Location-Based Authentication Using GPS Proximity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods are inadequate in preventing damage when personal information such as passwords or certificates is leaked, as they do not effectively utilize physical location differences to enhance security during network access.
Innovation Solution
A user authentication method that utilizes a user authenticating server and mobile terminal to estimate network access locations using GPS, WPS, or CPS, and determines access approval or rejection based on the proximity of the mobile terminal's location to the network access location, allowing for explicit or implicit user approval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional user authentication methods (ID, password, certificate) are used, then user access verification is performed, but security is insufficient when personal information is leaked due to hacking
Solution Approach 1:
The patent introduces a spatial dimension (GPS location) to the traditional authentication process. Instead of only verifying credentials, the system now verifies both credentials and physical location proximity. The server compares the user's registered location with the current access location, adding a geographic spatial layer to authentication that prevents unauthorized access even if credentials are compromised.
Solution Approach 2:
The system performs preliminary location verification before granting access. By checking whether the current GPS location falls within the predetermined error range of the registered location in advance, the system can reject potentially unauthorized access attempts before they proceed, preventing damage from hacking or information leakage.
2Reliability
If location-based access control is implemented, then security is strengthened by verifying physical proximity, but system complexity increases due to GPS integration and location comparison
Solution Approach 1:
The patent leverages the universal GPS functionality already present in modern mobile devices. Instead of requiring specialized location hardware, the system uses the existing GPS receiver in smartphones to obtain location data. This multi-functional approach allows the authentication system to utilize a component that serves multiple purposes (navigation, mapping, and now security verification), minimizing additional complexity.
Solution Approach 2:
The system transforms location data from a continuous geographic coordinate into a discrete authentication parameter by comparing it against a predetermined error range. This parameter transformation simplifies the verification process: instead of complex geographic calculations, the system only needs to determine whether the current location falls within or outside the acceptable range, reducing computational complexity while maintaining security.
3Reliability
If strict location verification is applied, then unauthorized access is prevented, but legitimate access may be blocked due to location estimation errors
Solution Approach 1:
The patent applies beforehand cushioning by establishing a predetermined error range that anticipates and accommodates potential location estimation errors. This cushioning buffer ensures that minor GPS inaccuracies do not cause false rejections of legitimate users. The error range acts as a safety margin that absorbs normal variations in location data while still preventing unauthorized access from significantly different locations.
Data Source
AI summary
A user authenticating method is performed by a user authenticating server connectable to at least one mobile terminal and a user terminal. The user authenticating method includes: receiving access information of a network including an access identification code and an access location code from the user terminal; estimating an access location of a network based on the access location code; determining at least one mobile terminal associated with the access identification code; transmitting the estimated access location of a network to the at least one mobile terminal; and receiving a location-based access approval or access rejection determined based on the access location of a network and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.