UWB Secure Ranging for Spoof-Resistant Location-Based Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network management systems struggle to accurately determine the physical location of computing devices within a network and prevent spoofing, leading to potential unauthorized access to restricted resources.
Innovation Solution
Utilizing ultra-wide band (UWB) technology for secure ranging sessions between devices to determine the location of computing devices with high accuracy, enforcing access policies based on spatial proximity to access points or other devices, and employing encryption keys to secure distance measurements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional network management systems are used to determine device location, then system complexity is reduced, but location accuracy and spoofing prevention deteriorate
Solution Approach 1:
The patent introduces UWB technology as an intermediary layer between the network management system and device location determination. UWB provides secure ranging capabilities that enable accurate location measurement while preventing spoofing, resolving the contradiction between accuracy and complexity by offloading the complex security functions to a specialized intermediary technology
Solution Approach 2:
The patent replaces traditional mechanical or software-based location determination methods with UWB electromagnetic wave-based ranging. This substitution provides superior accuracy and security characteristics, achieving high measurement precision while the standardized UWB protocol manages system complexity
2Reliability
If UWB secure ranging is implemented for location determination, then location accuracy and spoofing prevention are improved, but device complexity increases
Solution Approach 1:
The patent leverages the universal nature of UWB technology, which is already widely integrated into modern devices for other purposes. By utilizing this existing multi-functional capability for location-based access control, the patent achieves high reliability without significantly increasing device complexity, as the UWB hardware serves multiple functions
Solution Approach 2:
The patent changes the operational parameters of UWB from standard communication modes to secure ranging modes. By adjusting timing, frequency, and protocol parameters for specific ranging applications, the system achieves enhanced security and reliability while reusing existing hardware capabilities, thereby limiting complexity increases
3Reliability
If location-based access control is implemented, then unauthorized access prevention is improved, but processing time increases
Solution Approach 1:
The patent performs location determination and access policy evaluation in advance, before the actual resource access request is fully processed. By pre-establishing UWB ranging sessions and pre-evaluating access policies based on determined locations, the system reduces the time required for access decisions while maintaining high reliability
Solution Approach 2:
The patent implements optimized UWB ranging protocols that skip unnecessary measurement steps and directly calculate location information. By rushing through the essential ranging measurements and using efficient algorithms for location determination and policy matching, the system achieves fast access decisions without compromising security reliability
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Ensures reliable and secure access control by accurately determining device locations, preventing spoofing, and granting access only when conditions are met, thus enhancing network security and resource management.
Implementation Method 1
The network management system may use the UWB beacon as a reference point for a physical location in which access to resources may be granted. The network management system may use a determined physical location of the requesting computing device as a factor in whether to provide the requesting computing device with access to the restricted resource.
Data Source
AI summary
The techniques describe a network management system (NMS) configured to obtain, from a first computing device supporting ultra-wide band (UWB) protocol, a request to access a resource. The NMS may initiate an UWB secure ranging session between the first computing device and a second computing device to determine a location of the first computing device, the second computing device supporting the UWB protocol. The NMS may obtain, based on the UWB secure ranging session, distance measurements between the first computing device and the second computing device. The NMS may determine the location of the first computing device based on the distance measurements. The NMS may provide the first computing device with access to the resource based on the location of the first computing device satisfying a condition of an access policy for the resource.