Mobile Device Geolocation Verification for Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing security measures for protecting secure user accounts from unauthorized access are inadequate, as they often burden legitimate users while being vulnerable to impersonation by malicious entities, particularly in determining the legitimacy of access requests from mobile devices.

Innovation Solution

A method and system that authenticate access requests by obtaining and verifying the geolocation of a mobile device through collaboration with a cellular data provider, comparing the device's reported geolocation with its true location determined by the cellular network, to ensure the request originates from the actual user's device rather than an imposter or botnet.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication measures are used, then user accounts can be accessed, but security against unauthorized access is inadequate

Engineering Contradiction:

ImprovesecurityVSAvoidvulnerability to impersonation

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a cellular data provider as an intermediary to verify the geolocation of the mobile device. The provider independently determines the true geolocation and compares it with the reported location, acting as a trusted mediator to authenticate whether the device is physically present at the claimed location, thereby preventing impersonation attacks

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical authentication methods (such as password verification alone) with a network-based verification system. The authentication process substitutes direct user verification with automated geolocation verification through cellular network infrastructure, using electronic communication to validate device presence

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If enhanced security measures are implemented, then unauthorized access is reduced, but the user's online experience is burdened

Engineering Contradiction:

ImprovesecurityVSAvoiduser experience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs geolocation verification automatically without requiring user action. The mobile device and cellular data provider independently complete the verification process in the background, allowing the authentication to occur seamlessly without interrupting the user's login experience or requiring additional user input

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The geolocation verification is performed as part of the authentication process before granting access. By completing the verification in advance during the login flow rather than as a separate step, the system ensures security checks are done proactively without burdening the user after authentication begins

Inventive Principle:

Principle #10Preliminary action

3Reliability

If geolocation verification is performed, then device authenticity is confirmed, but system complexity increases

Engineering Contradiction:

Improvedevice authentication accuracyVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the authentication system into separate functional components: the mobile device that reports geolocation, the server that receives and processes authentication requests, and the cellular data provider that independently verifies location. This segmentation allows each component to perform its specific function without requiring the entire system to become overly complex

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS9332432B2Methods and system for device authentication

Publication Date: 2016.05.03 R2 SOLUTIONS LLC

AI summary

A request is received to access a user account. A geolocation of a mobile device registered with the user account is obtained directly from the mobile device. Authentication credentials for the user account are verified for correctness. A mobile device geolocation verification request is transmitted to a cellular data provider. The cellular data provider is equipped to independently determine a true geolocation region of the mobile device for comparison with the geolocation of the mobile device as obtained directly from the mobile device. A verification response to the mobile device geolocation verification request is received from the cellular data provider. The verification response indicates whether or not the geolocation of the mobile device as obtained directly from the mobile device corresponds to the true geolocation region of the mobile device. A response to the access request based on the verification response is transmitted.