Portable Authentication Device Physical Presence Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current portable electronic authentication and encryption devices are vulnerable to malicious software and keyloggers, as they often require pin code entry on a computer keyboard, which can be intercepted, and lack robust physical presence verification mechanisms.
Innovation Solution
A portable authentication and encryption device that requires physical user presence for operations through a keypad or biometric verification, using capacitive touch buttons or fingerprint readers, and prevents unauthorized access by disabling input/output and employing a tamper-responsive enclosure, ensuring that pin codes are entered on the device itself and not on a connected computer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If pin code entry is performed on a computer keyboard, then ease of operation is improved, but security deteriorates due to vulnerability to keyloggers and malicious software
Solution Approach 1:
The patent extracts the pin code entry function from the computer keyboard and relocates it to the portable authentication device itself. The device includes a dedicated keypad and display that are physically separate from the computer system, ensuring that pin codes are never transmitted through or processed by the potentially compromised computer keyboard, thereby eliminating keylogger vulnerability while maintaining ease of operation.
Solution Approach 2:
The portable authentication device acts as an intermediary between the user and the computer system. All authentication credentials and pin codes are processed locally within the device's secure environment, and only verified authentication results are communicated to the computer. This intermediary architecture prevents direct exposure of sensitive input to the computer's potentially malicious software environment.
2Object-affected harmful factors
If physical presence verification mechanisms are added, then security is improved, but device complexity increases
Solution Approach 1:
The patent replaces complex mechanical or biometric physical presence verification systems with a simpler capacitive touch detection mechanism. The capacitive buttons detect the presence of a human finger through electrical field interaction, providing reliable physical presence verification without requiring complex optical sensors, fingerprint readers, or other sophisticated biometric systems, thus improving security while minimizing device complexity.
Solution Approach 2:
The patent utilizes changes in electrical capacitance parameters when a finger approaches or touches the button surface to detect physical presence. This parameter-based detection method is inherently simple to implement using standard capacitive sensing circuits, providing robust unauthorized access protection without adding significant complexity to the device architecture.
3Object-affected harmful factors
If input/output is disabled on the portable device, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements dynamic control of input/output interfaces on the portable authentication device. The device selectively enables or disables specific I/O channels based on operational context, authentication state, and security requirements. During normal operation, the keypad and display are fully functional for user interaction. During security events or when not in use, I/O capabilities are dynamically restricted to prevent unauthorized access while maintaining full operational capability when needed.
Solution Approach 2:
The patent employs periodic authentication challenges and I/O capability re-evaluation to balance security and usability. The system periodically verifies user presence and authentication credentials, and I/O interfaces are dynamically enabled or disabled in periodic cycles based on security policies. This periodic action ensures that even if I/O is frequently disabled for security, legitimate users experience minimal disruption due to the predictable and manageable nature of these restrictions.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by preventing software-based attacks and keylogger interception, ensuring that sensitive information is protected with strong physical presence verification and hardware-based security features, making it more resistant to unauthorized access and data extraction.
Implementation Method 1
capacitive touch buttons
Data Source
AI summary
A portable electronic device for authentication and encryption communicably attached to a computer system is provided. The portable device may generate and automatically output authentication data for a plurality of accounts on request by a user. The output generated by the device is variable and customizable data that matches the data required by websites, applications, and other computer based systems to function as a universal authentication device. The device may include means to encrypt, decrypt, sign, verify and hash data including emails, images, documents and other files on request by a user. The device further having means to require physical user presence in order to generate authentication, encryption, decryption, signature, verification or hash data. The device includes a keypad having a plurality of buttons, a power and data connector, a data processing unit, a keyring hole, a light emitting diode, and a reset button.