Secure Tunneling via Device-Readable Address Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security techniques for online transactions are inadequate in preventing adversaries from accessing personal information and imposing burdensome protocols on users, failing to effectively thwart common adversarial attacks while maintaining user-friendliness.
Innovation Solution
A computer-implemented method that establishes a pairing relationship between a device and a client using a physical device-readable address, creating a secure tunneled connection to conduct transactions, thereby protecting user information and simplifying the login process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional log-in procedures are used, then users can access online services, but personal information may be exposed to adversaries
Solution Approach 1:
The patent introduces a pairing code as an intermediary element that mediates between the user's device and the online service. Instead of directly exposing passwords or personal information, the system uses this intermediate pairing mechanism to establish secure connections, thereby protecting sensitive data while maintaining ease of access for legitimate users
Solution Approach 2:
The patent creates a copy of the authentication process through device-readable form presentation. Rather than requiring users to manually enter complex credentials, the system generates a readable representation (pairing code) that can be scanned or read by the device, simplifying the authentication process while maintaining security
2Reliability
If security techniques are implemented to protect personal information, then adversary attacks are thwarted, but user-friendly operation is compromised
Solution Approach 1:
The system implements self-service authentication where the user's device automatically reads and processes the pairing code without requiring manual intervention. The device itself performs the authentication task by reading the form and establishing the secure connection, eliminating the need for users to navigate complex security protocols
Solution Approach 2:
The patent replaces manual mechanical authentication (typing passwords, filling forms) with automated optical or electromagnetic reading of the pairing code. This substitution eliminates the need for users to manually handle complex security procedures while maintaining robust security measures
Data Source
AI summary
A system is described for allowing a user, operating a trusted device, to remotely log into a server via a potentially untrustworthy client. A first secure connection is established between the client and the server. A second secure connection is established between the device and the server through the client. The user then remotely logs into the server over the second secure connection using the device. The second secure connection is tunneled within the first secure connection, preventing the untrustworthy client from discovering personal information associated with the user. According to one feature, prior to forming the second secure connection, the user establishes a pairing relationship with the client by reading an address of the client using a reading mechanism. According to another feature, the device can receive marketing information in the course of a transaction.