Offline Authentication Token System for Smart Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods compromise privacy and are unreliable, especially in environments with limited network access, as they often require real-time database connections and can be vulnerable to hacking, and may not guarantee the authenticity of the user.
Innovation Solution
A system for offline user authentication that involves a pre-authentication process where a user's device is authorized by an authentication server and receives a pre-authentication token, which is then used for subsequent interactions with reader devices without needing real-time network access, ensuring privacy and reliability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If real-time database access is required for authentication, then authentication reliability is improved, but system adaptability deteriorates due to network dependency
Solution Approach 1:
The system performs preliminary authentication actions by generating and storing authentication tokens and cached credentials before the user actually needs access. This allows the authentication system to operate offline by using pre-computed authentication data, thus maintaining reliability without real-time database access while improving adaptability to network-less environments
2Measurement precision
If biometric data is transmitted over networks for authentication, then authentication precision is improved, but information security deteriorates due to hacking risks
Solution Approach 1:
The system extracts and processes biometric data locally on the user's device rather than transmitting it over networks. Authentication tokens are generated based on local biometric verification, and only these tokens (not the raw biometric data) are stored or transmitted. This maintains authentication precision while eliminating the security risk of biometric data transmission and storage in centralized databases
Solution Approach 2:
The system introduces authentication tokens as an intermediary between biometric data and access control decisions. Instead of transmitting or storing sensitive biometric data, the system uses token-based authentication where the token serves as a secure mediator that proves authentication without exposing the underlying biometric information, thus maintaining precision while improving security
3Reliability
If dedicated hardware badges are used for authentication, then authentication reliability is improved, but device complexity and cost increase
Solution Approach 1:
The system makes authentication credentials universal by implementing them in software form that can run on multiple types of devices (smartphones, tablets, laptops, wearables) rather than requiring dedicated hardware badges. The authentication token works across different device platforms, eliminating the need for device-specific hardware while maintaining reliability through secure token management and verification mechanisms
Data Source
AI summary
A smart device includes a transceiver for outputting a user identifier to an authentication server, for receiving a data packet and a pre-authorization token from the authentication server, wherein the data packet comprises reader identifiers associated with a plurality of reader devices, and wherein the pre-authorization token indicates that smart device is approved to interact with the plurality of reader devices, a storage device for storing the reader identifiers and the pre-authorization token, wherein the transceiver is for receiving a reader identifier from a reader device, a processor for determining an authorized reader condition when the reader identifiers includes the reader identifier, wherein the processor is for determining a reader token in response to the pre-authorization token and the authorized reader condition, wherein the transceiver for transmitting the reader token to the reader device.