Audio Channel User Authentication via Mobile Device
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods for computing devices are inconvenient and burdensome, requiring manual password entry and additional hardware, and do not fully utilize the capabilities of mobile devices for authentication.
Innovation Solution
A system that uses a mobile device to authenticate users on a computing device via an audio channel, where the client device broadcasts a token encoded in an audio message to the mobile device, which decodes and sends credentials to an authentication server for verification, allowing users to log in without manual input, even on devices with limited input/output capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual password entry is used for authentication, then security can be maintained, but user convenience and time efficiency deteriorate due to repeated complex password input
Solution Approach 1:
The system performs preliminary actions by storing user credentials securely in the mobile device beforehand and establishing authentication protocols in advance. When authentication is needed, the pre-configured mobile device can immediately respond to authentication challenges without requiring the user to manually input credentials, thus resolving the time loss and convenience issues.
Solution Approach 2:
The mobile device serves itself as an authentication credential repository and transmitter. The device automatically manages credentials, generates authentication responses, and communicates with authentication servers without requiring manual user intervention for each authentication event, eliminating repeated password entry while maintaining security.
2Reliability
If additional authentication hardware such as fingerprint sensors or smartcards is deployed, then authentication security is improved, but device complexity and cost increase
Solution Approach 1:
The mobile device performs multiple functions: it stores credentials, generates authentication responses, communicates with servers, and serves as a universal authentication token across different computing devices. This eliminates the need for device-specific authentication hardware like fingerprint sensors or smartcards, reducing overall system complexity while maintaining or improving security through software-based flexible authentication mechanisms.
Solution Approach 2:
The mobile device acts as an intermediary between the user and the authentication system. Instead of requiring the user to directly interact with complex authentication hardware on each computing device, the mobile device mediates the authentication process by handling credential storage, response generation, and server communication, thereby simplifying the user interface and reducing hardware complexity on client devices.
3Productivity
If single sign-on systems are implemented across multiple platforms, then the frequency of manual login is reduced, but system overhead and management complexity increase
Solution Approach 1:
The mobile device autonomously manages authentication credentials and automatically handles the authentication process across different platforms and applications. The device self-configures authentication protocols, stores credentials securely, and automatically transmits authentication responses without requiring centralized system management or complex SSO infrastructure setup, thereby improving productivity while minimizing management overhead.
4Ease of operation
If audio channel authentication is implemented, then user convenience is improved by eliminating manual input, but potential security vulnerabilities from audio eavesdropping may arise
Solution Approach 1:
The mobile device acts as a secure intermediary that receives authentication challenges, retrieves stored credentials, generates encrypted responses, and transmits them back to the authentication server. The audio channel is used only for one-way challenge transmission to the mobile device, not for bidirectional communication. This mediator approach allows convenient audio-based initiation while maintaining security through encrypted credential transmission and server-side verification, mitigating eavesdropping risks.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method provides a convenient, secure, and efficient way to authenticate users by eliminating the need for manual password entry and additional hardware, enabling authentication with minimal user interaction and supporting applications where traditional methods are impractical, such as in automobiles or for visually impaired individuals.
Implementation Method 1
The client then broadcasts an audio transmission containing the token to the mobile device over an audio channel using a data-over-sound transmission. That is, the client plays the audio message encoded with the token via a multimedia speaker.
Implementation Method 2
The mobile device receives the audio transmission via a microphone, decodes the token and the server identity from the audio transmission
Data Source
AI summary
A system is described for authenticating a user on a client device using the user's mobile device and utilizing the audio channel. An authentication server receives a request from the client to initiate a session for the user, creates the session, and sends a session token back to the client along with a request for authentication. The client broadcasts an audio transmission containing the token to the mobile device over an audio channel using data-over-sound transmission. The mobile device receives the transmission via a microphone, obtains the token and the server identity from the transmission, and sends user credentials that are stored on the mobile device along with the token identifying the session directly to the authentication server. The server verifies the received credentials, confirms the token, and logs the user into the session.