Context-Switching Authentication via NFC Card Tap and BLE Link
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for accessing sensitive information over public networks are cumbersome and prone to human error due to the need for multiple user inputs, often involving third-party data providers and additional verification steps.
Innovation Solution
A method and system for context-switching authentication using Bluetooth Low Energy (BLE) communication between devices, enabling a single user action, such as tapping a contactless card, to authenticate a connection request, combining NFC and BLE protocols to verify user identity on multiple devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional multi-step authentication processes are used, then security is improved, but user convenience and operation simplicity deteriorate
Solution Approach 1:
The patent combines multiple authentication factors (possession of mobile device, possession of contactless card, and knowledge of PIN) into a single integrated authentication flow. The mobile device automatically coordinates between NFC card reading, token generation, and credential transmission to the server, merging what would traditionally be separate authentication steps into one seamless user action of tapping the card and entering a PIN.
Solution Approach 2:
The mobile device performs self-service functions by automatically generating authentication tokens, reading contactless card data via NFC, and transmitting credentials to the server without requiring manual intervention for each step. The device autonomously manages the authentication process after the user initiates it by tapping the card and entering the PIN.
2Reliability
If multiple authentication verification steps are implemented, then authentication reliability is improved, but process complexity increases
Solution Approach 1:
The mobile device acts as an intermediary between the contactless card, the user, and the authentication server. It reads data from the card via NFC, generates authentication tokens, and transmits credentials to the server, thereby simplifying the overall process while maintaining multiple verification steps. The intermediary handles the complexity internally while presenting a simple interface to the user.
Solution Approach 2:
The authentication process is segmented into distinct functional modules: NFC card reading, PIN verification, token generation, and credential transmission. Each module handles a specific aspect of authentication, allowing the system to maintain complex verification logic while keeping the overall process organized and manageable through clear separation of concerns.
3Reliability
If third-party data providers are involved in authentication, then authentication thoroughness is improved, but system complexity and time consumption increase
Solution Approach 1:
The authentication credentials and token generation logic are pre-configured in the mobile device application. When authentication is needed, the device quickly retrieves and processes the pre-prepared authentication data from the contactless card and generates tokens instantly, eliminating the need for real-time communication with third-party data providers during the authentication moment.
Solution Approach 2:
The patent replaces traditional mechanical authentication methods (manual verification, phone calls, physical tokens) with electronic and cryptographic mechanisms. NFC technology enables contactless data transfer, while cryptographic token generation provides secure authentication without requiring physical interaction or lengthy verification processes involving third parties.
Data Source
AI summary
Systems and methods is provided for implementing a strong user authentication across a public network. One operational aspect of the disclosed systems and methods involves the integration of a browser functionality to communicate with processes and hardware elements on a device initiating the network connection to implement a context-switching authentication scheme. Disclosed system and process further involves an implementation of a two-factor strong authentication based on a single authentication input from a user involving an NFC read of a contactless card by a mobile device within Bluetooth proximity of the device initiating the network connection.