Device Authentication via Environmental Movement Logs

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing device authentication methods rely on insecure identifiers like IP and MAC addresses, making it challenging to uniquely identify and authenticate devices, especially in scenarios where multiple devices have similar configurations.

Innovation Solution

A device authentication system that utilizes a detailed history of a device's movement, recorded in accelerometer, orientation, and magnetic field logs, to create a unique device key that combines both internal and external state attributes for authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If IP and MAC addresses are used as device identifiers, then device authentication can be implemented, but the identifiers are insecure and can be easily spoofed

Engineering Contradiction:

Improvedevice authentication securityVSAvoididentifier spoofing vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by collecting and storing environmental data (accelerometer, orientation, magnetic field) during a registration phase before authentication is needed. This pre-collected data serves as a unique device fingerprint that cannot be easily spoofed, resolving the security vulnerability of traditional identifiers

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The invention changes the parameters used for device identification from static network identifiers (IP, MAC) to dynamic environmental parameters (acceleration, orientation, magnetic field values). These physical parameters are inherently unique to each device's usage patterns and cannot be replicated, thus improving authentication security while eliminating spoofing vulnerabilities

Inventive Principle:

Principle #35Parameter changes

2Reliability

If device configuration attributes are used for device key derivation, then device identification can be achieved, but operating systems limit access to these details making globally unique identifiers difficult to derive

Engineering Contradiction:

Improvedevice identification accuracyVSAvoidaccess to device configuration details

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system replaces the mechanical/software-based approach of accessing device configuration files with a physics-based approach using environmental sensors. Accelerometers, orientation sensors, and magnetic field sensors provide access to physical characteristics of device usage that are not restricted by operating system security models, thus bypassing the access limitation while achieving reliable device identification

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Adaptability or versatility

If traditional device keys are used for authentication, then authentication can be performed, but the keys are not globally unique among large populations of similar devices

Engineering Contradiction:

Improvedevice authentication coverageVSAvoiddevice key uniqueness

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The system merges multiple environmental data sources (accelerometer logs, orientation logs, magnetic field logs) into a composite device key. This combination of multiple independent parameters creates a highly unique identifier that maintains global uniqueness across large device populations while enabling universal authentication coverage

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The device key is constructed as a composite of multiple environmental parameters rather than relying on a single attribute. This composite structure, combining acceleration patterns, orientation data, and magnetic field characteristics, creates a uniquely identifiable fingerprint for each device that scales to large populations while maintaining reliability

Inventive Principle:

Principle #40Composite materials

Data Source

PatentUS9143496B2Device authentication using device environment information

Publication Date: 2015.09.22 ATREUS LABS LLC

AI summary

A device authentication server authenticates a remotely located device using a detailed history of movement of the device. Such movement history is represented by data representing a history of the external state of the device within a physical environment, examples of which include accelerometer logs, orientation logs, and magnetic field logs. To authentication of the device, the device authentication server sends a device key challenge to the device. The device key challenge specifies a randomized selection of device attribute parts to be collected from the device and the manner in which the device attribute parts are to be combined to form a device key. The device key is data that identifies and authenticates the device and includes a device identifier and device environmental data for comparison to reference device environmental data.