Audio Token-Based Device Account Bootstrapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing process of adding a user account to a device, known as 'bootstrapping,' lacks both security and usability, as it typically involves manual input of credentials which can be cumbersome and insecure.
Innovation Solution
A method and system that utilize an audio signal broadcast by an unassociated device to detect a token, which is then used to send authorization instructions to a computing device associated with the user account, allowing credentials to be sent to the unassociated device for account addition, leveraging proximity verification and voice or text-based authorization commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual typing of username, password, code is used for bootstrapping, then the device can be associated with a user account, but the process is cumbersome and lacks security
Solution Approach 1:
The patent replaces the mechanical manual typing process with an automated audio-based system. The unassociated device broadcasts an audio signal containing a token, the associated device captures this audio signal and automatically processes the authentication, eliminating the need for manual typing of credentials while enhancing security through automated token verification and proximity-based authentication.
2Productivity
If manual credential input is required, then user account can be added to device, but the process is time-consuming and error-prone
Solution Approach 1:
The unassociated device performs preliminary action by broadcasting an audio signal containing an authentication token before the actual account addition process. This pre-established token allows the associated device to quickly verify identity and proceed with automated credential transmission, significantly reducing the time required for account addition compared to manual input methods.
Solution Approach 2:
The system enables self-service automation where the associated device automatically captures the audio signal, extracts the token, verifies it with the service provider, and transmits credentials without requiring user intervention for typing or form filling. This automated self-service process eliminates manual errors and accelerates the account addition process.
3Reliability
If traditional bootstrapping method is used, then device association is achieved, but security vulnerabilities exist due to manual credential handling
Solution Approach 1:
The patent introduces an audio-based token as an intermediary authentication mechanism. Instead of directly handling sensitive credentials through manual input, the system uses an audio-broadcast token as a secure intermediary that can be automatically captured and verified. This intermediary approach enhances security by eliminating direct exposure of passwords while adding minimal complexity through the audio signal exchange process.
Data Source
AI summary
A method of adding a user account to an unassociated device may include detecting, by an associated device that is associated with a user account, an audio signal broadcast by an unassociated device that is not associated with the user account, where the audio signal includes a token. The method may include sending the token to a computing device associated with a service provider of the user account, receiving, by the associated device, a command, determining that the received command is an authorization command, and in response to determining that the received command is an authorization command, sending one or more authorization instructions to the computing device. The one or more authorization instructions may instruct the computing device to send one or more credentials associated with the user.