Network Authentication via Device Proximity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network identity authentication methods are costly and inconvenient due to the need for multiple identity verification devices for different Internet content providers, and are vulnerable to hacking attempts that intercept user IDs and passwords, leading to additional hardware changes and costs.
Innovation Solution
A network authentication method using a system with a user terminal, a content-provider server, and a portable personal electronic device that verifies user identity by matching hardware identification data and positioning information, ensuring the user terminal and device are in close proximity, thereby eliminating the need for multiple verification devices and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional identity verification devices are provided for each user, then user identity authentication security is improved, but the cost of customer service for personalization, distribution and troubleshooting increases
Solution Approach 1:
The patent applies universality by enabling mobile phones to serve as multi-functional identity verification devices. The mobile phone performs both communication functions and identity authentication functions through integration of the authentication client software, eliminating the need for separate dedicated verification devices and reducing personalization and distribution costs.
Solution Approach 2:
The patent uses copying by implementing software-based authentication clients that replicate the functionality of traditional hardware verification devices. Instead of distributing physical verification devices, the system distributes software copies to mobile phones, significantly reducing distribution and troubleshooting costs while maintaining authentication security.
2Reliability
If users need different identity verification devices for different Internet content providers, then authentication security is improved, but user convenience deteriorates
Solution Approach 1:
The patent applies universality by designing a platform-independent authentication client that can operate on various mobile phones. This single device serves multiple ICPs through the universal authentication mechanism, allowing users to maintain one verification device instead of multiple devices for different providers, thereby improving convenience while preserving security.
Solution Approach 2:
The patent introduces an intermediary authentication server that mediates between users and multiple ICPs. This server handles the authentication logic and device verification, allowing users to access different ICPs with a single mobile phone authentication client, thus improving ease of operation without compromising authentication security.
3Reliability
If ICP changes hardware equipments to prevent hacking, then security against interception is improved, but additional costs are generated
Solution Approach 1:
The patent applies mechanics substitution by replacing hardware-based authentication systems with software-based authentication clients running on mobile phones. This substitution eliminates the need for frequent hardware changes to prevent hacking, as the software can be updated remotely and the mobile phone's existing security features provide sufficient protection, thereby reducing costs while maintaining security.
4Reliability
If multiple identity verification devices are used, then authentication security is improved, but device management complexity increases
Solution Approach 1:
The patent applies merging by consolidating multiple authentication functions into a single mobile phone device. The authentication client combines identity verification, communication, and security features that previously required separate devices, simplifying device management while maintaining authentication security through the unified platform.
Solution Approach 2:
The patent applies universality by designing the mobile phone authentication client to work across multiple ICPs and platforms. This single universal device replaces multiple specialized verification devices, reducing management complexity while maintaining security through consistent authentication protocols across different service providers.
Data Source
AI summary
In a network authentication method, upon receipt of correct user login data from a user terminal, a content-provider server transmits a verification request to a verification server via a communication network. After receiving hardware identification data and positioning information, which are associated with the user terminal and a portable personal electronic device carried by a user, the verification server transmits a verification reply indicating successful authentication of the identity of the user when the hardware identification data is successfully verified while the positioning information indicates that the portable personal electronic device is in close proximity to the user terminal.