Location-Bound Device Fingerprints for Anti-Spoofing Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to fraud due to the ease with which authentication credentials can be spoofed, particularly in remote access scenarios, necessitating additional security measures to verify user identity.
Innovation Solution
Implementing a location-based authentication method that utilizes a digital fingerprint of the user's device, combining device identifier and location information to enhance security by verifying the location of the user device, which is transmitted to enhance security, ensuring that the device is associated with the user device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, PINs, tokens) are used, then users can access systems remotely, but authentication credentials can be easily spoofed leading to fraud
Solution Approach 1:
The patent adds a spatial dimension to authentication by verifying the physical location of the user device. Instead of relying solely on credentials that can be spoofed, the system now requires that authentication requests originate from geographically consistent locations, creating a new dimensional barrier against fraud while maintaining remote access capability
Solution Approach 2:
The patent introduces location information as an intermediary verification layer between the user and the system. Rather than directly trusting authentication credentials, the system uses location data as a mediator to verify whether the authentication request is genuine, adding a layer of indirect verification that is difficult to spoof
2Reliability
If location-based authentication is implemented, then security against spoofing is enhanced, but system complexity increases
Solution Approach 1:
The patent leverages the existing GPS/location capabilities already present in modern mobile devices, making the location-based authentication feature universal across all smartphones without requiring specialized hardware. The same location infrastructure serves both navigation apps and security authentication, reducing overall system complexity
Solution Approach 2:
The user device automatically provides location information through its built-in GPS and networking capabilities without requiring manual input or additional accessories. The device self-services the authentication process by autonomously generating and transmitting location data, simplifying the user experience despite the enhanced security requirements
Data Source
AI summary
A system for authenticating a login request includes a computing device including a processing circuit configured to receive the login request including a user identifier associated with a user, transmit a request for location information of a user device associated with the user to indicate a location of the user device, receive, from the user device, a location-based modifiable digital fingerprint comprising an encoded value for a location of the user device where the updated location-based modifiable digital fingerprint is received by the computing device based on a change in the location of the user device, verify the user device based on a change to the encoded value for the location of the user device, and provide the user access to the computing device.