Location Aware Authentication for Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The authentication process on mobile devices is cumbersome and insecure, leading to poor user experience, especially when interacting with secure systems, as username and password-based systems lack robustness and additional security measures complicate the process.
Innovation Solution
Implementing a location-based authentication mechanism that registers mobile devices with geographical locations, identifiers, and user identities, and enforces authentication policies based on predefined ranges, allowing for automatic authentication within designated areas and multi-factor authentication outside these areas.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password based credential systems are used for authentication, then security is improved, but user experience deteriorates due to cumbersome input mechanisms
Solution Approach 1:
The patent replaces mechanical input mechanisms (typing usernames and passwords) with automated electronic authentication methods. The mobile device automatically transmits device identifiers and location data to the authentication server, eliminating the need for manual typing while maintaining security through multi-factor authentication based on device identity and geographical location.
Solution Approach 2:
The mobile device performs authentication automatically without requiring user intervention for data entry. The device's built-in location services and identifier systems provide the authentication credentials autonomously, making the process self-service oriented and significantly improving user experience while maintaining security requirements.
2Reliability
If additional security measures such as challenge questions are added, then authentication security is improved, but device complexity increases
Solution Approach 1:
The mobile device serves multiple authentication functions simultaneously using its existing capabilities. The device's location services, unique device identifiers, and communication capabilities are leveraged to provide both geographical-based authentication and device identity verification, eliminating the need for separate challenge question systems while maintaining high security standards.
3Reliability
If manual authentication input is required, then security control is improved, but productivity deteriorates due to slow authentication process
Solution Approach 1:
The authentication credentials (device identifiers and location data) are prepared in advance by the mobile device's operating system and location services. When authentication is required, these pre-prepared credentials are immediately transmitted to the server without requiring real-time user input, thus maintaining security control while dramatically improving authentication speed and productivity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method (100) of implementing location-aware authentication is described. The method comprises: registering a mobile device for location-based authentication (110); associating (i) a geographical location for the mobile device of a user, (ii) a mobile device identifier for the mobile device, (iii) a user identity for the user, and (iv) an authentication policy for authentication of the user and the mobile device (120); and enforcing the authentication policy when the user, via the mobile device, subsequently attempts to access a network resource (130).