Mobile Device Authentication Using Channel-Based Shared Secrets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing location-based authentication methods for mobile devices are vulnerable to data privacy concerns, complex, and prone to misuse, as they involve insecure communication channels that can lead to tracking of user movements and actions.
Innovation Solution
A method that uses a shared secret key derived from physical properties of the communication channel between a mobile device and a base station, allowing secure authentication and authorization without disclosing the device's identity, and enables secure transmission of authorizations to neighboring devices, leveraging common secrets and a central database for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If location-based authentication using unique identifiers and user names is implemented, then device identification and tracking capability is improved, but data privacy and security are worsened
Solution Approach 1:
The patent uses pseudonymous identifiers (pseudo-UUIDs) as copies of real device identifiers. These pseudonyms allow tracking and authentication functionality to be maintained while the real device identity remains protected. The mapping between pseudonyms and real identifiers is stored securely in the trusted environment, enabling indirect identification without direct exposure of unique device identifiers.
Solution Approach 2:
The patent introduces a trusted environment (secure element) as an intermediary layer between the device and the authentication server. This intermediary stores the mapping between pseudonymous identifiers and real device identifiers, allowing authentication to occur without directly exposing the real device identity. The trusted environment mediates all identifier-related operations, protecting user privacy while enabling functional authentication.
2Reliability
If device identifiers and user names are transmitted via wireless communication, then authentication capability is improved, but security against interception and misuse is worsened
Solution Approach 1:
The patent transmits pseudonymous identifiers instead of real device identifiers over the wireless communication channel. These pseudonyms function as safe copies that maintain authentication reliability while eliminating the security risk of exposing real device identities during transmission. The actual device identifiers never leave the trusted environment.
Solution Approach 2:
The patent extracts the real device identifier from the communication process entirely. Only pseudonymous identifiers are transmitted over the wireless channel, separating the authentication function from the exposure of sensitive device identity information. This extraction eliminates the vulnerability of transmitting unique device identifiers.
3Measurement precision
If frequent re-authentication is required when device moves, then location tracking accuracy is improved, but user convenience and system complexity are worsened
Solution Approach 1:
The patent performs preliminary authentication using pseudonymous identifiers before location-based re-authentication is triggered. The initial authentication establishes a secure session with the authentication server, allowing subsequent location updates to occur more efficiently without requiring full re-authentication cycles, thereby reducing user burden while maintaining tracking precision.
Data Source
AI summary
A method for authenticating a mobile device includes: probing by the mobile device a fading channel which connects the mobile device to a first radio base station; determining a secret held in common with the first radio base station as a function of a physical property of the fading channel; storing the in-common secret; receiving a first request for the in-common secret from a second radio base station; and, in response to the first request, sending a proof of knowledge of the in-common secret to the second radio base station.