IoT Authentication Using Device Actions and Accessible User Cues
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for Internet-of-Things (IoT) devices are inadequate for securely verifying user identity for sensitive operations, especially for individuals with disabilities, and there is a need for more robust and inclusive authentication techniques.
Innovation Solution
An authentication system using IoT devices to verify user actions or commands, incorporating biometric data and user profiles to authenticate users based on their interaction with registered IoT devices, including visual, audio, and tactile cues, and allowing for customizable authentication methods tailored to individual abilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used for IoT devices, then the authentication process is simple, but the security for sensitive operations is inadequate
Solution Approach 1:
The authentication system is segmented into multiple independent components: IoT device identification module, biometric data collection module, user profile matching module, and authorization module. Each component performs a specific function in the authentication chain, allowing the system to achieve high security through modular design while maintaining manageability.
Solution Approach 2:
A server acts as an intermediary between the user's device and the IoT devices. The server receives device identifiers, retrieves corresponding biometric data from stored user profiles, performs authentication verification, and authorizes operations. This intermediary architecture distributes complexity away from individual devices while maintaining centralized security control.
2Adaptability or versatility
If standard authentication methods are used, then the system is easy to operate, but it does not accommodate users with disabilities
Solution Approach 1:
The authentication system dynamically adapts to different user needs by storing multiple types of biometric data (visual, audio, tactile) in user profiles. The system can select and utilize appropriate authentication modalities based on the user's abilities and the specific situation, making the authentication process flexible and inclusive while maintaining ease of operation through automatic modality selection.
Solution Approach 2:
The authentication system is designed to support multiple authentication modalities simultaneously - visual recognition, audio recognition, and tactile sensing. This multi-functional approach allows any user, regardless of physical or sensory abilities, to authenticate through their preferred or accessible modality, enhancing both adaptability and ease of operation.
3Measurement precision
If biometric data is collected and stored for authentication, then authentication accuracy is improved, but data security and privacy concerns increase
Solution Approach 1:
Biometric data is collected and stored in secure user profiles during the registration phase, before any authentication operations are needed. This preliminary action allows the system to have accurate reference data ready for comparison while enabling users to control what data is stored and how it is used, addressing both accuracy and privacy concerns from the outset.
Solution Approach 2:
The system extracts and stores only the necessary biometric characteristics needed for authentication in encrypted user profiles, rather than storing complete raw data. This extraction approach maintains identification accuracy by preserving essential biometric features while reducing security risks by minimizing the amount of sensitive data stored and the attack surface for potential breaches.
Data Source
AI summary
Internet-of-Things (IoT) devices can be used to perform authentication related operations because IoT devices are prevalent in our society and because a server performing an authentication operation can communicate with IoT devices via the Internet. In a first example authentication technique, a server determines whether a person can perform an operation requested by the person based on whether the person performed an action on an IoT device, where the action is selected by the server and send to the person's user device. In a second example authentication technique, a server determines whether a person can perform an operation based on whether a person accurately identified an action performed by an IoT device, where the IoT device performs the action based on a command sent by the server.