Remote Device Unlocking via Trusted Intermediary Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device unlocking mechanisms require direct input on the device being unlocked, which can be inconvenient and less secure when trying to unlock devices remotely or across different platforms.
Innovation Solution
A method and system that allows one device to unlock another device by establishing a trusted relationship, mutual authentication using distinct device keys, and exchanging secret keys to enable remote unlocking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If direct unlocking mechanisms are used on the device being unlocked, then security is maintained through local authentication, but convenience and remote unlocking capability are reduced
Solution Approach 1:
The patent introduces a first device as an intermediary that performs unlocking operations on behalf of the second device. The first device authenticates the user and retrieves the unlocking key, then transmits it to the second device to complete the unlocking process. This mediator approach enables remote unlocking while maintaining security through distributed authentication.
Solution Approach 2:
The unlocking process is segmented into distinct phases: authentication phase (first device verifies user credentials), key retrieval phase (first device obtains unlocking key from second device), and unlocking phase (second device uses key to access data). This segmentation allows each phase to be optimized independently and enables remote operation.
2Adaptability or versatility
If traditional local authentication is used, then security is maintained through direct user input, but usability and cross-platform capability are limited
Solution Approach 1:
The first device serves multiple functions: it acts as an authentication client, a key management intermediary, and a communication coordinator. The system supports both local and remote unlocking scenarios, as well as different authentication methods (passcode, fingerprint, facial recognition), making it universally applicable across various device types and platforms.
Solution Approach 2:
The patent replaces direct mechanical user input (typing passcodes on the locked device) with alternative authentication mechanisms. The first device captures biometric data or passcodes and transmits them securely to unlock the second device, substituting the need for direct physical interaction with the locked device.
3Reliability
If secret keys are exchanged between devices, then remote unlocking becomes possible, but security risks increase if keys are compromised
Solution Approach 1:
The system performs preliminary actions by establishing a trusted relationship between devices before unlocking occurs. The first device verifies the second device's identity and authentication status before retrieving or transmitting unlocking keys. This preliminary verification ensures that keys are only shared with authorized devices, reducing the impact of potential compromises.
Solution Approach 2:
The system implements feedback mechanisms where the second device provides authentication status and key availability information to the first device. The first device receives feedback about whether the unlocking key can be retrieved and adjusts its behavior accordingly. This feedback loop ensures secure key management and prevents unauthorized access.
Data Source
AI summary
A method of unlocking a second device using a first device is disclosed. The method can include: the first device pairing with the second device; establishing a trusted relationship with the second device; authenticating the first device using a device key; receiving a secret key from the second device; receiving a user input from an input/output device; and transmitting the received secret key to the second device to unlock the second device in response to receiving the user input, wherein establishing a trusted relationship with the second device comprises using a key generated from a hardware key associated with the first device to authenticate the device key.