Portable Security Token for Multi-Factor Mobile Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems for mobile devices rely heavily on passwords, which are inconvenient for users due to the need for complexity and length, and are vulnerable to theft and unauthorized access, especially when devices and tokens are stolen or lost, lacking robust multi-factor authentication.
Innovation Solution
A method and system that uses a portable security token with NFC or Bluetooth capabilities to provide a second, independent security factor, storing a master key for strong encryption and requiring user authentication via a PIN, ensuring secure access to mobile device resources even if the device is stolen, with features like cloud-based credential storage and synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a simple password or PIN is used for authentication, then ease of operation is improved, but security is worsened
Solution Approach 1:
The authentication system is segmented into multiple independent factors: something you have (portable security token), something you know (PIN code), and something you are (biometric data). This segmentation allows each factor to be optimized independently - the token provides strong security while the PIN remains simple for user input.
Solution Approach 2:
A portable security token acts as an intermediary device that stores cryptographic keys and authentication data. The token mediates between the user's simple PIN input and the complex cryptographic authentication process, providing both security and ease of use without requiring the user to manage complex passwords.
2Reliability
If a long and complex password is used, then security is improved, but ease of operation is worsened
Solution Approach 1:
The portable security token automatically performs cryptographic operations and key management without requiring user intervention. The system self-manages the complex security requirements through automated cryptographic processes, while the user only needs to provide simple authentication input.
3Reliability
If device encryption is enabled with a strong password, then security is improved, but ease of operation is worsened
Solution Approach 1:
Encryption keys are pre-generated and stored in the portable security token before device access is needed. The token holds the cryptographic materials in advance, so when authentication is required, the system can quickly verify credentials without requiring the user to remember or input complex passwords at the moment of access.
4Reliability
If a wearable physical token with wireless communication is used, then security is improved, but vulnerability to eavesdropping and theft is worsened
Solution Approach 1:
The authentication system uses asymmetric cryptography where the token holds private keys that cannot be derived from public information. Even if communication is eavesdropped, the cryptographic asymmetry ensures that intercepted data cannot be used to compromise security, as the private authentication credentials remain protected within the token.
Data Source
AI summary
A method and system of authenticating a computer resource such as an application or data on a mobile device uses a contactless token to provide multi-factor user authentication. User credentials are stored on the token in the form of private keys, and encrypted data and passwords are stored on the device. When application user requires access to the resource an encrypted password is transmitted to and decrypted on the token using a stored private key. An unencrypted data encryption key or password is then transmitted back to the device under the protection of a cryptographic session key which is generated as a result of strong mutual authentication between the device and the token.