Context-Aware Password Selection for Wireless Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smartphones lack effective security measures to prevent unauthorized access, as simple passwords can be easily guessed by unauthorized users, potentially leading to data breaches and privacy invasion, especially when the device is stolen or misplaced.
Innovation Solution
Implementing a method where devices use different passwords based on location and environmental context, with a simple password for trusted environments and complex passwords for untrusted ones, utilizing paired tokens like Bluetooth headsets to determine the security level and prompt the appropriate password for unlocking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a simple four digit security code is used for unlocking the smartphone, then ease of operation is improved, but security is worsened as the code can be easily determined by wrongdoers
Solution Approach 1:
The patent changes the parameter of password complexity dynamically based on the detected environment. In untrusted environments, a complex password requirement is imposed, while in trusted environments, a simple password or biometric authentication is allowed. This resolves the contradiction by making the security parameter adaptive rather than static.
Solution Approach 2:
The patent introduces dynamic behavior to the authentication system by detecting environmental context (trusted vs. untrusted) and adjusting the authentication requirements accordingly. The system transitions between different security states based on real-time environmental assessment, making the security mechanism flexible and context-aware.
2Reliability
If a complex password is always required for unlocking the smartphone, then security is improved, but ease of operation is worsened as it reduces convenience for the rightful owner
Solution Approach 1:
The patent dynamically changes the password complexity parameter based on environmental trust assessment. In trusted environments (e.g., home, office, or when paired tokens are detected), the system reduces authentication requirements to simple passwords or biometrics. In untrusted environments, complex passwords are required. This resolves the contradiction by making convenience and security mutually adaptive rather than fixed opposites.
Solution Approach 2:
The system implements dynamic authentication policies that adjust security requirements based on real-time environmental context. The patent uses sensors and token detection to assess trust levels, then dynamically modifies authentication behavior. This allows the rightful owner to experience high convenience in trusted environments while maintaining strong security in untrusted environments.
3Reliability
If location-based password complexity is implemented, then security in untrusted environments is improved, but device complexity is worsened due to additional location determination and password selection logic
Solution Approach 1:
The patent implements self-service mechanisms where the device automatically determines its own environmental context using built-in sensors (GPS, accelerometers, gyroscopes) and automatically selects the appropriate authentication policy without user intervention. The system autonomously assesses trust levels and adjusts security requirements, reducing the perceived complexity for users while maintaining sophisticated security logic.
Solution Approach 2:
The patent makes the device's existing sensors and processing capabilities serve multiple functions: they continue to provide location services, navigation, and fitness tracking while simultaneously enabling environmental trust assessment for security purposes. This multi-functionality reduces the need for additional dedicated hardware or systems, mitigating the increase in overall device complexity.
Data Source
AI summary
In one embodiment, a method includes determining a location of a device relative to a reference, and identifying a first password from a plurality of passwords for use to unlock the device based on the location of the device relative to the reference. The plurality of passwords includes at least one complex password and at least one simple password. The method also includes prompting for input arranged to unlock the device, obtaining the input, and determining when the input matches the first password. When it is determined that the input matches the first password, the device is unlocked.