NFC Tap Login with Auto-Generated Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks due to the practice of using the same username and password across multiple websites, making it easy for attackers to access all accounts if credentials are compromised, while also being inconvenient to manage unique and secure login information for each site.
Innovation Solution
Implementing NFC tap login with automatically generated login information, where a registered NFC-enabled smartphone communicates with a computing device to securely and conveniently log in to websites without manual credential entry, using a framework that includes a processing device, wireless communication unit, and a control unit to manage and authenticate login requests and provide unique login credentials for each website.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users employ the same username and password across most or all websites, then it is convenient to remember, but the security of user accounts is compromised to 'break once, run everywhere' attacks
Solution Approach 1:
The patent segments the login information management by creating unique username-password pairs for each website rather than using a single set of credentials across all sites. The system automatically generates and manages separate credential sets for different websites, isolating security risks so that compromise of one website's credentials does not affect other accounts.
Solution Approach 2:
The patent introduces an intermediary device (such as a smartphone with NFC capability) that acts as a mediator between the user and multiple website login systems. This intermediary automatically stores, manages, and transmits appropriate login credentials to different websites, eliminating the need for users to manually remember multiple passwords while maintaining security through automated credential management.
2Reliability
If users come up with a number of different usernames and passwords for each website, then security is improved, but it is inconvenient to remember and use the correct login information
Solution Approach 1:
The patent implements self-service functionality where the system automatically generates unique login credentials for each website, stores them securely, and retrieves the appropriate credentials without user intervention. The automated system manages the complexity of multiple unique passwords while providing seamless login experiences, allowing users to benefit from secure unique credentials without bearing the burden of remembering them.
Solution Approach 2:
The patent creates a universal login management system that can handle multiple websites and generate appropriate credentials for each. The intermediary device serves multiple functions including credential generation, secure storage, automatic retrieval, and transmission to different websites, providing a single solution that works across all login scenarios.
3Reliability
If manual credential entry is required for each website, then login security can be maintained, but the login process becomes time-consuming and complex
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing unique login credentials for each website in advance. When a user needs to log in, the system has already prepared the appropriate credentials, eliminating the need for manual creation or remembering of passwords. The credentials are ready for immediate automated transmission, significantly reducing login time while maintaining security.
Solution Approach 2:
The patent replaces the mechanical process of manual credential entry with automated electronic transmission. Instead of users physically typing usernames and passwords, the system uses automated mechanisms (including NFC technology) to transmit credentials electronically, reducing both time and potential for human error while maintaining security through automated management.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances login security by eliminating the need to remember multiple usernames and passwords, reducing the risk of 'break once, run everywhere' attacks, and simplifies the process of managing unique and strong passwords for each account.
Implementation Method 1
NFC uses magnetic induction between two loop antennas located within two NFC-enabled devices that are within close proximity of each other, effectively forming an air-core transformer
Data Source
AI summary
Methods and devices for NFC tap login with automatically-generated login information are disclosed. A user can launch a browser application and log in a desired website without having to enter the user's username and password. The user can achieve this by tapping a Near Field Communication-enabled computing device with an NFC-enabled wireless device. The wireless device generates and stores the user's usernames and passwords corresponding to a number of websites, and provides the username and password for the desired website to the computing device via an NFC-based communication link. Through a browser application running on the computing device, the user can sign up an account at and log in the desired website.