Mobile Device Recovery Using Biometric and Recovery Code Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for recovering a lost mobile device, especially those with stored credentials like online banking keys and authentication information, are time-consuming and inefficient, often requiring manual intervention from banks or physical letters, and lack centralized management solutions that comply with privacy regulations.
Innovation Solution
A method involving inherence factor verification for devices without centralized management and knowledge factor verification for those with centralized management, using recovery codes and multi-factor authentication, including biometric and knowledge-based approaches, to facilitate easy device recovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If prior art recovery methods are used (manual bank intervention, physical letters), then security is maintained, but recovery time is excessively long and process complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-configuring self-service recovery mechanisms during device setup. Users register their biometric inherence factors and recovery codes in advance, enabling automatic device recovery without manual bank intervention when loss occurs. This eliminates the need for time-consuming physical letters and manual verification processes while maintaining security through pre-established authentication protocols.
Solution Approach 2:
The patent implements self-service recovery where users independently recover their devices using biometric authentication (fingerprint, face recognition) or pre-configured recovery codes. The system automatically verifies user identity through inherence factor matching and restores device access without requiring bank staff intervention. This self-service mechanism dramatically reduces recovery time while maintaining security through automated multi-factor authentication.
2Ease of operation
If centralized device management is implemented, then recovery process is simplified, but privacy regulation compliance becomes more difficult
Solution Approach 1:
The patent segments device management into two distinct modes: centralized management for organizations with homogenous users, and decentralized self-service for organizations with heterogeneous users. This segmentation allows each mode to be optimized independently - centralized mode simplifies recovery through automated processes, while decentralized mode reduces privacy compliance complexity by keeping data local and giving users direct control over their own device recovery without requiring centralized storage of sensitive personal information.
3Reliability
If biometric authentication is used, then device security is enhanced, but adoption is deterred by privacy regulations in certain jurisdictions
Solution Approach 1:
The system dynamically adapts its authentication approach based on organizational type and regional requirements. For organizations with homogenous users where centralized management is appropriate, biometric authentication is enabled to enhance security. For organizations with heterogeneous users or in jurisdictions with strict privacy regulations, the system switches to alternative authentication methods such as recovery codes or knowledge factors. This dynamic adaptability maintains high security standards while complying with diverse regional privacy regulations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a method for recovering a device (D). The method comprises the steps of acquiring a recovery code with the device (D) to be recovered, matching an inherence factor of a user recovering the device (D) with an inherence factor of a user which is assigned to the device, and allowing a recovery of the device (D) if the inherence factor of the user recovering the device and the inherence factor of the user which is assigned to the device sufficiently matches. A further method is provided which comprises the steps of connecting the device (D) to be recovered to a cloud storage in which a backup of the device is stored, requesting a knowledge factor from the user recovering the device (D), allowing a recovery of the device (D) if the possession factor is correctly inputted into the device (D) to be recovered. Further an App is provided which can be stored on a device, which App contains instructions for carrying out the method. Still further a System is provided comprising a device (D)and an App stored on the device (D) which is adapted to carry out the method.