Resource Access Control With Identity and Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control methods for protected resources are insecure due to the ease of forging or errors in verifying user identity or device location, leading to unauthorized access.
Innovation Solution
A method and system that authenticates user identity and verifies geographical location and positioning assistance information before granting access tokens, ensuring the terminal device is within a predetermined area and meets specific conditions, such as movement direction or speed, to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If user identity or distance verification is used for access control, then access speed is improved, but security reliability deteriorates due to ease of forging or errors
Solution Approach 1:
The access control process is divided into multiple independent verification stages: user identity authentication, location information verification (including geographical location and positioning assistance information), and access token issuance. Each stage operates independently and must be successfully completed for the next stage to proceed, thereby maintaining fast access while improving security through layered verification.
Solution Approach 2:
The verification process transitions from traditional one-dimensional identity verification to multi-dimensional verification that includes both geographical location information and positioning assistance information. This adds temporal and spatial dimensions to the authentication process, making it more difficult to forge while maintaining efficient access control.
2Reliability
If location information verification is added to access control, then security reliability is improved, but device complexity increases
Solution Approach 1:
The server acts as an intermediary that handles all location information verification operations. Instead of requiring the terminal device to perform complex location verification, the server receives location information from the terminal, verifies both geographical location and positioning assistance information, and issues access tokens accordingly. This intermediary approach improves security while keeping the terminal device relatively simple.
Solution Approach 2:
The system performs location information verification in advance before granting access. The server verifies both geographical location and positioning assistance information beforehand, and only issues access tokens after successful verification. This preliminary action ensures security is built into the access control process rather than added as an afterthought, managing complexity through proactive verification.
Data Source
AI summary
A terminal device sends resource access request information to a server, and the resource access request information carries a user identity and an identifier of a to-be-accessed resource. The server performs authentication on the user identity. If the authentication succeeds, the server obtains location information of the terminal device, and the location information includes geographical location information and positioning assistance information. The server attempts to verify the location information of the terminal device. If the verification succeeds, the server sends an access token corresponding to the identifier of the to-be-accessed resource to the terminal device. The terminal device obtains the to-be-accessed resource based on the access token.