Location-Gated Data Protection for Passwordless User Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data protection measures for personal devices, such as password-based approaches and client-server frameworks, face challenges in balancing user experience, security, and infrastructure investment, with password-based methods being cumbersome and client-server frameworks being costly and inefficient.

Innovation Solution

A device-initiated data protection system using monitoring entities to limit access based on location and risk detection, eliminating the need for passwords and reducing infrastructure costs by ensuring secure data access only within a restricted zone.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If password-based security measures are implemented, then data protection is improved, but user convenience deteriorates due to cumbersome authentication requirements

Engineering Contradiction:
Improvedata protectionVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system enables self-service authentication by automatically detecting user identity through device characteristics, location data, and behavior patterns without requiring manual password entry. The monitoring entity autonomously evaluates security risks and makes access decisions based on predefined policies, eliminating the need for users to manually provide authentication credentials.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical password-based authentication system with an automated monitoring and evaluation system that uses software-based risk assessment. Instead of requiring physical or manual password entry, the system uses algorithms to analyze user behavior, device state, and environmental factors to automatically determine access permissions.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If client-server frameworks are deployed for data protection, then security is improved, but infrastructure cost increases due to required hardware and software investments

Engineering Contradiction:
ImprovesecurityVSAvoidinfrastructure cost
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the essential security function from complex client-server frameworks and implements it as a lightweight monitoring entity that operates independently. By removing the need for centralized servers, authentication domains, and complex network infrastructure, the system achieves security through a simplified single-node implementation that monitors local device state and user behavior.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system replaces expensive, complex, and long-lasting infrastructure components (servers, domain controllers, network hardware) with a lightweight, software-based monitoring entity that can be implemented as a simple program or service. This disposable-like approach uses minimal computational resources and eliminates the need for costly physical infrastructure while providing continuous security monitoring.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Reliability

If strict access control measures are implemented, then data protection is improved, but device availability deteriorates due to frequent downtime

Engineering Contradiction:
Improvedata protectionVSAvoiddevice availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system implements dynamic access control that adapts to changing user behavior and device state in real-time. The monitoring entity continuously evaluates security risks and adjusts access permissions dynamically based on current conditions, allowing users to access devices during normal operation while automatically restricting access only when genuine security threats are detected, thereby maintaining high device availability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements a feedback mechanism where the monitoring entity continuously monitors device state, user behavior, and security conditions, then provides real-time feedback to adjust access control decisions. This closed-loop system learns from user interactions and security events, making access control decisions that balance security with availability based on actual system state rather than static rules.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12373581B2System and device for data protection and method thereof
Publication Date: 2025.07.29 TAIWAN SEMICONDUCTOR MANUFACTURING CO LTD
  • US12373581B2 patent drawing
  • US12373581B2 patent drawing
  • US12373581B2 patent drawing

AI summary

A method of operating a user device includes: receiving a command from a user to power on the user device; determining whether the user device is located within a restricted zone through accessing a key server located within the restricted zone by a first monitoring entity of the user device before an operating system of the user device is executed, wherein the key server is configured to store a key for encrypting or decrypting the user device; and granting access of the user to the user device by the first monitoring entity in response to determining the user device as being within the restricted zone through successfully accessing the key server.