Environmental Sensor Authentication for Remote Access Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing remote access authentication methods cannot provide absolute certainty about a user's identity, highlighting the need for additional security measures to estimate the risk of fraudulent access, particularly by considering environmental variables.

Innovation Solution

The method involves obtaining and analyzing location-dependent physical properties such as apparent gravity, atmospheric pressure, background radiation, and ambient light to verify the user's location and authenticate access, using these measurements in a risk analysis to determine the reliability of the authentication process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used, then the authentication process is simple, but the reliability of user identity verification is insufficient

Engineering Contradiction:
Improveuser identity verification reliabilityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple authentication factors (password, location data, environmental measurements) into a unified authentication system. The server integrates information from GPS coordinates, accelerometer data, microphone measurements, and camera readings to create a comprehensive risk assessment, merging previously separate authentication mechanisms into a single cohesive process that enhances reliability without requiring multiple separate systems

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces an intermediary authentication server that acts as a mediator between the user device and the application server. This server collects environmental measurements, analyzes risk factors, and provides authentication decisions, thereby reducing the complexity burden from the end-user device while maintaining high reliability through centralized analysis of multiple data sources

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple authentication factors are collected, then the reliability of authentication improves, but the ease of operation deteriorates

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidauthentication process ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication system operates autonomously by automatically collecting environmental measurements (accelerometer, microphone, camera data) without requiring user intervention. The device's sensors continuously monitor the environment and transmit this data to the authentication server, which performs risk assessment automatically, eliminating the need for users to manually provide multiple authentication factors while maintaining high reliability

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary risk assessment by continuously collecting and analyzing environmental data before the actual authentication decision is made. By pre-gathering location information, environmental measurements, and device characteristics, the system prepares authentication credentials in advance, making the actual authentication process seamless and easy for users while ensuring thorough verification

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10541986B2Method and apparatus for securing an application using a measurement of a location dependent physical property of the environment
Publication Date: 2020.01.21 ONESPAN NORTH AMERICA INC
  • US10541986B2 patent drawing
  • US10541986B2 patent drawing
  • US10541986B2 patent drawing

AI summary

Methods, apparatus, and systems for authenticating a user taking into account measurement values of characteristics of the purported environment of the user are described. Specifically, in a preferred embodiment, a device is used that comprises a sensor for making said measurement of the location dependent physical property; a memory component for storing a secret value; and a data processing component for generating an electronic signature over said measurement by cryptographically combining said measurement with a secret key comprised in or derived from said secret value.