Mobile Two-Person Access Authorization via Biometric Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing two-person access rule systems are inadequate for remote and mobile authorization, as they do not effectively combine physical-world attributes and human judgment for strong security verification, and fail to leverage modern mobile and cellular technologies.
Innovation Solution
A system utilizing mobile devices and cellular communications for secure two-person access authorization, which includes establishing a secure data connection, real-time person-to-person communication, and biometric verification, leveraging geolocation and mobile app functionalities to facilitate authorization decisions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional two-person access rule systems are used, then security verification is provided, but remote and mobile authorization is not supported
Solution Approach 1:
The patent introduces a mobile device as an intermediary between the authorized user and the resource. The mobile device captures biometric data (photos, voice samples) and geolocation information, then transmits this data to the authorization system. This intermediary enables remote authorization while maintaining security by collecting physical-world attributes through the mobile device's sensors and cameras.
Solution Approach 2:
The patent replaces traditional mechanical presence verification (physical co-location of authorized users) with electronic and optical fields. Biometric data captured by mobile devices (visual attributes via camera, voice via microphone) substitutes for physical presence, enabling remote verification while maintaining security through analysis of these field-based attributes.
2Ease of operation
If physical presence verification is required, then security is enhanced, but ease of operation for remote access is reduced
Solution Approach 1:
The patent substitutes mechanical physical presence requirements with field-based verification methods. The mobile device captures visual attributes (photos), acoustic attributes (voice samples), and geolocation data, replacing the need for physical co-location. The authorization system analyzes these field-based attributes to verify identity, enabling remote access while maintaining verification reliability.
Solution Approach 2:
The patent changes the verification parameters from physical presence (spatial parameter) to biometric and geolocation parameters. Instead of requiring the authorized user to be physically present at a specific location, the system verifies visual attributes, voice characteristics, and GPS coordinates captured by the mobile device, enabling remote verification through parameter transformation.
3Adaptability or versatility
If modern mobile technologies are integrated, then adaptability for mobile authorization is improved, but system complexity increases
Solution Approach 1:
The patent leverages the mobile device's existing multi-functional capabilities (camera, microphone, GPS, processor) to perform multiple verification functions. The same device that captures photos for visual verification also records voice samples and tracks geolocation. This universal mobile platform reduces overall system complexity by consolidating multiple verification functions into a single device rather than requiring separate systems for each function.
Data Source
AI summary
A system using mobile devices and a network provides access authentication, authorization and accounting to computing resources using a two-person access rule solution approach. A central access control server coordinates a rule-based authorization process in which a requesting user and one or more authorizing users are engaged in real-time communications to facilitate approved access to a sensitive resource. The technique utilizes mobile cellular interfaces and location service technologies, while also providing traditional security control measures of voice and visual verification of user identities.


