UWB Secure Ranging for Spoof-Resistant Location Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network management systems struggle to accurately regulate access to restricted resources based on the physical location of computing devices, leading to potential spoofing of device locations and insecure access decisions.
Innovation Solution
Implementing ultra-wide band (UWB) technology for secure ranging sessions between devices to determine the precise location of computing devices, using encryption keys and secure channels to ensure accurate location-based access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional network management systems are used to regulate access based on device location, then access control can be implemented, but the location accuracy is insufficient and devices can spoof their locations
Solution Approach 1:
The patent replaces traditional WiFi-based location estimation with UWB (Ultra-Wideband) technology for precise distance measurement. UWB uses time-of-flight measurements of electromagnetic signals to determine the actual distance between devices with high precision, making location spoofing difficult and enabling reliable location-based access control.
Solution Approach 2:
The patent introduces a network management system as an intermediary that coordinates UWB ranging sessions between devices. This intermediary manages the secure exchange of distance measurements and enforces access policies based on verified locations, ensuring that only authorized devices can access resources.
2Measurement precision
If UWB technology is implemented for secure ranging, then location accuracy improves and spoofing is prevented, but device complexity increases
Solution Approach 1:
The patent leverages the fact that modern smartphones already contain UWB hardware for other purposes (such as Apple's U2 chip for AirDrop and Handoff). By utilizing this existing hardware capability, the system achieves precise location measurement without requiring completely new device infrastructure, thus reducing the practical complexity increase.
Solution Approach 2:
The UWB ranging process is self-executing between devices through automated measurement protocols. Devices automatically perform distance measurements and report results to the network management system without requiring manual configuration or intervention, reducing operational complexity despite the advanced technology involved.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables reliable and secure access control by ensuring that devices are within specified spatial proximity to access resources, preventing unauthorized access and enhancing network security.
Implementation Method 1
The network management system may determine the physical location of a computing device requesting access to a resource using UWB secure ranging
Data Source
AI summary
The techniques describe a network management system (NMS) configured to obtain, from a first computing device supporting ultra-wide band (UWB) protocol, a request to access a resource. The NMS may initiate an UWB secure ranging session between the first computing device and a second computing device to determine a location of the first computing device, the second computing device supporting the UWB protocol. The NMS may obtain, based on the UWB secure ranging session, distance measurements between the first computing device and the second computing device. The NMS may determine the location of the first computing device based on the distance measurements. The NMS may provide the first computing device with access to the resource based on the location of the first computing device satisfying a condition of an access policy for the resource.