Device Authentication via Security Platform Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods primarily focus on user identities, leaving a gap in authenticating device identities, particularly for smart devices, which can lead to illegitimate devices gaining access to services.
Innovation Solution
A system and method for device authentication that involves a security platform generating unique device identifiers, which are recorded on the device and verified through a network, ensuring only legitimate devices can access services by comparing encrypted authentication information using pre-configured encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user identity authentication is performed, then user authorization is ensured, but device identity authentication is lacking allowing illegitimate devices to access services
Solution Approach 1:
The authentication system is segmented into two independent layers: user identity authentication and device identity authentication. Each layer handles its own verification independently, with the device identifier serving as a separate authentication dimension from user credentials. This segmentation allows the system to address device security without complicating the existing user authentication flow.
Solution Approach 2:
The device identifier is pre-configured and bound to the legitimate device before service access attempts. This preliminary binding creates a trusted relationship between the device and the service provider, enabling automatic verification without adding complexity during the actual authentication moment. The device presents its pre-configured identifier, and the service provider verifies it against its records.
2Reliability
If device authentication is added to the existing user authentication system, then device legitimacy can be verified, but the authentication process becomes more complex
Solution Approach 1:
The device identifier serves multiple functions: it acts as a unique device fingerprint for authentication, a binding key for associating devices with user accounts, and a verification token for service access control. This multi-functionality eliminates the need for separate complex device verification mechanisms, reducing overall system complexity while maintaining strong device identity verification.
Solution Approach 2:
The device identifier acts as an intermediary element between the physical device and the service provider's authentication system. Instead of the service provider directly analyzing complex device characteristics, the device simply presents its identifier, which the service provider verifies against pre-stored information. This intermediary approach simplifies the authentication process while ensuring reliable device verification.
3Object-affected harmful factors
If unique device identifiers are generated and verified, then illegitimate devices are blocked, but the authentication information processing becomes more complex
Solution Approach 1:
The device identifier extraction and verification process is separated from the main user authentication flow. The service provider extracts and verifies the device identifier independently before proceeding with user credential verification. This extraction approach isolates the complexity of device verification into a distinct, manageable step that blocks illegitimate devices without complicating the overall authentication information processing.
Data Source
AI summary
An authentication method including: receiving a service request from a terminal device to access a service, the service request including authentication information; transmitting the authentication information to a security platform, the security platform being configured to verify whether the authentication information is originated from a legitimate terminal device and to transmit a verification result based on the verification; and in response to receiving the verification result from the security platform, determine whether to allow the terminal device to access the service.