Smart Lock Authentication via Location Server Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional smart lock authentication methods require significant user participation and are vulnerable to security threats due to direct communication with user devices, necessitating the development of a more secure and user-interaction-free authentication solution.
Innovation Solution
A multi-factor authentication procedure utilizing geo-location information and signal strength measurements, where an access control device detects a beacon signal from a user equipment, communicates with a location server to verify the user's proximity, and generates an access signal without establishing a communication session with the user device, eliminating the need for a dedicated application and user interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional smart lock authentication methods are used, then user participation is required for authentication, but security vulnerabilities arise due to direct communication between user devices and smart locks
Solution Approach 1:
The patent introduces a location server as an intermediary between the smart lock and user device. The location server receives location information from the user device and communicates authentication results to the smart lock, eliminating direct communication between the smart lock and user device while maintaining authentication functionality. This resolves the security vulnerability of direct communication while preserving ease of operation.
Solution Approach 2:
The authentication system is segmented into multiple independent components: the smart lock, the location server, and the user device. Each component performs a specific function - the smart lock controls access, the location server handles authentication and location verification, and the user device provides location information. This segmentation isolates security risks and eliminates the need for direct communication between the smart lock and user device.
2Adaptability or versatility
If dedicated applications are installed on user devices for smart lock authentication, then authentication functionality is provided, but security vulnerabilities increase due to potential device spoofing and hacking
Solution Approach 1:
The location server acts as a trusted intermediary that verifies user identity through location information rather than relying on applications installed on potentially compromised user devices. The smart lock communicates only with the location server, which validates authentication credentials and provides location-based verification, eliminating the security risks associated with device-installed applications.
3Productivity
If direct communication is established between user devices and smart locks, then authentication is achieved, but security threats arise from unauthorized access and device spoofing
Solution Approach 1:
The location server serves as a secure intermediary that handles all communication between the smart lock and user device. The smart lock sends authentication requests to the location server, which verifies user identity through location information and returns authentication results. This eliminates direct communication between the smart lock and user device, preventing unauthorized access and device spoofing while maintaining authentication efficiency.
4Reliability
If user interaction is required for authentication, then authentication control is maintained, but user convenience is reduced and authentication process becomes more complex
Solution Approach 1:
The system enables self-service authentication where the user device automatically provides location information to the location server without requiring user input. The location server automatically verifies the location and communicates authentication results to the smart lock, eliminating the need for user interaction such as password entry or biometric verification while maintaining secure authentication control.
Data Source
AI summary
A method of multi-factor authentication is performed by an access control device. In response to detecting a beacon signal transmitted by a user equipment (UE) via a short-range radio access technology (RAT) the access control device sends a query to a location server for a current location of the UE. The access control device then determines whether the UE is within a threshold distance of the access control device and, if so, begins monitoring a signal strength of one or more beacon signals transmitted by the UE. If the signal strength of the one or more beacon signals exceeds a signal strength threshold, then the access control device may generate an access signal to indicate that a user associated with the UE is authorized to access a protected resource.