NFC Authentication Using Signal Strength Variation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Near field communication (NFC) devices lack effective security measures, as they do not require a personal identification number (PIN) for transactions, leading to potential unauthorized use if the device is lost or stolen, allowing multiple low-value transactions to occur.
Innovation Solution
Implementing a system that uses the variation in signal strength over time as a unique identifier for authentication, where the user moves their NFC device in a predetermined pattern to authenticate, correlating the first unique identifier from the signal with a converted second unique identifier based on signal strength variations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If NFC transactions are made contactless without PIN entry, then payment speed and ease of use are improved, but security is worsened allowing unauthorized transactions if device is lost or stolen
Solution Approach 1:
The patent changes the authentication parameter from static (PIN code) to dynamic (signal strength variation over time). The system measures RSSI values at multiple time points and compares the variation pattern against stored authentication data, creating a time-dependent security parameter that maintains quick authentication while preventing unauthorized use.
Solution Approach 2:
The patent introduces signal strength (RSSI) as an intermediary parameter between the physical act of holding the device and the authentication decision. Instead of directly using PIN entry or simple proximity detection, the system uses RSSI variations as a mediator to verify that the legitimate user is holding the device, thus bridging the gap between convenience and security.
2Reliability
If signal strength variation is used for authentication, then security is improved, but device complexity is worsened due to additional measurement and comparison operations
Solution Approach 1:
The patent makes the existing NFC receiver perform multiple functions: it not only receives NFC data but also measures signal strength (RSSI) and tracks its variations over time. By utilizing the same hardware components for both data reception and security authentication, the system avoids adding separate dedicated hardware, thus limiting the increase in device complexity.
Solution Approach 2:
The system uses the NFC receiver's own operational characteristics (signal strength variations when held by a user) as the authentication mechanism itself. Rather than requiring separate sensors or additional components, the system leverages the inherent properties of the NFC communication process to provide security, making the system self-authenticating.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method enhances security by providing a personalized authentication mechanism that is usable with existing NFC technology, minimizing impact on usability and allowing for secure transaction approval or denial based on correct identifier correlation.
Implementation Method 1
a received signal strength indicator for measuring a signal strength of the received signal
Data Source
AI summary
Methods, computer program products, and systems for use in near field communications systems for authenticating at a near field communications receiver, a user of a near field communications transmitter. The system includes a data receiver for receiving a signal comprising a first unique identifier from a near field communications transmitter. The system also includes a received signal strength indicator for measuring a signal strength of the received signal. The system further includes a signal strength tracker for tracking a variation with time of the signal strength of the received signal and converting the variation with time into a second unique identifier. The system further includes a comparator for comparing the received first unique identifier and the tracked and converted second unique identifier and for outputting a signal indicating the result of the comparison. The user is authenticated if the signal indicates that the first and second identifiers correlate correctly.