Remote IoT Service Access Using Proximity-Based Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current service devices, such as ATMs, face security concerns due to the vulnerability of PIN numbers and access cards, leading to potential unauthorized transactions and limited functionality.
Innovation Solution
A computing environment authenticates mobile devices and users based on proximity, registration, and credentials to facilitate secure transactions with IoT service devices, enabling contactless functionality and enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PIN numbers and access cards are used for authentication, then users can access service devices, but security is compromised due to potential theft and insufficient authentication
Solution Approach 1:
The patent introduces a computing environment as an intermediary between the mobile device and the service device. This intermediary performs multiple authentication checks including device proximity verification, user credential validation, and device registration status, thereby enhancing security without requiring changes to the user's mobile device or service device infrastructure
Solution Approach 2:
The system performs preliminary authentication actions before granting access to the service device. The computing environment verifies device proximity, validates user credentials, and checks device registration status in advance, preventing unauthorized access before it can occur rather than relying solely on PIN or card verification at the point of transaction
2Productivity
If automated service devices are implemented, then service events are automated and user waiting time is reduced, but security concerns arise due to vulnerability of authentication credentials
Solution Approach 1:
The system implements feedback mechanisms where the computing environment continuously monitors authentication status, device proximity, and transaction legitimacy. Based on this feedback, the system dynamically decides whether to grant or deny access, enabling automated service delivery with enhanced security oversight
Solution Approach 2:
The computing environment serves as a security intermediary that processes all authentication and authorization requests between users and automated service devices, allowing service automation to proceed while maintaining centralized security control
3Ease of operation
If remote access to service devices is enabled, then secure transactions can be facilitated without physical presence, but authentication complexity increases
Solution Approach 1:
The mobile device performs self-verification by providing its own location data and authentication credentials to the computing environment. The device itself participates in the authentication process by supplying necessary information, reducing the need for complex manual verification procedures while enabling remote access
Data Source
AI summary
A system can be provided that can enable remote access to IoT service devices to facilitate secure transactions. For example, the system can include a IoT service device positioned in a location associated with a service provider. The system can also include a computing environment, which may receive, from a mobile device, a request to perform a function of the IoT service device. The request can include authentication credentials for a user account. Further, the computing environment can authenticate a user of the mobile device based on the authentication credentials. The computing environment may also authenticate the mobile device based on a distance between a location of the mobile device and the location associated with the service provider being less than a threshold distance. Additionally, the computing environment may transmit an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the function.