Device Fingerprint Authentication Using Co-Connected Device Presence
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
One-time passcode authentication methods are susceptible to social and technical engineering attacks, making it difficult to distinguish between authorized and unauthorized users.
Innovation Solution
A system that generates device fingerprints based on Bluetooth and Wi-Fi connectivity, ambient noise, and audio pings to verify the proximity of devices, using a confidence level to determine if they are operated by the same user, and employs multifactor authentication when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If one-time passcode authentication is used, then authentication simplicity is improved, but security against social and technical engineering attacks deteriorates
Solution Approach 1:
The authentication process is divided into multiple independent factors: device fingerprint verification (location-based), passcode authentication, and device trust validation. Each factor operates independently and must all pass for successful authentication, creating a segmented security architecture that addresses the contradiction by adding layers without sacrificing the simplicity of the overall flow.
Solution Approach 2:
A server acts as an intermediary between the client device and the authentication system. The server receives device fingerprints, validates them against stored profiles, and coordinates the authentication process. This intermediary handles the complex security logic while presenting a simple interface to users, resolving the contradiction between operational simplicity and security reliability.
2Reliability
If device fingerprint with multiple factors is implemented, then security reliability is improved, but device complexity increases
Solution Approach 1:
The complex device fingerprinting and validation logic is extracted from the client device and moved to a centralized server. The client device simply captures Bluetooth and Wi-Fi information and sends it to the server, which performs the complex comparison against stored fingerprints and returns authentication decisions. This extraction reduces on-device complexity while maintaining high security reliability.
Solution Approach 2:
The server-based authentication system serves multiple functions: collecting device information, storing reference fingerprints, performing complex comparisons, validating authentication attempts, and coordinating the overall flow. This multi-functional approach consolidates complexity into a single universal system rather than distributing it across multiple devices, reducing overall system complexity while maintaining security.
Data Source
AI summary
Systems, computer program products, and methods are described herein for multifactor authentication system that determines co-connected device presence for added security. The system utilizes a device fingerprint for each device. The device fingerprint may contain a library of interconnected devices, as well as ambient noise from the device. The device fingerprint will be used to determine confidence levels indicating whether the devices are in the same location and thus in operation by the same user during multifactor authentication.