G2Auth Mutual Authentication for Drone Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for drone delivery are limited by the need for special user-side hardware, enforce one-way authentication, are vulnerable to relay attacks, and have compatibility issues.
Innovation Solution
The Greet-to-Auth (G2Auth) system uses inertial measurement unit (IMU) data from a smartphone and video data from a drone to perform mutual authentication through a key-protected communication channel, without requiring physical contact or special user-side infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication approaches requiring physical contact are used, then authentication security is improved, but compatibility and ease of operation deteriorate because drones cannot get close to persons
Solution Approach 1:
The patent replaces mechanical contact-based authentication (fingerprint scanning, physical keys) with contactless biometric authentication using facial recognition and iris scanning systems. The drone captures images of the user's face or iris from a distance and transmits them to a server for verification, eliminating the need for physical contact while maintaining security.
Solution Approach 2:
The patent introduces a server as an intermediary between the drone and the user. The drone captures biometric data and sends it to the server, which performs the authentication verification and communicates the result back to the drone. This intermediary system enables secure authentication without requiring direct physical interaction between the drone and user.
2Device complexity
If one-way authentication is used, then device complexity is reduced, but reliability deteriorates because mutual verification between drone and user is not achieved
Solution Approach 1:
The patent combines one-way authentication (user verifying drone) and drone identification (drone verifying user) into a unified mutual authentication system. Both authentication directions are performed through the same server-mediated process, where the server verifies both the drone's credentials and the user's biometric data, ensuring comprehensive security without significantly increasing system complexity.
3Reliability
If special user-side hardware is required, then authentication security is improved, but adaptability and ease of manufacture deteriorate
Solution Approach 1:
The patent uses universal components that are already present in most smartphones (camera, processor, operating system) to implement the authentication client functionality. The system can run on various mobile devices without requiring specialized hardware, as it leverages the existing camera and computing capabilities of consumer smartphones to capture and process biometric data.
4Ease of operation
If relay attacks are possible, then communication convenience is improved, but security deteriorates
Solution Approach 1:
The patent performs distance verification before the actual authentication transaction occurs. The system measures the distance between the drone and user using time-of-flight calculations based on image capture timing, and only proceeds with authentication if the distance is within the expected range. This preliminary distance check prevents relay attacks by ensuring the drone is physically present at the correct location before any credential exchange.
Data Source
AI summary
Described herein are methods, techniques and systems for a user to conduct authentication via inertial measurement unit data collected by the user's smartphone and video data collected by a drone recording the user operations for mutual authentication, as well as to prevent attacks of the authentication data, wherein correlation can be easily extended to using other information, such as noises, illuminance, GPS, and how the phone flashlight flashes.