Authenticated Actions Without Internet Connectivity

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users are unable to perform authenticated actions, such as making payments or completing orders, when Internet connectivity is unavailable due to weak cellular signals or mobile data service limitations, as existing technologies do not provide a reliable failover communication channel.

Innovation Solution

Utilizing Unstructured Supplementary Service Data (USSD) as a failover communication channel to enable authenticated actions when Internet access is not available, along with the potential use of SMS messages or voice calls, allowing pre-shared encryption keys or authentication tokens for secure operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If Internet connectivity is used for authenticated actions, then authentication security is maintained, but service availability deteriorates when Internet is unavailable

Engineering Contradiction:

Improveservice availabilityVSAvoidcommunication channel complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system dynamically switches between Internet-based authentication and USSD-based authentication based on network availability. When Internet connectivity is detected, the system uses standard Internet authentication flows. When Internet connectivity is unavailable, the system automatically transitions to USSD communication channel for authentication, providing adaptive behavior that maintains service availability while managing complexity through conditional logic

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

USSD messages serve as an intermediary communication channel between the mobile device and the authentication server when the primary Internet channel is unavailable. This intermediary mechanism allows authenticated actions to proceed through an alternative path, maintaining service continuity without requiring direct Internet connectivity

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If USSD is used as failover channel, then service availability improves when Internet is unavailable, but authentication security may deteriorate

Engineering Contradiction:

Improveservice availabilityVSAvoidauthentication data security

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The system performs preliminary actions by establishing security credentials and authentication tokens before the failover to USSD occurs. Encryption keys and authentication data are pre-configured and stored securely on the device, allowing the USSD channel to transmit already-encrypted or tokenized authentication information rather than sensitive raw data, thus maintaining security during the alternative communication path

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system changes the parameter of communication protocol from Internet-based HTTP/HTTPS to USSD protocol when Internet connectivity is unavailable. This parameter change includes adjusting the authentication data format to be suitable for USSD message constraints (182 alphanumeric characters), while maintaining security through pre-established encryption and tokenization mechanisms

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If multiple communication channels are supported, then adaptability improves, but device complexity increases

Engineering Contradiction:

Improvecommunication channel adaptabilityVSAvoidsystem architecture complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system implements dynamic channel selection logic that automatically detects Internet connectivity status and switches between Internet-based authentication and USSD-based authentication. This dynamic behavior provides adaptability to different network conditions while managing complexity through a unified authentication framework that handles multiple channels through conditional routing rather than parallel complex systems

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The authentication system is designed with multi-functionality to handle both Internet-based authentication and USSD-based authentication through a single unified framework. The same authentication logic and security mechanisms serve both communication channels, reducing overall system complexity while maintaining adaptability across different network environments

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11516662B2Performing authenticated actions without internet connectivity

Publication Date: 2022.11.29 AMAZON TECH INC

AI summary

Disclosed are various embodiments for performing authenticated actions when Internet connectivity is not available. An application executed in a first computing device determines that an authenticated action is requested to be performed. The application determines that Internet connectivity is unavailable to the first computing device. The application initiates the authenticated action using a communication channel that connects the first computing device to a second computing device. The Internet is inaccessible through the communication channel.