Cell Site Encrypted OTP for Geofence Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for online services lack robustness in verifying user location, particularly against IP masquerading and location spoofing, which can compromise the security of geographically restricted services.
Innovation Solution
A computer-implemented method that utilizes a user's location as an additional security factor by encrypting a one-time password with a private key from a public-private key pair specific to the cell site the user's mobile device is communicating with, ensuring that only users within a predefined geofence can access the digital service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures (IP address verification) are used for online services, then the system is simple to operate, but the security against IP masquerading and location spoofing is insufficient
Solution Approach 1:
The patent introduces a mobile network operator (MNO) as an intermediary between the user and the service provider. The MNO acts as a trusted mediator that provides location verification services through cell site information, enabling secure location-based authentication without requiring the service provider to implement complex location verification systems themselves.
Solution Approach 2:
The patent replaces traditional mechanical/IP-based location verification with a wireless communication-based system using mobile network cell sites. Instead of relying on IP address geolocation (which can be spoofed), the system uses the mobile device's connection to specific cell sites as a more reliable location indicator, substituting one verification mechanism with a more secure alternative.
2Reliability
If cell site-based location verification is implemented, then security against location spoofing is improved, but the device complexity and resource requirements increase
Solution Approach 1:
The mobile device automatically provides its location information through its existing mobile network connection. The device's mobile module naturally connects to cell sites, and this connection information is used for verification without requiring additional hardware or manual user input. The system leverages the device's existing self-service capabilities for location verification.
Solution Approach 2:
The mobile device's existing mobile communication module serves multiple functions: standard voice/text communication and location verification. By utilizing the same cellular connection for both communication and location authentication, the system avoids adding separate dedicated location verification hardware or resources to the user device.
3Measurement precision
If multiple cell sites are monitored for geofence coverage, then location accuracy within the geofence is improved, but the computational complexity and time required for verification increases
Solution Approach 1:
The system pre-establishes geofence boundaries and identifies all cell sites that cover each geofence area in advance. When a user requests service, the verification process simply checks whether the user's current cell site is among the pre-identified sites covering the geofence, rather than calculating location from scratch. This preliminary preparation significantly reduces verification time while maintaining accuracy.
Solution Approach 2:
The patent divides the geofence verification process into separate segments: the service provider defines geofence boundaries and associated cell sites, the MNO provides cell site identification, and the system checks membership. This segmentation allows each component to operate independently and efficiently, reducing overall verification complexity and time.
Data Source
AI summary
A computer-implemented method, a computer program product, and a computer system for using a user location as a security factor for online services. Upon receiving from a computing device of a user a request for a digital service allowed in a geofence, a first computer hosting a digital service provider generates an original one-time password (OTP) and sends the original OTP to a second computer hosting a communication service provider. The second computer encrypts the original OTP using a private key for a mobile network cell communicating with a mobile device of the user and sends an encrypted OTP to the mobile device. Upon receiving the encrypted OTP from the computing device, the first computer decrypts the encrypted OTP, using public keys for one or more cells covering the geofence. Upon determining a decrypted OTP matches the original OTP, the first computer allows the digital service to be provided.