Device-Based Authentication via Communication Log Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online authentication methods, such as user names and passwords, are vulnerable to man-in-the-middle attacks and do not effectively restrict access to authorized devices, allowing attackers to access accounts from any location using compromised credentials.
Innovation Solution
A device-based authentication system that sends an authentication request to a module analyzing communication logs to verify if a login request originated from a list of authorized computing devices designated by the user, using device identifiers like IMEI or IMSI numbers to ensure secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user names and passwords are used for authentication, then ease of operation is improved, but security is worsened because attackers can access accounts from any location using compromised credentials
Solution Approach 1:
The authentication system is segmented into multiple independent verification components: device identification (device ID), location verification (GPS coordinates), and credential validation. This segmentation allows the system to verify both the user's identity and the authenticity of the device being used, preventing unauthorized access while maintaining ease of operation for legitimate users.
2Reliability
If one-time codes are sent via SMS or security tokens are provided, then access security is improved, but device complexity is worsened due to additional authentication components
Solution Approach 1:
The system utilizes the mobile device's built-in capabilities (GPS receiver, communication interfaces) to perform authentication verification without requiring external security tokens or additional hardware components. The device itself provides the verification data, eliminating the need for separate authentication devices and reducing overall system complexity while maintaining security.
3Reliability
If additional authentication means are imposed for critical services, then access security is improved, but ease of operation is worsened due to multiple authentication steps
Solution Approach 1:
The system merges device identification, location verification, and credential validation into a single integrated authentication process. The authentication server simultaneously verifies multiple factors (device ID, GPS location, credentials) in one operation, providing enhanced security without requiring users to complete multiple separate authentication steps, thus maintaining ease of operation.
Data Source
AI summary
Methods, systems, and computer-readable media for providing device-based authentication for secure online access are provided. An authentication request is received from an online service. The authentication request may be associated with a login request received by the online service from a user. The authentication request may further indicate a list of device identifiers for computing devices connected to a provider network and previously designated by the user as authorized to access the online service. Communication logs collected from the provider network are analyzed to determine whether the login request originated from one of the authorized computing devices based on the list of device identifiers. If it is determined that the login request originated from one of the authorized computing devices, an indication is returned to the online service that the login request was received from an authorized computing device.