Dynamic Authentication Timeout Based on Device Location
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack a method to dynamically balance security and convenience in user authentication for mobile computing devices by setting an appropriate timeout length based on the device's location, leading to potential unauthorized access or user inconvenience.
Innovation Solution
A system that uses a variable timeout length based on the device's current location, determined by policies associated with specific regions, to lock the device and require user authentication after a specified period, thereby adapting security levels to the likelihood of unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a short timeout length is used for authentication, then security is improved, but user convenience deteriorates
Solution Approach 1:
The patent implements a dynamic timeout mechanism where the timeout length changes based on device location. The system transitions from a static timeout value to a dynamic one that adapts to environmental security conditions, allowing short timeouts in secure locations and long timeouts in insecure locations, thus resolving the contradiction between security and convenience
Solution Approach 2:
The system changes the timeout parameter based on location context. By monitoring GPS coordinates and comparing them against stored location data, the system adjusts the timeout length parameter to optimize both security and user experience for each specific location, eliminating the need for users to disable authentication due to inconvenience
2Ease of operation
If a long timeout length is used for authentication, then user convenience is improved, but security deteriorates
Solution Approach 1:
The system dynamically adjusts timeout length based on location security assessment. In insecure locations such as public places or unfamiliar areas, the timeout is automatically reduced to enhance security, while in secure locations like home or office, the timeout is extended for convenience, thus resolving the contradiction
Solution Approach 2:
The timeout parameter is changed based on location context. The system stores multiple timeout values associated with different locations and automatically selects the appropriate parameter value, allowing long timeouts in secure areas and short timeouts in insecure areas, balancing security and convenience
3Device complexity
If a fixed timeout length is used, then system simplicity is maintained, but adaptability to different locations deteriorates
Solution Approach 1:
The patent segments the operational context into different location-based scenarios. By dividing the system into location identification module, policy selection module, and timeout enforcement module, it achieves adaptability to different locations while maintaining relative system simplicity through modular design
Solution Approach 2:
The system performs preliminary actions by pre-storing location data and associated timeout policies in a database before runtime. When the device location is determined, the system quickly retrieves the appropriate timeout policy without complex real-time calculations, maintaining system simplicity while achieving location adaptability
Data Source
AI summary
A system and a method are disclosed for authenticating a user of a mobile computing device. Information is received describing the location of the mobile computing device. The information can include the current location of the device or a current type of user activity associated with a location. A current timeout length is determined based on this information. If the mobile computing device has remained idle for a time period equal to the current timeout length, the user of the mobile computing device is authenticated.