Mobile Device Proximity Authentication via Intermediary Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems on mobile devices and online services face challenges in balancing security and convenience, often requiring users to input strong passwords frequently, leading to user inconvenience and potential security weaknesses due to the use of weak passwords or stolen devices.
Innovation Solution
A system that uses proximity detection between devices to automatically unlock or lock a target device based on the presence or absence of a designated 'key' device, reducing the need for frequent password entry and enhancing security by ensuring only authorized users can access the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strong passwords are used to protect mobile devices and online accounts, then security is improved, but user convenience deteriorates due to frequent and difficult password entry
Solution Approach 1:
A second device acts as an intermediary authentication mechanism between the user and the target device. Instead of directly entering passwords, the user presents the second device (containing a stored password or authentication credential) to the target device, which automatically verifies authentication. This intermediary approach maintains strong security through password protection while eliminating the inconvenience of manual password entry.
Solution Approach 2:
The manual mechanical action of typing passwords on a keyboard is replaced with an automated electronic authentication process. The second device electronically transmits authentication credentials to the target device, which automatically verifies them without requiring physical keyboard interaction. This substitution eliminates the tedious mechanical process of password entry while maintaining security.
2Ease of operation
If automatic unlocking based on device proximity is implemented, then user convenience is improved by eliminating password entry, but security deteriorates if the key device is lost or stolen
Solution Approach 1:
The password or authentication credential is pre-stored in the second device during a controlled setup process. This preliminary action ensures that the authentication credential is securely established before any automatic unlocking occurs. When the second device is later presented to the target device, the pre-stored credential enables automatic authentication without requiring the user to manually enter the password, thus providing both convenience and security.
3Reliability
If the device locks automatically after detecting absence of the key device, then security is improved, but user convenience worsens due to potential false locking when the user temporarily moves the key device
Solution Approach 1:
The authentication system dynamically adjusts its behavior based on the detected presence or absence of the second device. When the second device is present, the target device remains unlocked and fully functional. When the second device is absent for a specified time period, the target device automatically locks. This dynamic approach allows the system to adapt to the user's actual usage patterns, providing security when needed while avoiding false locking during temporary device separation.
Data Source
AI summary
The method disclosed herein provides for performing device authentication based on the of proximity to another device, such as a key device. When a key device is not near a mobile communications device, an unlock screen is allowed to be presented on a display screen. Based on the mobile communications device receiving a first code to unlock the mobile communications device, the mobile communications device is unlocked in a first mode. Based on receiving a second code while the unlocked mobile communications device is in the first mode, the unlocked mobile communications device changes from the first mode to a second mode, wherein a level of functionality of the mobile communications device in the second mode is greater than a level of functionality of the mobile communications device in the first mode.