Biometric Authentication for IP Telephones in Hoteling

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In office hoteling environments, frequent workers face inconvenience due to the need to repeatedly input user identification and passwords on IP telephones for VoIP services, especially when using temporarily assigned offices for extended periods.

Innovation Solution

A communications device equipped with a biometric reader that stores strong authentication credentials locally, allowing users to authenticate using a single biometric input, eliminating the need for repeated credential entry.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users repeatedly input strong authentication credentials on IP telephones for office hoteling, then security is maintained, but user convenience deteriorates and authentication time increases

Engineering Contradiction:

Improveauthentication securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication by capturing and verifying biometric data (fingerprint, facial recognition, or iris scan) when the user first accesses the IP telephone. The authenticated user profile is then stored in memory, allowing subsequent automatic logins without requiring repeated credential entry. This preliminary action resolves the contradiction by establishing security upfront while enabling convenient reuse.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the user's biometric authentication data and stores it locally in the IP telephone's memory. This copied authentication information is then used for rapid re-authentication without requiring the user to re-enter credentials. The copying mechanism maintains security verification while dramatically improving ease of operation for repeated access.

Inventive Principle:

Principle #26Copying

2Reliability

If users repeatedly input strong authentication credentials on IP telephones, then unauthorized access is prevented, but authentication time increases

Engineering Contradiction:

Improveaccess controlVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs authentication in advance by verifying biometric data when the user first accesses the device. The authenticated session is then stored in memory, allowing rapid re-authentication through simple biometric scanning rather than time-consuming credential re-entry. This resolves the time loss while maintaining access control.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system replaces the manual mechanical process of typing usernames and passwords with automated biometric recognition (fingerprint scanning, facial recognition, or iris scanning). This substitution dramatically reduces authentication time while maintaining reliable access control through physiological verification.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Adaptability or versatility

If IP telephones are deployed in temporarily assigned offices, then communication accessibility is improved, but repeated authentication requirements increase operational complexity

Engineering Contradiction:

Improvecommunication accessibilityVSAvoidauthentication process complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system performs preliminary biometric authentication and stores the verified user profile in memory. When the same user returns to the same or different temporarily assigned office, the system automatically retrieves the stored authentication data and performs rapid re-authentication. This maintains adaptability across multiple locations while simplifying the authentication process.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements universal biometric authentication that works across multiple temporarily assigned offices and different user profiles. The biometric reader and memory system provide multi-functional authentication capability that adapts to various users and locations without increasing operational complexity, as the same biometric process serves all authentication needs.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9497191B2Multiple user authentications on a communications device

Publication Date: 2016.11.15 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

A communications device provides a biometric reader to authenticate users onto the communications device based on a single biometric input. The communications device maintains a local copy of the strong authentication credentials, such as a user identification and password, and the biometrics which were previously input by users of the communications device. Then, rather than requiring re-entry of the strong authentication credentials to authenticate (or re-authenticate) these users onto the communications device, the communications device is able to authenticate the users based on the input of the appropriate biometric. When a biometric input is received, the communications device identifies the locally stored strong authentication credentials that is associated with the input biometric, and uses the locally stored strong authentication credentials to authenticate the user.