Access Control via Mobile Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems face security risks due to the potential for unauthorized access when physical media, such as ID cards, are lost or compromised, and multi-factor authentication methods can be cumbersome and insecure.
Innovation Solution
A system that combines an identification medium with a position determination device to verify the location of a mobile device associated with the person, using technologies like GPS, Galileo, WLAN, or iBeacons, to ensure that the person is physically present at the access area, enhancing security through two-factor authentication and allowing easy expansion to three-factor authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If physical media (ID card, RFID key) are used for authentication, then access control is simple to implement, but security is compromised when the physical medium is lost or stolen
Solution Approach 1:
The authentication process is segmented into two independent components: possession of the ID card and verification of location via mobile device GPS. Both segments must be satisfied simultaneously for access to be granted, so that loss of one component (the ID card) does not compromise overall security
Solution Approach 2:
The system introduces a mobile device with GPS capability as an intermediary verification layer. This intermediary independently confirms the user's location without relying on the physical ID card, thereby maintaining security even when the card is lost or stolen
2Reliability
If multi-factor authentication (ID card + PIN) is implemented, then security is improved, but the authentication process becomes cumbersome and time-consuming
Solution Approach 1:
The system performs location verification automatically in the background using the mobile device's GPS capabilities without requiring active user participation. The authentication process is self-service in nature, eliminating the need for manual PIN entry while maintaining strong security
Solution Approach 2:
The manual PIN entry mechanism is replaced with automated electronic location verification. The GPS-based location check occurs automatically through the mobile device and access control system, eliminating the mechanical interaction of typing a PIN code
3Reliability
If GPS-based location verification is added to access control, then security against lost ID cards is improved, but device complexity increases
Solution Approach 1:
The mobile device serves multiple functions: it acts as both the user's personal identifier (linked to the ID card) and a location verification tool via GPS. This multi-functionality eliminates the need for separate dedicated location verification hardware, thereby limiting the increase in system complexity
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly reduces unauthorized access by ensuring that both the identification code and location match, providing a high level of security and simplifying the authentication process, while also eliminating the need for manual ID blocking and enabling efficient access control.
Implementation Method 1
a positioning device (e.g., a satellite-based positioning device, such as GPS or Galileo, or an indoor positioning device, such as WLAN or iBeacons) for determining the location (OPG) of a mobile device assigned to the person
Implementation Method 2
a positioning device (e.g., a satellite-based positioning device, such as GPS or Galileo, or an indoor positioning device, such as WLAN or iBeacons) for determining the location (OPG) of a mobile device
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a system and to a method for controlling the access of persons at access regions (e.g. gate, door), wherein the person is authenticated by means of an access control device on the basis of an identification medium (badge, RFID chip) assigned to the person; the location of a mobile device (e.g. mobile communication terminal such as a smartphone or iPod) assigned to the person is determined; the location of the mobile device is transmitted to the access control device; the location of the mobile device is checked with the location of the corresponding access region by means of the access control device; access is authorized for the person if the location of the mobile device assigned to the person and the location of the corresponding access region match and a positive authentication of the person on the basis of the identification medium (badge, RFID chip) assigned to the person has occurred.