Context-Aware Step-Up Authentication for Mobile Session Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unintended and unauthorized interactions with mobile applications on devices pose security threats, as unlocked devices can be exploited through various means such as being placed in pockets, laid down without locking, or unlocked via connected devices, leading to potential data breaches.
Innovation Solution
Implementing context-aware step-up authentication that monitors threat scenarios, such as a device being placed in a pocket or laid down without locking, and proactively displays a masking screen followed by a step-up authentication screen to ensure only authorized users can resume the mobile application session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the mobile device remains unlocked to allow convenient access to the mobile application, then ease of operation is improved, but security is worsened due to unauthorized interactions
Solution Approach 1:
The system dynamically adjusts the authentication state based on real-time sensor data and usage patterns. The mobile application transitions between authenticated and unauthenticated states automatically, allowing the device to be unlocked without requiring the user to manually lock it. The system monitors for threat scenarios (device in pocket, device laid down, connected to unauthorized devices) and dynamically triggers step-up authentication when threats are detected, thereby maintaining ease of operation while improving security.
2Reliability
If step-up authentication is always required to access the mobile application, then security is improved, but ease of operation is worsened due to frequent authentication requests
Solution Approach 1:
The system performs preliminary authentication before the threat scenario is fully realized. By monitoring sensor data continuously and detecting early signs of potential unauthorized access (such as the device being placed in a pocket or connected to an unauthorized device), the system triggers step-up authentication proactively rather than reactively. This allows legitimate users to anticipate and complete authentication before actual unauthorized access occurs, maintaining security while minimizing disruption to normal usage.
3Reliability
If the mobile application monitors multiple sensor data types to detect threat scenarios, then security is improved, but device complexity is worsened
Solution Approach 1:
The system leverages existing sensors already present in modern mobile devices (accelerometer, gyroscope, proximity sensor, Bluetooth module) and repurposes them for security monitoring. These sensors were originally designed for other functions (motion detection, screen activation, wireless communication) but are universally applicable to detecting threat scenarios. By using multi-functional sensors rather than adding dedicated security hardware, the system improves security without significantly increasing device complexity.
Data Source
AI summary
A method for securing a mobile device includes determining whether the mobile device is unlocked whether a user is logged into a mobile application running on the mobile device. The method further includes determining, when the mobile device is unlocked while the user is logged into the mobile application, whether the mobile device is currently in a threat scenario by analyzing data from one or more sensors. The threat scenario indicates that the mobile device is exposed to unintended and malicious interactions. The method further includes displaying, when it is determined that the mobile device is currently in the threat scenario, a step-up authentication screen that replaces or at least partially covers an application screen of the mobile application. The method further includes restoring the application screen of the mobile application in response to receiving a valid authentication input from the user on the step-up authentication screen.