provides its products or services to customers in the local area, provides excellent service that is loved by its existing customers, and needs to get the word out to new potential customers by creating content that can be downloaded from a company website, shared via a company social media account, or handed out at a trade show or other in-person event.

Regarding the values of this particular persona, you can probably already deduce some of them based upon the customer love for the company.

  • The business puts the customer first and strives to provide services that satisfy its customers.
  • However, the business also prioritizes the well-being of its employees.
  • While the business may not have explicitly articulated a vision, its actions testify to a vision of excellent service, customer satisfaction, and care for employees.

But what does this business need in terms of types of content? For my example, these businesses are ones that need customer-facing content such as the following:

  • A document (online or printed) that explains the product(s) or service(s) that the business provides, and that discusses the benefits that the product(s)/service(s) offers to the customers. This document may take the form of a product/service description, or it may take the form of a white paper. For example, your business might issue a white paper entitled “Seven Mandatory Requirements for a Green Widget,” and the white paper just might happen to mention at the end that your green widget just happens to meet all seven mandatory requirements. (Coincidence? I think not.)
Portion of the concluding section of a white paper in which Bredemarket provided the text.
Portion of the concluding section of a white paper in which Bredemarket provided the text.
  • A document (online or printed) that tells a story about how an individual customer benefited from the product(s) or service(s) that the business provides. You could call such a document a case study, or you could call it a testimonial. Or you could call it a casetimonial.

These types of documents are more valuable to some businesses than to others. Your average convenience store has little need for a 3,000 word white paper. But perhaps your business has this sort of need.

How many words should your content contain?

When I originally wrote this last September, I started off by discussing my two standard packages, based on word length. But now that I’ve thought about it a bit more, there are some questions that you need to ask BEFORE deciding on the content length. (We’ll get to content length later.)

(Owen Lovejoy) How long should a man’s legs be in proportion to his body?”

(Abraham Lincoln) “I have not given the matter much consideration, but on first blush I should judge they ought to be long enough to reach from his body to the ground.”

Thomas Lowery, quoted at https://thelogcabinsage.com/how-long-should-a-mans-legs-be-and-2-other-lincoln-stories/
Abraham Lincoln.
Abraham Lincoln. (Legs not shown.) By Hesler, Alexander, 1823-1895 – This image is available from the United States Library of Congress’s Prints and Photographs divisionunder the digital ID cph.3a36988.This tag does not indicate the copyright status of the attached work. A normal copyright tag is still required. See Commons:Licensing for more information., Public Domain, https://commons.wikimedia.org/w/index.php?curid=18705107

So how far away is the ground? Let’s ask some other questions first before we determine the answer to content length.

Bredemarket’s initial questions for you

Before I create a single word, I start by asking you some questions about your content to make sure our project starts on the right foot. (Even though I am left-footed.)

Bredemarket Kickoff Guide header.

  • What is the topic of the content?
  • What is the goal that you want to achieve with the content?
  • What are the benefits (not features, but benefits) that your end customers can realize by using your product or service?
  • What is the target audience for the content?

Once I’ve asked you these and other questions (such as a potential outline), we will both have a good idea of how long the final piece needs to be.

The length of the content also dictates the length and complexity of the review process.

Returning to the content length question

Once we have a good idea of the content length, there are three options that we can pursue to actually create the content.

If your content consists of 400 to 600 words, then I create the content using the process detailed in my Bredemarket 400 Short Writing Service.

https://bredemarket.com/bredemarket-400-short-writing-service/

This has two review cycles with up to three days per review cycle.

Bredemarket 400 Short Writing Service
If your content is longer, say 2800 to 3200 words, then I create the content using a similar (but more detailed) process through my Bredemarket 2800 Medium Writing Service.

https://bredemarket.com/bredemarket-2800-medium-writing-service/

This has three review cycles with up to seven days per review cycle.

Bredemarket 2800 Medium Writing Service
If your content falls between these two lengths, or is longer than 3200 words, or needs a more rapid delivery time, we’ll talk and come up with a solution. (And we’ll even come up with a spiffy name if you like)
For more services, see https://bredemarket.com/what-i-do/

If you can use my services, what are the next steps?

If I can help your business, or if you have further questions about Bredemarket’s B2B content creation services, please contact me.