Challenge-Response Authentication via Audio I/O for Web Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing node locking technologies are not accessible to web applications and require modifications to the operating system or specific hardware features, making them unsuitable for use with existing devices and web-based applications.
Innovation Solution
A challenge-response method using DRM protected audio content, where a nonce is embedded within the audio and decrypted by a secured module on the client device, allowing the device to provide a response that authenticates its specific hardware, accessible to both native and web applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If node locking technologies use SIM functionality or specific hardware features, then authentication security is improved, but device compatibility and ease of operation deteriorate
Solution Approach 1:
The patent introduces an intermediary system consisting of audio output device, audio input device, and signal processing components that mediates between the secured module and the external environment. This intermediary approach allows the challenge-response authentication to work through standard audio I/O interfaces rather than requiring direct access to protected hardware components, thereby improving compatibility while maintaining security.
Solution Approach 2:
The patent replaces direct mechanical/hardware access to SIM or specialized authentication hardware with an audio-based challenge-response system. Instead of requiring physical access to protected components, the system uses audio signal generation, playback, and recognition through standard speakers and microphones, substituting a mechanical hardware-dependent system with an audio signal processing system that works across different device types.
2Reliability
If node locking technologies require operating system modifications, then authentication functionality is improved, but system complexity and ease of deployment worsen
Solution Approach 1:
The patent implements self-service authentication where the client device itself generates and processes the challenge-response pairs using its own audio I/O capabilities and secured module. The device serves its own authentication needs without requiring external authentication servers or complex OS-level authentication infrastructure, thereby reducing system complexity while maintaining authentication functionality.
Solution Approach 2:
The patent creates a universal authentication mechanism that works across different operating systems and device types by using standard audio I/O interfaces. The challenge-response system is designed to be platform-agnostic, allowing the same authentication protocol to function on mobile devices, desktop computers, and other platforms without requiring OS-specific modifications or specialized hardware.
3Reliability
If web applications need node locking access, then security control is improved, but accessibility and ease of operation deteriorate
Solution Approach 1:
The patent uses the audio system as an intermediary that web applications can access through standard browser capabilities. Instead of requiring web applications to directly access protected hardware or OS-level authentication functions, the system mediates authentication through audio I/O which is universally accessible to web applications, thereby improving accessibility while maintaining security control.
Data Source
Figure 1~2
Figure 3
AI summary
There is described a challenge-response method for a client device. The method comprises steps of: (a) receiving challenge data, wherein the challenge data is content encrypted using an encryption key, the content including a nonce; (b) using a secured module of the client device to access the content by decrypting the challenge data using a decryption key of the secured module, the decryption key corresponding to the encryption key; (c) processing a version of the content output by the secured module so as to obtain the nonce; and (d) providing the nonce as a response. There is also described a client device for implementing the above challenge-response method. There is also described a computer program which, when executed by a processor, causes the processor to carry out the above challenge-response method. Finally, there is described a computer readable medium storing the above-mentioned computer program.