Offline Authentication Model for Mobile Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile devices lack secure authorization mechanisms for offline interactions, as they rely on centralized online services for authentication and authorization, which are unavailable when devices are offline, posing security and legitimacy risks.
Innovation Solution
Implementing a local authentication model derived from a master authentication model on mobile devices, allowing them to securely authorize interactions offline by using a local risk analyzer and updating the model when online, ensuring up-to-date control logic for data processing and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized online services are used for authentication and authorization, then security and legitimacy are guaranteed, but services become unavailable when devices are offline
Solution Approach 1:
The patent divides the centralized authentication system into two segments: a remote server that maintains the master authentication model and local devices that store and execute derived local authentication models. This segmentation enables offline operation at the local device level while maintaining connection to the centralized system for model updates and synchronization.
Solution Approach 2:
The system performs preliminary actions by pre-downloading and caching authentication models, risk analysis algorithms, and authorization rules to local devices before they need to operate offline. The master authentication model is derived and stored in advance, enabling immediate local operation without requiring real-time online connectivity.
2Adaptability or versatility
If local authentication models are implemented on mobile devices, then offline authorization capability is enabled, but device complexity increases
Solution Approach 1:
The patent extracts the essential authentication logic from the centralized server by deriving local authentication models from the master model. This extraction process removes complex authentication computations from the server and places them on mobile devices, enabling offline operation while reducing server infrastructure requirements.
Solution Approach 2:
The system implements local quality by storing and executing authentication models specifically on mobile devices, allowing them to perform risk analysis and authorization decisions locally based on their unique operational context. Each device maintains its own local model that is tailored to its specific usage patterns and security requirements.
3Reliability
If authentication models are updated continuously, then security remains up-to-date, but connectivity requirements increase
Solution Approach 1:
The system implements periodic action by establishing scheduled synchronization cycles where local devices automatically update their authentication models from the remote server at predetermined intervals. This periodic updates mechanism ensures security remains current while allowing devices to operate independently between update cycles.
Solution Approach 2:
The patent incorporates feedback mechanisms where devices report their operational status, risk encounters, and model performance data back to the remote server. This feedback enables the server to refine the master authentication model and push targeted updates to devices, maintaining security effectiveness without requiring constant connectivity.
Data Source
AI summary
A method is disclosed and includes receiving, by a first communication device, a first local authentication model, the first local authentication model being derived from a master authentication model at a remote server computer, and receiving a request to perform an interaction with a second communication device, the interaction being performed in an offline manner. The method may further include applying, by the first communication device, the first local authentication model to the interaction to determine a first authentication result and determining whether or not to allow the interaction to proceed based upon the first authentication result. The method may also include updating the first local authentication model using the master authentication model when the first communication device is online.