NFC Authentication Using USIM ID and Password

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user authentication methods for security devices, such as password input through key devices or RFID/fingerprint recognition, are prone to exposure, duplication, loss, and failure, necessitating a more secure approach.

Innovation Solution

A system and method utilizing near field communication between a security device and a mobile device, where a Universal Subscriber Identity Module (USIM) ID and password are transmitted through near field communication for authentication, with the security device verifying these credentials to enable operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional password input through key devices or RFID/fingerprint recognition is used, then user authentication can be performed, but the password may be exposed, duplicated, lost, or fail to be recognized

Engineering Contradiction:
Improveauthentication securityVSAvoidpassword exposure and duplication
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the password input function from the security device itself and relocates it to the user's mobile device. The security device only retains the authentication verification function, receiving and validating credentials transmitted via NFC from the mobile device. This separation removes the vulnerability of having password input capabilities within the security device, preventing password exposure and duplication attacks.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces the user's mobile device as an intermediary between the authentication request and the security device. The mobile device serves as a secure credential storage and transmission medium, using NFC technology to communicate authentication credentials to the security device without exposing them during transmission or storage. This intermediary approach eliminates direct password input at the security device, preventing the harmful effects of password exposure and duplication.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If separate key inputting devices are installed in the security device, then password input is enabled, but the device complexity increases

Engineering Contradiction:
Improvepassword input capabilityVSAvoiddevice structure
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent leverages the user's existing mobile device, which universally possesses NFC capabilities and computational resources, to perform the password input and credential management functions. This eliminates the need for the security device to include separate key inputting devices, RFID readers, or fingerprint sensors, thereby reducing device complexity while maintaining ease of operation through the user's familiar mobile device.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent enables the user's mobile device to self-service the authentication credential storage and input functions. The mobile device independently manages secure credential storage, handles the authentication protocol, and transmits credentials to the security device via NFC. This self-service approach eliminates the need for the security device to incorporate additional hardware components for password input, reducing complexity while maintaining operational ease.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9774575B2System and method for authenticating user by near field communication
Publication Date: 2017.09.26 DATA LOCKER INC
  • US9774575B2 patent drawing
  • US9774575B2 patent drawing
  • US9774575B2 patent drawing

AI summary

A system and method for authenticating a user by near field communication. The system for authenticating a user by near field communication includes a security device performing user authentication by using a Universal Subscriber Identity Module (USIM) ID and a password both being transmitted through near field communication in response to an authentication request, and a mobile device transmitting the USIM ID and password through near field communication.