Authentication System Using Presence Data and Temporary Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems, reliant on personal smartcards or badges, lack an additional level of security for accessing services, necessitating a more robust authentication method.
Innovation Solution
A method involving a communication device and an access control device, where a user's presence is verified through a database check, followed by a secret code entry process, with a temporary code generated by a service provider server and communicated via a network server, allowing access to services like ATMs or restricted areas using any communication device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smartcards or badges are used for access control, then user identification is enabled, but security level is insufficient
Solution Approach 1:
The patent combines multiple authentication factors (communication device identification, presence data verification, secret code input, and temporary code validation) into a unified authentication system. This merging of multiple security layers resolves the contradiction by achieving high security reliability without requiring complex individual components, as the system integrates these elements into a coordinated authentication flow.
Solution Approach 2:
The application server acts as an intermediary between the access control device and the service provider server. It coordinates the authentication process by receiving requests, verifying presence data, managing secret code validation, and obtaining temporary codes. This intermediary role simplifies the overall system architecture while maintaining high security standards through centralized coordination of multiple authentication steps.
2Reliability
If traditional access control methods are used, then access is granted to authorized users, but additional security verification is lacking
Solution Approach 1:
The system performs preliminary verification of presence data before initiating the secret code authentication process. The application server checks whether the communication device is legitimately associated with the access control device through verified presence data, establishing a preliminary trust relationship. This preliminary action enables subsequent authentication steps to proceed smoothly, maintaining ease of operation while enhancing security through layered verification.
3Ease of operation
If smartcards are required for access, then security is maintained, but user convenience is reduced
Solution Approach 1:
The patent enables universal access through any communication device (mobile phone, tablet, computer) by verifying presence data and using secret codes, eliminating the need for device-specific smartcards or badges. The system achieves multi-functionality by supporting various communication devices and protocols (Bluetooth, NFC, Wi-Fi) while maintaining security through standardized authentication processes. This universality improves user convenience without compromising security reliability.
Data Source
AI summary
A technique is provided for authentication of a user accessing an access control device. The technique includes an application server that receives a request from a communication device associated with the user or the access control device. The request contains an identifier of the communication device, an identifier of the access control device and presence data indicating that the communication device is associated with the access control device. The application server checks a database for the user's subscription, sends a response to the access control device to request the user to enter a secret code via an interface of the access control device, receives a temporary secret code generated by a service provider server if the entered secret code is correct, and sends a message containing the temporary secret code to the communication device to request the user to enter the secret code via the interface of the access control device.