ATM-Based User Authentication for Identity and Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to password reuse and leaks, and there is a challenge in efficiently verifying a user's identity and location using existing secure infrastructure like ATMs without modifying the hardware or software.
Innovation Solution
Utilizing existing secure infrastructure like ATMs to authenticate users by generating a code specific to the user, which is revealed to the ATM's security camera, and combining it with user authentication to create a signed combination that is verified by a third party, preserving user anonymity while ensuring the user's presence at a specific location.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If existing secure infrastructure like ATMs is used for authentication without modifications, then device complexity and implementation cost are reduced, but the ability to integrate new authentication functionality is limited
Solution Approach 1:
The patent makes existing ATMs perform multiple functions by integrating authentication capabilities into the existing ATM infrastructure. The ATM serves both its traditional cash dispensing function and new authentication verification function, allowing the same device to be used for both financial transactions and identity verification without requiring separate authentication hardware
Solution Approach 2:
The patent introduces an intermediary component (authentication module or software layer) that bridges the existing ATM infrastructure and new authentication requirements. This intermediary enables the ATM to communicate with external authentication services and process authentication requests without modifying the core ATM hardware, thus maintaining compatibility while adding new functionality
2Reliability
If bespoke physical authenticators are deployed to improve security, then authentication reliability is enhanced, but adoption is limited due to lack of ubiquity and high deployment cost
Solution Approach 1:
The patent leverages the ubiquity of existing ATMs to provide widespread authentication capability. Instead of deploying new specialized authenticators, the system makes the already-ubiquitous ATM serve authentication purposes, thereby achieving both high security reliability and wide adoption simultaneously through the existing global ATM network
Solution Approach 2:
The patent enables the existing ATM infrastructure to serve itself by providing authentication services. The ATM uses its own established security mechanisms, user authentication processes, and physical presence requirements to naturally provide authentication capabilities without requiring additional user education or behavioral changes, thus facilitating rapid adoption
3Measurement precision
If user authentication data is collected and stored to verify identity and location, then authentication accuracy is improved, but user privacy and anonymity are compromised
Solution Approach 1:
The patent extracts only the essential authentication elements needed for verification (such as verification of physical presence at ATM, authentication credentials) while leaving out unnecessary personal information. The system processes and verifies authentication data without requiring collection or storage of detailed user identity information, thereby maintaining verification accuracy while preserving anonymity through selective data extraction
Data Source
AI summary
A process for validating a user using existing secure infrastructure, such as Automated Teller Machines (ATMs). The process can be modified to incorporate further aspects that verify information about a user (e.g., an identifier of a user, a location of the user) or verifying capabilities of a user (e.g., ability to receive messages via a communication channel, such as a telephone number, email address, or mailing address).