Personal Digital Identity Device with Motion Sensor Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password-based cloud service authentication in mobile devices is vulnerable to hacking, as hackers can gain access to user accounts by obtaining password files, compromising sensitive user information.
Innovation Solution
A personal digital identity device that communicates with mobile devices and cloud services using radio links, requiring user interaction through hardware-based methods such as button presses, fingerprint sensors, or motion sensors to authenticate, making security hardware available only after user interaction, thereby enhancing security beyond password-only authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used, then ease of operation is improved, but security is worsened
Solution Approach 1:
The authentication system is segmented into two distinct components: a software-based password component and a hardware-based authentication component (personal digital identity device). This segmentation allows the password to handle ease of operation while the hardware device provides enhanced security, resolving the contradiction by distributing different authentication functions to different components.
Solution Approach 2:
A personal digital identity device serves as an intermediary between the user and the cloud service authentication system. This intermediary hardware device adds a layer of security by requiring physical possession and interaction, while still allowing the user to authenticate through their mobile device that they already use daily, thus maintaining ease of operation while improving security.
2Reliability
If hardware-based authentication is added, then security is improved, but device complexity is worsened
Solution Approach 1:
The complex hardware authentication functionality is extracted from the mobile device and placed into a separate personal digital identity device. This extraction reduces the complexity burden on the mobile device while maintaining the security benefits, as the hardware authentication logic resides in a dedicated external device rather than being integrated into the mobile operating system.
Solution Approach 2:
The personal digital identity device is designed to be self-contained and self-service, containing its own processing capabilities, secure storage, and authentication logic. This self-service design reduces the overall system complexity by making the hardware component autonomous, requiring minimal integration with the mobile device or cloud service infrastructure.
Data Source
AI summary
A personal digital ID device provides a digital identifier to a service for a predetermined duration in response to user interaction. The user interaction may include a button press. The personal digital ID device may be in the form of a bracelet, a key fob, or other form factor. The service may be provided by a mobile device, in the cloud, or elsewhere.