Trusted Proximity Authentication for Private Profile Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices often lack effective protection for private user profiles, as users frequently share devices without proper authentication, risking exposure of sensitive information when device-level authentication is relied upon.
Innovation Solution
Implementing a system that uses the presence of trusted devices in proximity to an electronic device as an additional authentication factor, allowing access to private profiles only when the trusted device is detected nearby, and defaulting to a public profile if the trusted device is not present.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If device-level authentication is used for protecting private information, then users can share devices with friends and family, but private user profiles become vulnerable to unauthorized access
Solution Approach 1:
The patent segments authentication into multiple factors: device-level authentication (first factor) and trusted device proximity authentication (second factor). This allows the system to provide different levels of access control - device-level auth enables sharing while trusted device proximity ensures private profile protection, resolving the contradiction between ease of operation and reliability
Solution Approach 2:
The system performs preliminary authentication by checking trusted device proximity before allowing access to private user profiles. This pre-verification step ensures that even if a device is shared with someone who has device-level authentication credentials, they cannot access private information without the trusted device being present, thus maintaining security while enabling sharing
2Ease of operation
If applications save private information without authentication, then applications are easy to use, but sensitive information is exposed when devices are shared
Solution Approach 1:
The trusted device acts as an intermediary authentication factor between the application and private information. Applications can continue to save private information without requiring authentication (maintaining usability), but the trusted device proximity check serves as an intermediary security layer that prevents unauthorized access when devices are shared, thus resolving the contradiction between ease of operation and information exposure risk
3Reliability
If multiple authentication factors are required for accessing private profiles, then security is improved, but authentication complexity increases
Solution Approach 1:
The system implements partial authentication by requiring only device-level authentication for general device access while requiring both device-level and trusted device proximity authentication specifically for private profile access. This selective application of authentication factors provides enhanced security for sensitive operations without making the entire authentication process complex, resolving the contradiction between reliability and device complexity
Data Source
AI summary
A method and system for security authorization on an electronic device are disclosed. The method includes detecting whether a trusted device is present in proximity to the electronic device. The trusted device is associated with a user profile of the electronic device, and the user profile includes access to private information. The method further includes allowing access to the user profile in response to detecting that the trusted device is present in proximity to the electronic device, and defaulting access to a public user profile of the electronic device in response to detecting a lack of presence of the trusted device in proximity to the electronic device.