IoT Context Authentication via Dynamic Challenge Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, such as 'something you know,' 'something you have,' and 'something you are,' face challenges like password memorization issues, token loss or damage, and vulnerability to biometric attacks, leading to a need for a more robust identity authentication system.
Innovation Solution
A computer-implemented method using real-time data from IoT devices to generate dynamic questions and validate responses, providing a confidence index to ensure secure authentication without physical tokens, leveraging IoT devices like cameras, refrigerators, and TVs to create authentication challenges based on user interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication factors (passwords, tokens, biometrics) are used, then authentication can be performed, but security is compromised due to memorization issues, token loss, or biometric attacks
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that uses IoT device data as a mediator between the user and the authentication system. Instead of directly using passwords or biometrics, the system queries IoT devices (smartphone, wearable, home device) for contextual information about the user's recent activities, using this intermediary data to verify identity without exposing vulnerable authentication factors
Solution Approach 2:
The patent replaces mechanical authentication systems (physical tokens, biometric scanners) with an information-based system that queries IoT devices for contextual data. The authentication mechanism shifts from physical/mechanical verification to logical verification based on observed user behaviors and device interactions
2Reliability
If dynamic questions based on IoT data are used, then authentication security is improved, but system complexity increases due to IoT device integration
Solution Approach 1:
The patent makes the authentication system universal by enabling it to work with multiple types of IoT devices (smartphone, wearable, home device) through a common interface. The system can query different device categories for authentication data, making the complex IoT integration manageable through standardized multi-functional access patterns
Solution Approach 2:
The system performs preliminary actions by pre-querying and storing contextual data from IoT devices before authentication is needed. User interaction patterns, device locations, and activity data are collected in advance, so that when authentication is required, the system can quickly generate questions without real-time complex queries
Data Source
AI summary
A computer-implemented method for identity authentication in a data processing system, including: receiving, by the processor, an authentication request from a user; receiving, by the processor, real-time data from one or more Internet of Things (IoT) devices associated with the user; generating, by the processor, one or more questions based on the real-time data; receiving, by the processor, one or more responses to the one or more questions from the user; comparing, by the processor, the one or more responses from the user with one or more correct answers identified by the processor. If the one or more responses match the one or more correct answers, providing, by the processor, the user with a successful identity authentication.