Geolocation Authentication Map Interface
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing geolocation-based authentication credentials are vulnerable to brute force attacks and 'over the shoulder' attacks, and are difficult for users to remember due to high entropy requirements, leading to impaired user experiences and increased support costs.
Innovation Solution
A system that registers and authenticates users based on a sequence of geographic locations selected from a map, allowing users to omit or add extraneous locations, and type names of locations, while disambiguating between overlapping regions, to create high entropy credentials that are easy to remember and difficult to attack.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If high entropy knowledge-based authentication credentials are used, then security against brute force attacks is improved, but user experience deteriorates due to difficulty in remembering credentials
Solution Approach 1:
The patent replaces traditional text-based password input with a visual map-based interface where users select geolocations. This substitution transforms the authentication mechanism from memorizing complex character sequences to recalling meaningful geographic places, maintaining high entropy while improving memorability and user experience
Solution Approach 2:
The patent changes the parameter space of authentication credentials from alphanumeric characters to geographic coordinates and place names. By transforming the credential format from text to spatial references, the system achieves both high security entropy and enhanced user-friendly characteristics through meaningful geographic associations
2Reliability
If high entropy authentication credentials are required, then security is improved, but support costs increase due to forgotten credentials
Solution Approach 1:
The patent replaces abstract password memorization with concrete geographic location selection on maps. This substitution reduces credential forgetfulness by leveraging users' natural spatial memory and familiarity with places, thereby decreasing support costs related to forgotten credentials while maintaining high security standards
3Reliability
If geolocation-based authentication is implemented, then resistance to brute force attacks is improved, but vulnerability to over the shoulder attacks persists
Solution Approach 1:
The patent introduces an intermediary verification mechanism where the system validates the sequence and timing of geolocation selections. This intermediary process detects anomalies that may indicate shoulder surfing attacks, such as unusually fast selection patterns or impossible travel times between locations, thereby mitigating this threat vector while maintaining brute force resistance
4Reliability
If complex authentication interfaces are used, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal map-based interface that works across multiple device types and operating systems. By using standard mapping libraries and touch interface conventions, the system achieves high security functionality without increasing device complexity, as the same interface paradigm serves authentication purposes across diverse platforms
Data Source
AI summary
Provided is process including receiving a request to authenticate a user; sending instructions to present an authentication user interface including a geographic map; receiving geolocations on the geographic map selected by the user; comparing the geolocations to a sequence of geolocations in an authentication credential to determine whether to authenticate the user.