Control Token Authentication for Offline User Data Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication systems struggle to ensure secure access to user data when the user's device is in a low power mode or offline, as they often require network connections for authentication.

Innovation Solution

The proposed authentication system utilizes a control token, which can be a hardware token like a smartwatch or key fob, to authenticate users even when their device is in a low power mode. This token uses communication protocols like NFC, UWB, or Bluetooth to facilitate authentication, ensuring secure access to user data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If network connection is required for authentication, then authentication security can be maintained through centralized verification, but authentication fails when user device is offline or in low power mode

Engineering Contradiction:

Improveauthentication availabilityVSAvoidauthentication accessibility

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The authentication system is segmented into two independent parts: a control token that stores authentication credentials locally and can operate offline, and a verifier device that performs verification. This segmentation allows the control token to function independently without requiring network connection to the user device, resolving the contradiction between centralized verification security and offline accessibility.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The control token acts as an intermediary between the user device and the verifier device. It holds authentication credentials and can perform verification locally when the user device is unavailable, serving as a mediator that enables authentication without direct network connection to the user device while maintaining security through cryptographic verification.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If user device processes all authentication operations, then centralized control is maintained, but authentication cannot proceed when device is in low power mode

Engineering Contradiction:

Improveauthentication functionalityVSAvoiduser device power consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

Authentication functionality is extracted from the user device and placed into a separate control token. The control token independently stores authentication credentials and performs verification operations, removing the burden from the user device. This allows authentication to proceed without consuming significant power from the user device, resolving the contradiction between maintaining authentication functionality and reducing power consumption.

Inventive Principle:

Principle #2Taking out (Extraction)

3Reliability

If hardware token is introduced for offline authentication, then authentication availability is improved, but system complexity increases

Engineering Contradiction:

Improveauthentication availabilityVSAvoidsystem architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The control token is designed as a universal authentication device that can function in multiple scenarios: it can authenticate users when the user device is online, when it is offline, when the user device is in low power mode, or when network connectivity is unavailable. This multi-functionality justifies the added hardware component by providing robust authentication availability across diverse operating conditions.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The system effectively allows secure access to user data even when the user's device is not fully functional, enhancing security and maintaining user control over their data by leveraging a local hardware token for authentication.

Implementation Method 1

authenticating the data input from the user using a control token uses near field communication

Methodology Applied

Scientific EffectNear field communication: Electromagnetic Induction

Implementation Method 2

authenticating the data input from the user using a control token uses one of ultra-wideband communication, Bluetooth communication, and near field magnetic induction communication

Methodology Applied

Scientific EffectUltra-wideband communication: Electromagnetic Induction

Implementation Method 3

authenticating the data input from the user using a control token uses one of ultra-wideband communication, Bluetooth communication, and near field magnetic induction communication

Methodology Applied

Scientific EffectBluetooth communication: Electromagnetic Induction

Implementation Method 4

authenticating the data input from the user using a control token uses near field magnetic induction communication

Methodology Applied

Scientific EffectNear field magnetic induction communication: Electromagnetic Induction

Data Source

PatentEP4572232A1Authentication hardware token ensuring control of user data

Publication Date: 2025.06.18 NXP BV

Figure 1~2
Figure 3~4
Figure 5

AI summary

A method of accessing secure data on a user device, wherein authentication access of the user device is not available, including: receiving a request from a requester to access secure data in the user device; receiving authentication input from a user; authenticating a data input from the user using a control token; and providing access to secure data to the requester.