Environmental Task-Based Authentication via Sensor Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional user authentication methods, such as usernames and passwords, and two-factor authentication, are vulnerable to breaches and compromises, necessitating a more secure and reliable method for network-based transactions.
Innovation Solution
A system that uses sensor data from network-connected devices at a user's physical location to verify actions performed in response to instructions, such as moving an object or adjusting environmental settings, to authenticate the user for network-based transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional username and password authentication is used, then ease of operation is improved, but reliability is worsened due to vulnerabilities to breaches and compromises
Solution Approach 1:
The patent replaces traditional information-based authentication (username/password) with physics-based environmental verification. The system uses sensor data from network-connected devices to detect physical actions in the real-world environment, such as moving objects or changing environmental conditions, thereby substituting mechanical/physical verification for digital credential verification.
Solution Approach 2:
The patent introduces environmental sensors and network-connected devices as intermediaries between the user and the authentication system. These sensors detect physical actions performed by the user in the real world and transmit this data to the authentication system, serving as a mediator that verifies user presence and action without directly requiring digital credentials.
2Reliability
If two-factor authentication is implemented, then reliability is improved, but ease of operation is worsened due to additional steps required
Solution Approach 1:
The patent enables the environment itself to participate in the authentication process through self-service. Network-connected sensors automatically detect and report environmental changes caused by user actions without requiring the user to manually input verification codes or perform complex multi-step processes. The system autonomously verifies that the user performed the instructed action.
Solution Approach 2:
Instead of requiring the user to actively provide multiple forms of verification (as in traditional two-factor authentication), the system inverts the approach by having the environment passively observe and verify user actions. The authentication burden shifts from the user performing multiple verification steps to the system automatically detecting environmental changes resulting from user behavior.
3Reliability
If environmental sensor data is used for authentication, then reliability is improved through unique environment-based verification, but device complexity is worsened due to network-connected sensor requirements
Solution Approach 1:
The patent leverages the multi-functionality of network-connected devices that already exist in modern environments (smartphones, smart home devices, wearables). These devices serve multiple purposes: they function as both environmental sensors for authentication and as general-purpose computing or communication devices, thereby reducing the need for dedicated authentication hardware.
Solution Approach 2:
The patent combines environmental sensing capabilities with existing network-connected devices rather than requiring separate dedicated sensors. By merging authentication functionality into devices users already carry and use for other purposes, the system reduces overall complexity while maintaining security.
Data Source
AI summary
A processing system may detect a physical location of a user via at least one mobile computing device of the user, where the user is to be authenticated for a network-based transaction, identify at least one network-connected sensor device at the physical location, and determine, from the at least one network-connected sensor device, a set of environmental conditions of an environment of the physical location. The processing system may next identify at least one action for the user to perform to interact with at least one aspect of the environment in accordance with the set of environmental conditions and transmit an instruction to the user to perform the at least one action. The processing system may then obtain sensor data from the at least one network-connected sensor device, determine, from the sensor data, that the user performed the at least one action, and authenticate the user for the network-based transaction.