Geolocation Dongle Authentication Using Spoof-Resistant RF Location
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing geolocation-based authentication methods are inadequate or misleading due to issues such as VPN usage and IP address spoofing, limiting their effectiveness in verifying user location for secure network access.
Innovation Solution
A geolocation dongle attached to a computer provides location information derived from RF signals from neighboring cell towers or GPS, which can be encrypted and used for authentication, optionally via a short-range communication channel, ensuring accurate location verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If online geolocation based on IP address is used for authentication, then the authentication process is simple and fast, but the location information may be wrong or misleading due to VPN usage and IP address hiding
Solution Approach 1:
The patent introduces a geolocation dongle as an intermediary device between the computer and the authentication system. This dongle contains an RF monitoring circuit that directly measures RF signals from cell towers and GPS satellites, obtaining location information through a trusted hardware intermediary rather than relying on software-based IP address geolocation that can be manipulated by VPNs or proxies
Solution Approach 2:
The patent replaces the software-based IP address geolocation system with a hardware-based RF signal monitoring system. The geolocation dongle uses physical RF monitoring circuits to directly detect and measure RF signals from cell towers and GPS satellites, substituting the indirect software-based IP lookup method with direct physical measurement of radio frequency signals
2Measurement precision
If a geolocation dongle with RF monitoring circuit is used to obtain location from RF signals, then location accuracy and anti-spoofing capability are improved, but the device complexity increases
Solution Approach 1:
The patent segments the geolocation functionality into a separate, dedicated hardware dongle that can be attached to any computer. This segmentation isolates the complex RF monitoring and cryptographic functions into a self-contained module, keeping the main computer system simple while providing enhanced security capabilities through the specialized geolocation device
Solution Approach 2:
The geolocation dongle is designed as a self-contained device that independently performs RF signal monitoring, location calculation, and cryptographic operations. The device serves itself by containing all necessary components (RF monitoring circuit, processor, cryptographic engine, memory) within a single unit, eliminating the need for complex integration with the host computer system
3Reliability
If location information is encrypted by the geolocation dongle, then security is improved, but the processing time and computational complexity increase
Solution Approach 1:
The geolocation dongle performs cryptographic operations on the location information as part of its normal operation, preparing encrypted or signed location data in advance before authentication is needed. This preliminary cryptographic processing ensures that when authentication occurs, the security verification can proceed efficiently without time-consuming cryptographic operations
Solution Approach 2:
The patent replaces software-based cryptographic processing with hardware-based cryptographic operations performed by a dedicated cryptographic engine in the geolocation dongle. This hardware implementation of cryptographic functions significantly accelerates encryption and decryption operations compared to software-based approaches, reducing the time penalty associated with enhanced security
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances authentication security by providing precise location information resistant to spoofing, allowing secure network access by ensuring the user's computer is within a predetermined distance of a known approximate location.
Implementation Method 1
a radio frequency (RF) monitoring circuit configured to monitor at least one RF signal and to provide processed information derived from the at least one RF signal
Implementation Method 2
The RF monitoring circuit comprises a Global Positioning System (GPS) receiver. The geolocation dongle obtains location information from the GPS receiver
Implementation Method 3
a cryptographic engine configured to encrypt unencrypted information based on an encryption key known at the computing platform and the geolocation dongle
Data Source
AI summary
Aspects of the disclosure are directed to a supporting authentication between a computing platform and a computer that has an attached geolocation dongle. The attached geolocation dongle provides location information to the computer that is indicative of a current location of the computer, where the location information is obtained from RF signals generated from neighboring cell towers or the Global Positioning System. The computing platform may utilize the location information for authenticating the computer. Moreover, the location information may be encrypted by the geolocation dongle based on an encryption key known by the geolocation dongle and the computing platform. With another aspect, authentication is supported by a computer and an associated communication device that provides location information to the computer via a short-range communication channel. With another aspect, authentication is supported by a computer and an associated communication device that provides location information directly to the computing platform.