Connected Device Authentication via Active Channel Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for sensitive data transmission from computing devices are inadequate in preventing unauthorized access, as they do not effectively prevent theft of one-time passwords and require additional user actions, which can be inconvenient.
Innovation Solution
Implementing a system that requires a predetermined number of pre-registered connected devices to be actively connected before sensitive data can be transmitted, using device identifiers stored on the computing device or a blockchain for verification, thereby enhancing security without additional user effort.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time passwords are used for authentication, then security is improved, but the system becomes vulnerable to device theft and compromise
Solution Approach 1:
The authentication system is segmented into multiple independent factors: device connection status, active connection verification, and authentication authorization. This segmentation ensures that compromise of one factor (e.g., device theft) does not automatically compromise the entire authentication system, as each factor must be satisfied independently.
Solution Approach 2:
The system performs preliminary verification of device connection status and active connections before allowing authentication to proceed. By checking whether required devices are connected and active in advance, the system prevents authentication from occurring in compromised states without requiring additional user actions at the moment of use.
2Reliability
If biometric data or PIN verification is required for each transaction, then security is improved, but user convenience deteriorates due to additional actions needed
Solution Approach 1:
The authentication system performs self-service verification by automatically checking device connection status and active connection requirements without requiring explicit user actions. The system autonomously verifies whether the necessary devices are connected and active, eliminating the need for users to manually provide biometric data or PINs for each transaction.
Solution Approach 2:
Device authentication requirements are established in advance through preliminary configuration, where users can register which devices should be present for authentication. This preliminary setup allows the system to automatically verify connection requirements during transactions without requiring additional user actions at the time of use.
3Reliability
If multiple connected devices must be actively connected for authentication, then security against device theft is improved, but system complexity increases
Solution Approach 1:
The authentication system uses universal verification mechanisms that can check multiple device connection requirements through a single integrated process. The same verification framework handles various scenarios (different numbers of required devices, different connection types) without requiring separate complex systems for each case, thereby managing complexity while maintaining robust security.
Data Source
AI summary
A method for using the active connection of connected devices for additional security in the conveyance of sensitive data from a computing device includes: storing sensitive data; storing one or more device identifiers, wherein each device identifier is associated with a connected device separate from the computing device; receiving a user instruction requesting use of the sensitive data; detecting one or more active communication channels between the computing device and external connected devices; identifying, for each of the detected one or more active communication channels, a device identifier associated with the respective external connected device; verifying that at least one of the identified device identifiers is included in the one or more stored device identifiers; and transmitting the sensitive data after the verification.