NFC Wearable Authentication for Mobile Application Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods for mobile applications are vulnerable to unauthorized access, particularly when the user's device is lost or stolen, leading to potential misuse and personal interest loss.
Innovation Solution
A method utilizing near-field communication (NFC) on terminals to authenticate specific operations by detecting and verifying a particular near-field device within a defined communication range, ensuring only authorized devices can perform sensitive operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password is stored in the application for convenience, then user operation is simplified, but security is compromised when device is lost
Solution Approach 1:
The patent introduces a wearable device as an intermediary authentication component. The application on the terminal device stores credentials locally for convenience, but requires the wearable device to be physically present and authenticated through NFC or Bluetooth communication to execute sensitive operations. This intermediary wearable device acts as a mediator between the terminal and the authentication server, resolving the contradiction by enabling convenient local storage while maintaining security through the additional wearable authentication layer.
2Reliability
If OTP authentication is implemented, then security is improved, but operation complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-pairing the wearable device with the terminal device and pre-storing authentication credentials in the wearable device's secure element. When authentication is needed, the system automatically uses the pre-configured credentials through NFC or Bluetooth communication without requiring the user to manually input OTP codes. This eliminates the complexity of manual OTP entry while maintaining strong security through the pre-established secure channel and automatic credential presentation.
3Ease of operation
If short message OTP is used, then authentication is simplified, but security fails when mobile phone is lost
Solution Approach 1:
The patent creates a copy of the authentication mechanism by using a wearable device that contains a secure element with stored credentials, similar to how SMS OTP works. However, instead of relying on the mobile phone's SMS capability, the wearable device independently stores and presents authentication credentials through NFC or Bluetooth. This copying approach maintains authentication simplicity while eliminating the vulnerability to phone loss, as the wearable device serves as the authentication carrier regardless of phone status.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by ensuring that only authorized near-field devices can perform specific operations on the terminal, thereby preventing unauthorized access and protecting user interests.
Implementation Method 1
A method utilizing near-field communication (NFC) on terminals to authenticate specific operations by detecting and verifying a particular near-field device within a defined communication range
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure provides a method, terminal, and system for authentication with respect to an application. The present techniques may be applicable at a terminal with near-field communication function. When a particular operation of the application is triggered, a near-field device within a certain distance of a terminal is detected. An identification of the near-field device is obtained. The identification is sent to a server to request the server to determine whether the near-field device is a particular near-field device corresponding to the particular operation. A result of authentication performed by the server according to the identification is obtained. A following processing is applied to the particular operation according to the result of authentication. The present techniques ensure safety of operations of the application operated at the terminal.