Authentication System Using Isolated Execution Environment for Sensor Data

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication methods fail to securely synchronize and verify data from multiple sensors within the same device, leading to potential tampering and untrusted authentication requests.

Innovation Solution

A method that acquires data from at least two sensors, synchronizes it, and provides it to an isolated execution environment for comparison against predefined authentication rules, ensuring data integrity and trustworthiness before allowing the authentication request to proceed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data from multiple sensors is used for authentication, then authentication reliability is improved, but data synchronization and trust verification become more complex

Engineering Contradiction:
Improveauthentication reliabilityVSAvoiddata synchronization complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an isolated execution environment (IEE) as an intermediary component that acts as a trusted mediator between multiple sensors and the authentication logic. The IEE receives data from multiple sensors, performs synchronization and verification operations, and manages the complexity of coordinating multiple data sources while maintaining security isolation. This intermediary handles the synchronization complexity internally, presenting a simplified authenticated result to the rest of the system.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If an isolated execution environment is used for secure authentication, then security is improved, but processing overhead increases

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication processing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary actions by pre-configuring the isolated execution environment with authentication rules and sensor data acquisition parameters before the actual authentication event occurs. Sensors are pre-configured and ready to capture data, and the IEE is pre-loaded with verification logic. When authentication is triggered, the pre-prepared components can operate more efficiently without setup overhead during the critical authentication moment.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If real-time sensor data synchronization is implemented, then authentication accuracy is improved, but data acquisition complexity increases

Engineering Contradiction:
Improveauthentication accuracyVSAvoiddata acquisition complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the data acquisition and processing function by dedicating specific sensors to specific data capture tasks within the isolated execution environment. Each sensor operates independently under controlled conditions, capturing specific types of data (e.g., camera for visual recognition, microphone for voice verification). This segmentation allows each sensor to be optimized for its specific function while the IEE coordinates them, reducing overall system complexity through functional decomposition.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20250094558A1System and Method for Handling an Authentication Request
Publication Date: 2025.03.20 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
  • US20250094558A1 patent drawing
  • US20250094558A1 patent drawing
  • US20250094558A1 patent drawing

AI summary

It is provided a method for handling an authentication request (100), the method comprises the steps of: acquiring data from at least two sensors (110a, 110b), wherein the acquired data is synchronized when captured by the at least two sensors (110a, 110b); providing the acquired, synchronized data to an isolated execution environment (120); comparing the synchronized data with synchronization dependent authentication rules; authenticating the request, and notifying a function addressed by the request, in case the synchronized data comply with said authentication rules.