Route-Based Authentication for Mobile Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for mobile terminals carrying confidential information are either costly and cumbersome or vulnerable to forgery, as they require external devices for encrypted access codes or rely on position information that can be easily forged.
Innovation Solution
An access control method that generates an encryption key based on a planned route, encrypts information, and decrypts it using a decryption key derived from the actual movement route, ensuring secure access only if the planned and actual routes match, thereby maintaining confidentiality without the need for external devices or easily forgeable position information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an encrypted access code stored in a nonvolatile memory is used for authentication, then information confidentiality is maintained, but the coupling of an external device is required which increases cost and causes operational inconvenience
Solution Approach 1:
The patent extracts the authentication function from external devices and integrates it into the mobile terminal itself. The terminal uses its own position information (from GPS or other positioning systems) to generate authentication keys, eliminating the need for external nonvolatile memory devices while maintaining security.
Solution Approach 2:
The mobile terminal is given multiple functions: it serves as both the information display device and the authentication device. The terminal uses its positioning capability (originally for navigation or location-based services) to generate authentication keys, making the device universal and eliminating the need for separate authentication hardware.
2Ease of operation
If position information is used for authentication, then operational convenience is improved, but the position information is easily forged which compromises security
Solution Approach 1:
The patent applies preliminary action by pre-defining specific position information (latitude and longitude coordinates) that will be used to generate authentication keys. Instead of using any position data, the system pre-establishes specific geographic locations as authentication points, making forgery more difficult.
Solution Approach 2:
The patent changes the parameter of position information from general location data to specific, pre-defined geographic coordinates. By requiring authentication at specific latitude and longitude points rather than any location, the system increases the difficulty of forgery while maintaining the convenience of position-based authentication.
3Reliability
If a pre-defined access code is used for authentication, then information confidentiality is maintained, but the authentication process becomes cumbersome requiring external device coupling
Solution Approach 1:
The patent merges the authentication function with the mobile terminal itself. The terminal combines its positioning capability with cryptographic functions to generate authentication keys internally, eliminating the need for separate external authentication devices and reducing system complexity.
Solution Approach 2:
The mobile terminal performs authentication self-service by using its own position information to generate authentication keys. The device serves itself for authentication purposes, eliminating the need for external authentication infrastructure and reducing overall system complexity.
Data Source
AI summary
When a user carries a mobile terminal with confidential information, such as customer information, stored therein, it is required to maintain information confidentiality and to prevent an unauthorized third party from accessing the confidential information even if the mobile terminal is stolen. According to the disclosed access control method, an encryption key is generated based on a planned route and the information is encrypted. When the user accesses the information, a decryption key is generated based on the actual movement route that is regularly acquired. The encrypted information can be decrypted if the planned route and the movement route match.