Mobile Device Authentication via Unique Tag and Challenge-Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for mobile devices are burdensome, requiring users to manually enter credentials and respond to challenge-tests, which can discourage usage while potentially compromising security if requirements are relaxed.
Innovation Solution
A system that generates a public-key certificate using a unique device tag, reducing the need for manual authentication by employing a partial hash of the tag and a predetermined string, along with an identity challenge, to construct a public-key signature for automated authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authentication credentials are required, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The mobile device automatically performs authentication by generating and transmitting a digital signature based on its unique identifier and the challenge received, without requiring manual user input. The device's authentication module autonomously computes the signature using the challenge-response mechanism, making the authentication process self-service and eliminating manual credential entry while maintaining security.
Solution Approach 2:
A challenge-response mechanism serves as an intermediary between the mobile device and the authentication server. The server provides a challenge that the device transforms into a signature using its unique identifier, and this signature is verified by the server. This intermediary process eliminates the need for direct manual credential handling while ensuring secure authentication.
2Ease of operation
If automated authentication using device tags is implemented, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The mobile device's existing unique identifier (such as IMEI or device ID) serves multiple functions: it identifies the device on the network, and it also serves as the basis for generating the authentication signature. This multi-functionality eliminates the need for separate authentication credentials or additional hardware tokens, reducing overall system complexity while enabling automated authentication.
Solution Approach 2:
The authentication mechanism transforms the device's static unique identifier into a dynamic signature by combining it with a time-varying challenge parameter. This parameter change approach allows the same device identifier to generate different authentication signatures for each authentication attempt, providing security without requiring additional complex authentication components.
Data Source
AI summary
An approach is provided for authenticating a mobile device. A mobile device initiates transmission of a request to an authentication platform for generating a public-key certificate to access a service from the mobile device. The mobile device receives an identity challenge and responds by initiating transmission of a tag specific to the mobile device to the authentication platform. The authentication platform uses the tag to generate a public-key certificate.