Offline Device Authentication via Short-Range Relay
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users attempting to access secure resources with offline or non-long-range communication-capable devices face challenges in completing two-factor authentication due to the inability to receive second-factor authentication factors via long-range communication channels.
Innovation Solution
A method and system enabling two-factor authentication through a first user device transmitting an interaction request to a remote computer via a long-range channel, receiving an authentication request, transmitting it to a second user device via a short-range channel, and then back to the remote computer for verification, utilizing a response value generated by the second device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication is implemented using long-range communication channels, then authentication security is improved, but users with offline or non-long-range communication-capable devices cannot complete authentication
Solution Approach 1:
The patent introduces a dual-channel communication architecture where a first user device with long-range communication capabilities acts as an intermediary between the authentication server and a second offline user device. The first device receives authentication requests via long-range channels, forwards them to the second device via short-range channels, and relays responses back, enabling offline devices to participate in secure authentication without direct long-range communication capability.
2Adaptability or versatility
If offline devices are supported for authentication, then device compatibility is improved, but the authentication process becomes more complex
Solution Approach 1:
The authentication system is segmented into distinct functional components: a first user device handling long-range communication and protocol management, a second user device handling offline authentication operations, and an authentication server. This segmentation allows each component to specialize in specific tasks, reducing the complexity burden on individual devices while maintaining overall system capability.
Solution Approach 2:
The first user device serves as an intermediary that manages the complexity of protocol translation and message formatting between the authentication server and the offline second device. By concentrating the communication protocol handling in the first device, the second device remains simple while still enabling offline authentication.
Data Source
AI summary
A first user device can transmit an interaction request to a remote computer via a long range communication channel. The first user device can receive an authentication request message from the remote computer and can then transmit the authentication request message to a second user device via a short range communication channel. The first user device can then receive an authentication response message comprising a response value from the second user device via the short range communication channel. The first user device can then transmit the authentication response message to the remote computer causing the remote computer to verify the response value and perform further processing if the response value is verified.