Location-Based Authentication Distance Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, such as username and password combinations or two-level authentication using personal information, are vulnerable to fraudulent activities due to the ease of compromise, especially with the rise in keylogger attacks and unauthorized account takeovers.
Innovation Solution
A system and method for authenticating log-in requests based on location using an authentication application that computes the geographical distance between the log-in request location and the registered user device's location, allowing or denying authentication based on a set threshold, and providing additional security measures like user interface requests and notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional username and password authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to keylogger attacks and unauthorized account takeovers
Solution Approach 1:
The patent introduces location as an additional dimension for authentication beyond traditional username and password. By computing the geographical distance between the log-in request location and the registered user device location, the system adds a spatial dimension to the authentication process, making it more difficult for imposters to gain unauthorized access even if they obtain credentials through keyloggers
Solution Approach 2:
The patent uses location information as an intermediary factor to verify user identity. Instead of directly relying on credentials that can be stolen, the system introduces location verification as an intermediate step that must be satisfied for authentication to succeed, adding a layer of security that does not depend on the secrecy of passwords
2Reliability
If two-level authentication using personal information is used, then authentication security is improved, but ease of operation is worsened and vulnerability increases since personal information may be publicly available
Solution Approach 1:
The patent changes the parameter used for authentication from static personal information (which can be publicly available) to dynamic location data. The location parameter is continuously updating and context-dependent, making it more secure while maintaining ease of operation since the location is automatically obtained without requiring user input
3Reliability
If location-based authentication is implemented, then authentication security is improved, but device complexity is worsened due to additional location tracking and distance computation requirements
Solution Approach 1:
The patent implements self-service by automatically obtaining location information from the user's device and performing distance computations without requiring user intervention. The system autonomously handles the complexity of location tracking and verification, reducing the perceived complexity for users while maintaining enhanced security
Data Source
AI summary
A system and method for authenticating a log-in request based on location using an authentication application. The authentication application includes a processing unit, a location module, an authentication module, a user interface engine, and a notification module. The processing unit receives a log-in request from a third party application. The processing unit also receives a location of the log-in request and a location of a registered user device. The location module computes a distance between the location of the log-in request and the location of the registered user device. The authentication module determines whether the computed distance exceeds a threshold. The authentication module authenticates the log-in request responsive to determining that the computed distance is within or less than the threshold. The authentication module denies authentication to the log-in request responsive to determining that the computed distance exceeds the threshold.