Mobile Key Session Authentication via GPS and IP Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User accounts in online systems are compromised when unauthorized users steal credentials, leading to potential financial losses and data theft, and existing security measures struggle to detect illegitimate sessions effectively.
Innovation Solution
An online system associates user accounts with a mobile device's unique key and geographical location, using a cryptographic signed key and GPS data to verify the authenticity of requests, thereby determining the legitimacy of session creation and requiring enhanced authentication for suspicious requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication is used, then users can access online systems, but user accounts are vulnerable to credential theft and compromise
Solution Approach 1:
The patent introduces mobile device information (device ID, GPS location, carrier data) as an intermediary verification layer between the user and the online system. This intermediary data serves as a trusted mediator that confirms the legitimacy of the authentication request without exposing passwords, thereby resolving the vulnerability to credential theft while maintaining account accessibility
Solution Approach 2:
The system performs preliminary verification of mobile device information and geographical location before granting account access. By checking whether the request originates from a recognized device and location in advance, the system prevents unauthorized access attempts before they can compromise credentials, addressing the security vulnerability proactively
2Reliability
If enhanced authentication procedures are implemented, then account security is improved, but user convenience and ease of operation deteriorate
Solution Approach 1:
The mobile device automatically provides verification information (device ID, GPS coordinates, carrier data) without requiring user input or manual verification steps. The device itself serves as the authentication mechanism, eliminating the need for users to remember additional passwords or perform complex verification routines, thus maintaining ease of operation while enhancing security
Solution Approach 2:
The mobile device performs multiple functions simultaneously: it serves as the authentication credential, the location verifier, and the session legitimacy confirmer. This multi-functionality consolidates what would otherwise require multiple separate authentication steps into a single unified process, improving reliability without proportionally increasing operational complexity
3Difficulty of detecting and measuring
If the system monitors and compares device information for authentication, then detection of suspicious sessions is improved, but system complexity increases
Solution Approach 1:
The authentication verification process is segmented into distinct components: device ID verification, GPS location checking, carrier data validation, and suspicious activity detection. Each component handles a specific aspect of verification independently, making the overall complex system manageable through modular organization while maintaining high detection capability
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly reduces unauthorized access by accurately identifying and mitigating suspicious sessions, limiting potential damage and enhancing security through automatic, reliable verification processes.
Implementation Method 1
the mobile key is a cryptographic signed key stored upon manufacture of the mobile device
Implementation Method 2
the geographical location of the mobile device is obtained from a global positioning system (GPS) of the mobile device
Data Source
AI summary
An online system determines whether a request for creating a session with the online system is suspicious. The online system associates a user account with a mobile key of a mobile device and geographical locations of the mobile device. The mobile key comprises unique identifier of the mobile device that is permanently stored on the mobile device. Upon receiving a request to create a session for the user account, the online system compares information associated with the user request with information describing the mobile device. For example, information associated with the user request can be a location determined by mapping internet protocol addresses obtained from the request. The online system determines whether the request is suspicious based on the comparison. If the online system determines that the request is suspicious, the online system may require enhanced authentication before granting the request.