Network Authentication Using Device Positioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network identity authentication methods are inefficient and costly due to the need for multiple identity verification devices for different Internet content providers, and are vulnerable to hacking attempts that intercept user IDs and passwords, leading to increased customer service costs and hardware changes.
Innovation Solution
A network authentication method that uses a user terminal and a portable personal electronic device connected via a communication network, utilizing GPS and scan programs to provide hardware identification data and positioning information to a verification server for secure authentication, ensuring that only the owner of both devices can access the content-provider server, thus minimizing additional verification device needs and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional identity verification devices are provided for each user, then user identity authentication is secured, but customer service cost for personalization, distribution and troubleshooting increases considerably
Solution Approach 1:
The patent uses a copy of the user's biometric information (fingerprint, iris, or face image) stored in the verification server to authenticate users, eliminating the need for physical identity verification devices. This copying approach reduces device distribution and troubleshooting costs while maintaining authentication security.
Solution Approach 2:
The patent replaces mechanical identity verification devices with a biometric recognition system that uses optical or electrical scanning. The user's biometric data is captured, processed, and compared against stored templates, substituting physical devices with a software-based verification mechanism that reduces operational costs.
2Reliability
If users need different identity verification devices for different Internet content providers, then each provider can verify user identity, but user convenience deteriorates
Solution Approach 1:
The patent creates a universal biometric verification system where a single set of biometric data can be used across multiple Internet content providers. The verification server stores and compares biometric templates, allowing users to authenticate with any provider using the same biometric characteristics, eliminating the need for multiple different verification devices.
Solution Approach 2:
The system performs preliminary registration where the user's biometric information is captured and stored in the verification server before actual authentication is needed. This preliminary action creates a reusable template that speeds up subsequent authentication processes and eliminates the need for users to carry or set up different devices for each provider.
3Reliability
If hackers intercept user IDs and passwords, then authentication security is compromised, but implementing additional hardware equipment to prevent this increases cost for Internet content providers
Solution Approach 1:
The patent replaces traditional hardware-based authentication (ID cards, passwords) with biometric recognition technology. The system captures biometric data (fingerprint, iris, or face image), processes it into templates, and performs pattern recognition comparisons. This substitution eliminates vulnerable password systems while reducing the need for additional hardware equipment at the user level.
Solution Approach 2:
The patent introduces a verification server as an intermediary that handles all biometric data storage, processing, and comparison. This centralized intermediary secures authentication by keeping sensitive biometric templates on the server side rather than requiring users to possess or protect additional hardware devices, thereby reducing hardware quantity while maintaining or improving security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In a network authentication method, upon receipt of correct user login data from a user terminal (1), a content-provider server (2) transmits a verification request to a verification server (3) via a communication network (100). After receiving hardware identification data and positioning information, which are associated with the user terminal (1) and a portable personal electronic device (4) carried by a user (5), the verification server (3) transmits a verification reply indicating successful authentication of the identity of the user (5) when the hardware identification data is successfully verified while the positioning information indicates that the portable personal electronic device (4) is in close proximity to the user terminal (1).