Passwordless Authentication via Mobile Device Sensors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password-based authentication on websites poses significant user experience and security challenges, particularly for users with disabilities, as it requires manual input of credentials, which can be cumbersome and insecure, especially when using assistive technologies.
Innovation Solution
A system that utilizes an Internet-connected device, such as a smartphone, to authenticate website access by broadcasting a one-time token and employing alternative strategies like motion, sound, or barcode scanning to transfer credentials securely, eliminating the need for manual input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used, then website security is maintained, but user experience deteriorates due to manual input requirements and accessibility issues
Solution Approach 1:
The patent introduces a passwordless authentication system that acts as an intermediary between the user and the website. Instead of directly entering passwords, users authenticate through a passwordless flow that uses device-based credentials and biometric verification, eliminating the need for manual password input while maintaining security through cryptographic verification
2Ease of operation
If built-in browser credential features are used, then password management is simplified, but security deteriorates due to unauthorized access risks on shared computers
Solution Approach 1:
The system enables self-service authentication where the user's own device serves as the security credential. The authentication is tied to the user's personal mobile device with biometric verification, so even if a computer is shared or compromised, the credentials cannot be stolen because they are bound to the user's physical device and biometric data
3Adaptability or versatility
If assistive technologies are used, then accessibility is improved, but security deteriorates due to credential exposure risks
Solution Approach 1:
The patent replaces the mechanical act of typing passwords with biometric verification and device-based authentication. Users with disabilities can authenticate through various accessible methods such as voice commands, eye tracking, or simplified device interactions, while the actual credential verification happens securely through cryptographic protocols without exposing sensitive information
Data Source
AI summary
The invention is an authentication framework that enables a user to log in to a website using an Internet-connected device, such as smartphone, smart watch, smart glasses, or tablet, while browsing on a computer. The framework makes it easier for people with certain disabilities to log in to a website, such as by removing the mandatory step of entering usernames and passwords while giving users multiple options through which they are establish their identity using Internet-connected devices. For example, gyroscope, camera, microphone, or the accelerometer can be used to provide credentials. This approach of the framework greatly reduces the number of barriers that a user with disability encounters when trying to use password-based authentication on the Internet.