Location-Based Automated Authentication Using Dynamic BLE Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing location-based authentication systems for mobile devices lack secure and efficient methods to prevent unauthorized access and replay attacks, especially in scenarios requiring continuous validation and dynamic user identification.
Innovation Solution
A Location-Based Automated Authentication System (LBAAS) utilizing Bluetooth Low Energy (BLE) signals with encrypted transitory identifiers, where mobile devices continuously transmit dynamic identifiers that are validated by a backend platform, using a proprietary algorithm to generate and compare changing encrypted identifiers, ensuring secure and efficient user authentication without battery-intensive connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If continuous validation and dynamic user identification are implemented, then security against replay attacks is improved, but system complexity and energy consumption increase
Solution Approach 1:
The patent implements dynamic identifier generation where the mobile device and backend platform continuously generate changing encrypted identifiers using synchronized algorithms. This dynamic approach prevents replay attacks by ensuring that each authentication attempt uses a unique identifier, resolving the contradiction between security and complexity through algorithmic synchronization rather than complex infrastructure.
Solution Approach 2:
The system changes the identifier parameter over time by generating new encrypted identifiers in each authentication cycle. This parameter change approach maintains security against replay attacks while keeping the system relatively simple, as it relies on cryptographic algorithm updates rather than complex system architecture.
2Reliability
If Bluetooth Low Energy (BLE) signals with encrypted transitory identifiers are used for continuous transmission, then authentication security is improved, but battery consumption increases
Solution Approach 1:
The system uses periodic BLE transmissions of encrypted identifiers rather than continuous transmission. The mobile device transmits authenticated identifiers at intervals when needed, maintaining security through the encrypted nature of the identifiers while reducing battery consumption by avoiding constant transmission activity.
Solution Approach 2:
The patent introduces an intermediary authentication mechanism where the mobile device transmits only encrypted identifiers through BLE, and the backend platform performs the heavy validation work. This intermediary approach maintains high security while minimizing the energy consumption of the mobile device, as the transmission is lightweight and the complex processing occurs on the server side.
3Reliability
If encrypted transitory identifiers are generated and validated in real-time, then authentication reliability is improved, but processing time and system resource usage increase
Solution Approach 1:
The system performs preliminary setup by establishing synchronized algorithms between the mobile device and backend platform during initial authentication. This preliminary action ensures that subsequent real-time identifier generation and validation can proceed efficiently without requiring complex runtime negotiations, thus maintaining high reliability while minimizing processing time during actual authentication events.
Data Source
AI summary
Systems, methods, and apparatuses for location-based automated authentication are disclosed. A system comprises a mobile device, a sensor and a backend platform. The sensor and the backend platform are in network communication. The mobile device is operable to continuously transmit Bluetooth Low Energy (BLE) signals comprising encrypted transitory identifiers. The sensor is operable to receive a BLE signal from the mobile device when the mobile device is within a predetermined range, and communicate over a network connection the encrypted transitory identifier comprised in the BLE signal to the backend platform. The backend platform is operable to extract a unique identifier and a changing encrypted identifier from the received encrypted transitory identifier, generate a changing encrypted identifier, and validate a user identification by comparing the generated changing encrypted identifier and the extracted changing encrypted identifier.