Electronic Device Access Control Through User-Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack effective and secure mechanisms for dynamically verifying user attributes and controlling access, especially for devices with limited capabilities, such as electronic vaping devices and vending machines, as existing user authentication systems are inadequate for enforcing age, citizenship, or location-based restrictions.
Innovation Solution
A computer framework that utilizes a user device application to perform user verification and control electronic devices by leveraging the user device's capabilities, including biometric data capture, communication with identity verification systems, and customized communication components in electronic devices to enforce access restrictions based on user attributes and device criteria.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing user authentication mechanisms are used, then user verification can be performed, but they lack the integration needed to validate both the user and the device dynamically
Solution Approach 1:
The patent combines user authentication and device authentication into a single integrated framework. The system merges the validation of user credentials with the validation of device credentials, creating a unified authentication process that simultaneously verifies both the user's identity and the device's legitimacy through coordinated communication between multiple system components.
Solution Approach 2:
The authentication framework is designed to be universal, handling multiple authentication scenarios (user-only, device-only, and combined user-device authentication) through a single system. The framework can adapt to different authentication requirements based on the specific device and user context, providing multi-functional authentication capabilities.
2Ease of operation
If enforcement of restrictions is performed at the point of sale, then initial control can be established, but it is ineffective to limit the use of these electronic devices by only the users that satisfy the set of criteria
Solution Approach 1:
The system performs preliminary authentication by verifying user credentials and device credentials before granting access to the electronic device's functionalities. This preliminary verification ensures that only authorized users can operate the device, and the authentication is performed upfront before any restricted functions are activated.
Solution Approach 2:
The authentication system continuously monitors and validates user-device connections, providing feedback by verifying credentials in real-time. The system maintains ongoing authentication states and can revoke access if credentials are compromised or if the user no longer meets the required criteria, ensuring continuous enforcement of restrictions.
3Device complexity
If electronic devices have limited capabilities, then they can be simpler and more specialized, but they lack the capability to implement computer functionalities for verifying an attribute of the user
Solution Approach 1:
The patent introduces an intermediary authentication framework that mediates between the limited-capability electronic device and the user verification requirements. The framework includes intermediary components such as authentication servers and communication protocols that enable the simple device to perform complex verification tasks by coordinating with external authentication infrastructure.
Data Source
AI summary
Methods and systems are presented for providing a computer framework that enables secure and effective access control of electronic devices. Electronic devices that have been registered with the computer framework are associated with access criteria, specifying requirements of users for accessing the electronic devices. The electronic devices also include a customized communication component that is not discoverable unless through a dedicated application executed on a user device. When a registered electronic device is discovered by the application, the application performs a handshake protocol for authenticating the electronic device. The application establishes a network connection with the electronic device only after the electronic device is authenticated and the attribute of the user is verified. The application then activates the electronic device via the network connect and enables the user to access a functionality of the electronic device.