Environment-Based Access Policy Control for Electronic Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control methods for electronic devices in specific environments rely on user compliance, which is unreliable and cannot ensure consistent execution of access requirements.
Innovation Solution
An access control method that allows electronic devices to automatically obtain and enforce access policies based on their environment, enabling management systems to selectively apply policies to different devices and users without user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If contactless authentication is implemented, then user convenience is improved, but security reliability deteriorates due to spoofing attacks
Solution Approach 1:
The patent introduces a liveness detection mechanism as an intermediary verification step between the user and the authentication system. This mediator detects whether the biometric data comes from a living person rather than a spoof, thereby maintaining contactless convenience while restoring security reliability through an additional verification layer.
2Reliability
If traditional authentication methods are used, then security reliability is maintained, but user convenience deteriorates due to physical contact requirements
Solution Approach 1:
The authentication device is designed to perform multiple functions: traditional contact-based authentication, contactless authentication, and liveness detection. This multi-functionality allows the system to maintain security reliability through proven methods while also providing user convenience through contactless options, serving both security and usability requirements.
3Reliability
If liveness detection is added to contactless authentication, then security reliability is improved, but device complexity increases
Solution Approach 1:
The liveness detection mechanism utilizes the user's own physiological characteristics (such as heartbeat, respiration, or other biometric signals) to verify authenticity. The user's body essentially serves itself as the verification source, eliminating the need for complex external verification equipment and reducing overall device complexity while maintaining security reliability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application discloses an access control method. The method includes: an electronic device sends a sign-in request to enable a management party device to learn that the electronic device has entered a specific environment. The management party device selects one access policy from one or more stored access policies based on one or more of the following: restriction levels for the specific environment, restriction categories for functions of electronic devices in the specific environment, a device type or a login user of an electronic device, a time point at which the management party device receives the sign-in request, or an area in which the electronic device is located in the specific environment, and sends the access policy to the electronic device, to restrict a function of the electronic device. In this way, the electronic device can directly obtain the access policy corresponding to the specific environment without performing complex operations. The management party device may send different access policies for different electronic devices, to improve a management and monitoring effect of the management party on the electronic device carried by a user.