NFC Access Control Using Ephemeral IDs for Universal Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user identification systems, known as silo models, require users to emit specific ID signals via individual devices, which are only detectable by specific entities, leading to memory overcrowding, performance issues, and security concerns, and lack seamless interaction with diverse physical environments.
Innovation Solution
A universal personal transponder system using a beacon apparatus and detector devices that broadcast ephemeral IDs, detected by scanners, with a dedicated server verifying user data, allowing devices to perform actions without user intervention, reducing the need for multiple applications and enhancing device performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users install multiple vendor-specific applications to interact with different devices, then users can access various services, but device memory is overcrowded and performance deteriorates
Solution Approach 1:
The patent implements a universal identification system where a single application provides functionality to interact with multiple vendor-specific devices. Instead of requiring separate applications for each device type, the system uses a common identification framework that can detect and communicate with diverse devices through standardized protocols, thereby reducing the number of applications needed while maintaining broad device compatibility
Solution Approach 2:
The patent introduces an intermediary identification layer that mediates between the user's device and various vendor-specific devices. This intermediary system uses universal identification signals and detection protocols to bridge the gap between different device ecosystems, allowing a single application to access multiple device types without requiring direct integration with each vendor's proprietary system
2Adaptability or versatility
If multiple vendor-specific applications are installed and executed, then users can access various services, but device performance becomes sluggish due to large data caching requirements
Solution Approach 1:
The patent merges the functionality of multiple vendor-specific applications into a single unified application. By consolidating service access, data caching, and device communication into one application instance, the system eliminates the performance overhead of running multiple separate applications simultaneously, thereby improving device productivity while maintaining service accessibility
3Adaptability or versatility
If users carry multiple identification signals for different vendors, then users can access various services, but security and privacy concerns increase
Solution Approach 1:
The patent extracts the identification functionality from multiple vendor-specific applications and consolidates it into a single universal identification module. This extraction separates the identification mechanism from proprietary vendor implementations, allowing centralized security management and reducing the attack surface associated with multiple applications, thereby improving security and privacy while maintaining service accessibility
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This system increases storage memory and device performance by minimizing the number of applications required, enabling seamless interactions with various devices through a universal ID, enhancing security and privacy.
Implementation Method 1
a transceiver for near field communication (NFC)
Data Source
AI summary
An access control system includes a first controller having a first antenna interface for broadcasting identifying data to local devices, for receiving ephemeral ID signals, token signals or payload data from local devices, and a first processor for determining a first authentication when an ephemeral ID signal or a token from a first local device is determined to be valid, for determining a second authentication when an ephemeral ID signal or a token from a second local device is determined to be valid, and for instructing a peripheral to perform a user-perceptible action in response to the first authentication, and a second controller coupled to the first controller having a second processor for receiving payload data for the second local device in response to the second authentication, and a second antenna interface for outputting at least a portion of the payload data to the remote server in response to the second authentication.