Multi-Channel Mobile Authentication via Terminal Fingerprint
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods, such as username and password combinations, are inconvenient and vulnerable to fraudulent access, and multi-factor authentication systems often require multiple credentials, making them difficult to manage.
Innovation Solution
An authentication system that uses two distinct communication channels to verify a mobile terminal's secure element and processor-based controller, generating responses based on unique terminal fingerprints and transaction context, enhancing security and convenience by reducing the need for multiple passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password authentication is used, then user identification is achieved, but security is vulnerable and convenience is poor due to memory burden
Solution Approach 1:
The system uses the mobile terminal itself to generate authentication responses through its secure element and processor-based controller, eliminating the need for users to remember passwords. The terminal's unique fingerprint and transaction context automatically create secure authentication credentials.
Solution Approach 2:
The mobile terminal acts as an intermediary between the user and the authentication system, using its secure element and controller to mediate the authentication process through multiple communication channels, replacing direct username/password entry.
2Reliability
If multiple authentication factors are used, then security is improved, but device complexity and credential management difficulty increase
Solution Approach 1:
The system merges multiple authentication factors (secure element verification, processor-based controller verification, terminal fingerprint analysis, and transaction context validation) into a unified authentication process that operates transparently through multiple communication channels.
Solution Approach 2:
The mobile terminal's secure element and processor-based controller serve multiple functions: generating unique terminal fingerprints, creating authentication responses, and validating transaction contexts across different communication channels, eliminating the need for separate authentication devices.
3Reliability
If multiple authentication factors are used, then security is improved, but ease of operation deteriorates due to multiple credentials to manage
Solution Approach 1:
The mobile terminal automatically manages all authentication credentials and generates responses without user intervention. The secure element and processor-based controller handle credential storage, generation, and transmission across multiple channels, eliminating the need for users to manage multiple passwords or tokens.
4Reliability
If channel diversity is increased, then security against fraudulent access is improved, but system complexity increases
Solution Approach 1:
The authentication system segments the verification process into distinct communication channels, with the secure element handling one channel and the processor-based controller handling another, allowing independent verification through diversified paths while maintaining modular system architecture.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An authentication system (21) is disclosed which is configured, in response to receiving a request to authenticate a transaction, to send a first challenge (313) to a mobile terminal (4) via a first channel (78) and, in response to receiving a first response (316) to the first challenge to determine whether the first response is correct, to send a second challenge to the mobile terminal (4) via a second, different channel (79) and, in response to receiving a second response (338) to the second challenge to determine whether the second response is correct, and, in dependence upon the first and second responses being correct, to signal that the transaction is authenticated.