Network Location Verification for Wireless Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods in wireless communication networks lack robustness in verifying user possession of mobile devices, especially when users attempt to access services from devices without direct wireless connectivity, such as desktops or laptops, which can compromise security.
Innovation Solution
Implementing an enhanced authentication system that utilizes network-determined location of user equipment (UE) to verify proximity between the UE and the participant device, combining location-based authentication with challenge-based authentication and biometric verification to ensure secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used without location verification, then the authentication process is simpler and faster, but security is compromised when users access services from devices without direct wireless connectivity
Solution Approach 1:
The patent introduces network-implemented location determination as an intermediary verification mechanism. Instead of directly verifying device possession, the system uses the network to determine UE location based on tracking area information, which then serves as evidence to support authentication. This intermediary approach enhances security without requiring complex direct verification protocols between the participant device and UE.
Solution Approach 2:
The patent replaces traditional mechanical/physical authentication mechanisms (such as direct device-to-device communication or biometric verification) with a network-based location determination system. The network determines UE location using tracking area data and compares it with participant device location, substituting complex physical verification with a more scalable network-centric approach that maintains security while reducing overall system complexity.
2Reliability
If network-determined location verification is added to authentication, then security against unauthorized access is improved, but the authentication process time and complexity increase
Solution Approach 1:
The patent performs location determination and tracking area verification as preliminary actions during the authentication process. The network determines UE location and compares it with participant device location before final authentication decisions are made. By performing these verification steps early in the authentication flow, the system prevents unnecessary processing time for failed authentication attempts and provides faster feedback to users.
Solution Approach 2:
The patent leverages the existing network infrastructure and tracking area mechanisms to serve multiple functions: traditional mobility management, location determination for authentication, and security verification. By making the network location determination system multi-functional, the patent avoids creating separate dedicated verification systems that would increase processing time and complexity.
3Reliability
If location-based authentication is implemented, then verification of user possession of UE is enhanced, but the system requires additional network infrastructure and coordination
Solution Approach 1:
The patent enables the network to self-serve the location determination function using its existing tracking area infrastructure. The network autonomously determines UE location based on tracking area information without requiring additional external location services or complex inter-network coordination. This self-service approach enhances possession verification while minimizing the need for additional network infrastructure.
Data Source
AI summary
A system described herein may provide a technique for enhanced authentication techniques that leverage network-based location determination of UEs, such as mobile telephones or other devices that communicate with a wireless network. For example, a wireless network may monitor, determine, or otherwise maintain information regarding the geographic location of User Equipment (“UEs”) that are associated with the wireless network. Some embodiments may utilize such network-monitored location information to verify that a participant device, associated with a given UE, is located within a particular proximity of the UE when performing an authentication process to receive services or resources.