Acoustic TOTP Transmission via MEMS Gyroscope Interference
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The manual copying of TOTP codes from tokens is prone to user errors and exposes systems to snooping attacks due to visible digits and potential camera surveillance.
Innovation Solution
A system that transmits TOTP codes acoustically from a token to a mobile device using a MEMS gyroscope, where the acoustic signal interferes with the gyroscope's operation, allowing the decoding of the code without requiring manual input, and validates it through a server for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If TOTP code is displayed visually on token for manual copying, then user can read and enter the code, but user errors increase and system becomes exposed to snooping attacks
Solution Approach 1:
The patent replaces the visual display and manual copying mechanism with an acoustic transmission system. The TOTP code is transmitted through acoustic waves that cause vibrations detectable by the mobile device's gyroscope, eliminating the need for visual display and manual entry while preventing snooping attacks.
Solution Approach 2:
The patent introduces acoustic waves as an intermediary medium to transfer the TOTP code from the token to the mobile device. The acoustic signal carries the code information through vibrations that the gyroscope can detect, serving as a secure intermediary that prevents direct visual exposure.
2Measurement precision
If TOTP digits are displayed in large size for easy reading, then user can read the code accurately, but token minimum size increases and visibility to outsiders increases
Solution Approach 1:
The patent eliminates the visual display mechanism entirely by using acoustic wave transmission. The gyroscope detects vibrations caused by acoustic waves carrying the TOTP code, converting a visual reading problem into a mechanical sensing problem that requires no visible display.
3Device complexity
If manual copying of TOTP code is required, then simple token design is maintained, but user errors and frustration increase
Solution Approach 1:
The patent replaces manual copying with automatic acoustic transmission and detection. The token emits acoustic waves encoding the TOTP code, and the mobile device's gyroscope automatically detects and decodes the vibrations, eliminating manual intervention while maintaining relatively simple token design.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method reduces user errors and minimizes exposure to snooping by eliminating the need for visual code entry, ensuring secure and accurate authentication.
Implementation Method 1
Each pulse is emitted at an acoustic frequency that causes interference in the operation of the MEMS gyroscope on the mobile device. The interference is measured and decoded to give the original TOTP code.
Implementation Method 2
the acoustic signal has a frequency approximately equal to a resonant frequency of the MEMS gyroscope
Data Source
AI summary
A system and methods of computer security are provided wherein a first mobile computing device drives an acoustic transducer to emit an acoustic signal encoding a time-based, one time password (TOTP) code, and a second mobile computing device measures output of a MEMS gyroscope that senses the emitted acoustic signal. The second mobile computing device decodes the TOTP code from the gyroscope output, validates the TOTP code and responsively permits a user to access a secure application.