Proximity-Based Access Control for Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile device users face frustration due to device-level lockdowns requiring frequent authentication for non-sensitive tasks, which delays access to information without providing additional security benefits, especially in contexts where quick access is needed.
Innovation Solution
A proximity-based access control method that determines if a mobile device is in a 'safe gathering' by using sensors and social context cues to adjust security levels, allowing for less stringent authentication schemes when in trusted environments and reverting to stricter policies when conditions change.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device-level lockdowns with strict authentication schemes are implemented, then security level is improved, but user convenience and access speed deteriorate
Solution Approach 1:
The patent implements dynamic authentication by adjusting security requirements based on real-time context factors such as location, time, device state, and user behavior patterns. The system transitions between different authentication modes (strict, moderate, relaxed) depending on the assessed risk level, rather than applying a fixed authentication policy. This resolves the contradiction by making security adaptive - strict when needed for reliability, relaxed when not needed for convenience.
Solution Approach 2:
The system changes multiple parameters simultaneously to balance security and convenience: authentication threshold parameters are adjusted based on location accuracy, time of day, device lock state, and user presence detection. When parameters indicate a safe context (e.g., device locked, user present, trusted location), the authentication parameter is relaxed; when parameters indicate risk, authentication becomes stricter.
2Reliability
If manual data entry authentication is required for each access, then security level is improved, but access time and productivity deteriorate
Solution Approach 1:
The system performs preliminary authentication and context assessment before actual resource access is needed. By evaluating security context factors in advance and establishing trust states, the system prepares authentication credentials or decisions beforehand. This allows users to access resources quickly when already authenticated, while still maintaining security through preliminary verification.
Solution Approach 2:
Instead of requiring authentication for every single access event, the system implements periodic re-authentication based on time intervals, context changes, or security policy thresholds. Once authenticated, users can access resources multiple times within the periodic window without manual entry, improving productivity while maintaining security through periodic verification.
3Reliability
If frequent authentication is required, then security level is improved, but user frustration and task completion time increase
Solution Approach 1:
The system continuously monitors context feedback (location, device state, user presence, application sensitivity) and adjusts authentication frequency dynamically. When feedback indicates a stable, secure context, the system reduces authentication frequency; when feedback indicates context changes or potential risks, authentication frequency increases. This feedback loop eliminates unnecessary authentication delays while maintaining security when needed.
Data Source
AI summary
Systems for proximity-based access control include a proximity module configured to determine whether a distance from a first mobile device to each of one or more safe mobile devices falls below a threshold distance; a policy engine comprising a processor configured to determine whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold; and a security module configured to activate a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.