Two-Layer Authentication for Connected Home Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Connected home systems face vulnerabilities when a user device is compromised, allowing unauthorized access to connected home devices, as traditional password authentication may not provide sufficient security for critical operations like disarming security systems.

Innovation Solution

Implementing a two-layer user authentication system that includes initial device authentication followed by fingerprint identification, providing an additional layer of security for protected operations such as disarming security systems, which supplements password entry with biometric verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional password authentication is used for connected home devices, then ease of operation is improved, but security reliability deteriorates when user devices are compromised

Engineering Contradiction:
Improveease of operationVSAvoidsecurity reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication process is segmented into two distinct layers: first layer authentication (device-level) and second layer authentication (user-level biometric). This segmentation allows the system to maintain ease of operation through automatic device authentication while enhancing security reliability through mandatory biometric verification for critical operations, directly resolving the contradiction between convenience and security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transitions from single-layer password authentication to two-layer authentication by adding another dimension of verification. The first layer handles device authentication automatically, while the second layer adds biometric verification, creating a multi-dimensional security framework that simultaneously improves ease of operation and security reliability.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Reliability

If fingerprint identification is added as a second layer of security, then security reliability is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary action by pre-establishing device authentication credentials and fingerprint templates before actual use. During operation, the system automatically retrieves and verifies these pre-stored credentials, eliminating the need for real-time complex verification procedures and reducing operational complexity while maintaining high security reliability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary authentication layer (device authentication module) that mediates between the user's biometric verification and the final access grant. This intermediary layer handles the complexity of fingerprint verification automatically, shielding the user from technical complexities while ensuring security reliability through structured verification protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If biometric verification is required for all operations, then security reliability is improved, but productivity deteriorates due to repeated verification steps

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidproductivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system applies local quality by implementing biometric verification selectively only for critical operations (second layer authentication) rather than all operations. Non-critical operations can proceed with first layer authentication alone, maintaining security reliability for sensitive functions while preserving productivity for routine tasks through reduced verification overhead.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The authentication system operates dynamically by adjusting the verification layer based on operation criticality. The system automatically determines whether first layer or second layer authentication is required, enabling flexible verification that maintains security reliability for critical operations while optimizing productivity for routine operations through adaptive verification strategies.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS10021095B1System, method, and computer program for two layer user authentication associated with connected home devices
Publication Date: 2018.07.10 AMDOCS DEV LTD
  • US10021095B1 patent drawing
  • US10021095B1 patent drawing
  • US10021095B1 patent drawing

AI summary

A system, method, and computer program product are provided for two layer user authentication associated with connected home devices. In use, it is determined whether a user is authenticated to control at least one connected home device utilizing a user device, as a first layer of security. If it is determined the user is authenticated to control the at least one connected home device, a command for controlling the at least one connected home device is received by the user utilizing the user device. Further, it is determined whether at least one registered fingerprint is accessible by the user device. If it is determined that at least one registered fingerprint is accessible by the user device, a fingerprint identification interface is displayed on a display associated with the user device. Additionally, a fingerprint input is received from the user utilizing the fingerprint identification interface. Furthermore, the received fingerprint input is compared with the at least one registered fingerprint. Still yet, it is determined whether the user is authenticated to control the at least one connected home device based on the comparison, as a second layer of security. If it is determined that the user is authenticated to control the at least one connected home device based on the comparison, the command for controlling the at least one connected home device is executed.