Mobile Device Authentication for Physical Compartment Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional locker access systems require physical keys held by both the customer and the bank, limiting bank access and requiring customer assistance, while also not leveraging the potential of mobile devices for secure authentication.
Innovation Solution
A system utilizing a mobile device with short-range wireless circuitry and a transaction authentication system, where the mobile device encrypts information using a cryptographic key, and upon successful authentication, allows access to a physical compartment in conjunction with an auxiliary key, enabling secure and convenient access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional dual-key physical locking mechanism is used, then security is maintained through bank control, but bank cannot access locker without customer presence and customer requires bank assistance
Solution Approach 1:
The patent replaces the traditional mechanical dual-key physical locking system with an electronic authentication system using mobile devices, cryptographic keys, and wireless communication. The mechanical key insertion and turning mechanism is substituted with electronic authentication protocols, allowing remote access initiation and automated locking/unlocking control without requiring physical key exchange or customer presence at the locker.
Solution Approach 2:
The patent introduces a bank server as an intermediary between the customer's mobile device and the locker locking mechanism. The server receives authentication requests, verifies cryptographic keys, and controls the locking mechanism remotely. This intermediary enables the bank to manage access centrally without requiring direct customer-banker interaction at the physical locker location.
2Adaptability or versatility
If mobile device replaces traditional payment instruments, then convenience is improved, but new authentication system for physical access is required
Solution Approach 1:
The patent extends the mobile device's existing functionality as a payment instrument to also serve as an access control credential. The same mobile device that handles contactless payments is utilized for locker access, eliminating the need for separate physical keys or access cards. The device performs multiple functions: payment processing, authentication, and access control authorization.
Solution Approach 2:
The patent changes the authentication parameter from physical key presence to cryptographic verification. Instead of detecting a physical key in a lock mechanism, the system verifies cryptographic keys through wireless communication protocols. This parameter change enables seamless integration with existing mobile payment infrastructure while providing secure access control.
3Reliability
If cryptographic key encryption is implemented, then security is enhanced, but authentication process becomes more complex
Solution Approach 1:
The patent implements self-service authentication where the mobile device automatically performs cryptographic operations without requiring user intervention. The device autonomously generates authentication requests, manages cryptographic keys, and communicates with the bank server. This self-service approach maintains high security through cryptographic verification while simplifying the user experience by eliminating manual authentication steps.
Data Source
AI summary
Techniques are disclosed relating to securing physical compartments and allowing users access via a mobile device configured to use a mobile authentication system. In some embodiments, a locking device for a physical container is configured to unlock only if both a transaction authentication system confirms successful authentication of a mobile device and an auxiliary key is present. The locking device may receive encrypted data from the mobile device via a short-range wireless connection, transmit the data to the transaction authentication system, and receive a message indicating whether authentication was successful. The mobile device may encrypt the data using a replenishment key from the transaction authentication system; therefore the authentication may decrypt the received encrypted data to confirm an identity of the mobile device. In some embodiments, disclosed techniques may allow users to use their mobile device to unlock a safety deposit box without requiring extensive infrastructure investment, e.g., because the existing authentication network may be utilized.