Dynamic Shared Secret Generation via Mobile Activity Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional second-factor authentication methods rely on static shared secrets that can be prone to discovery by attackers, lacking dynamic and secure mechanisms for generation and updating.

Innovation Solution

A system and method that utilizes mobile device activity data, such as location and usage data, to generate and update shared secrets securely, ensuring that the secrets generated by both the mobile device and the server match, enhancing security through dynamic data-based authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a static shared secret is provisioned to a device during one-time setup, then the authentication system is simple to implement, but the shared secret becomes prone to discovery by attackers

Engineering Contradiction:

Improvesecurity of shared secretVSAvoidcomplexity of authentication system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent transforms the static shared secret into a dynamic one by using mobile device activity data (location, usage patterns, application data) that changes over time. The shared secret is now generated dynamically based on current device state rather than being fixed, making it resistant to attacks while maintaining system feasibility through automated generation processes

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The mobile device automatically generates its own shared secret using its own activity data without requiring manual provisioning or complex key distribution infrastructure. The device self-generates the secret locally and transmits only the necessary authentication token, reducing system complexity while improving security

Inventive Principle:

Principle #25Self-service

2Adaptability or versatility

If a static shared secret is used for authentication, then the authentication process is fast and simple, but the secret cannot be updated without re-provisioning the device

Engineering Contradiction:

Improveability to update shared secretVSAvoidtime for secret update

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The shared secret becomes dynamic and automatically updates based on changing mobile device activity data. Each authentication event can use a freshly generated secret based on current device state, enabling continuous adaptation without manual re-provisioning while maintaining fast authentication through automated generation

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The mobile device continuously collects and processes activity data in the background, preparing the data needed for shared secret generation before authentication is required. This preliminary data collection enables rapid secret generation when needed, avoiding time-consuming updates

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS9083527B1Using mobile data to establish a shared secret in second-factor authentication

Publication Date: 2015.07.14 GEN DIGITAL INC

AI summary

A server computer system receives mobile device activity data from a mobile device. The server computer system verifies that the mobile device activity data matches mobile device activity data that is stored at the mobile device and generates a shared secret at the server computer system using the received mobile device activity data. The shared secret at the server computer system matches a shared secret generated at the mobile device.