Multi-factor Authentication Using Voice and Geolocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional smart locks require significant user participation and dedicated applications for authentication, posing security vulnerabilities due to direct communication with user devices, which can be exploited by unauthorized users.
Innovation Solution
A multi-factor authentication system using geo-location information and voice commands, eliminating the need for dedicated applications and direct communication between user devices and access control devices, with authentication determined by the access control device based on trusted device identifiers and proximity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional smart locks require dedicated applications and direct communication with user devices for authentication, then user participation and control are improved, but security vulnerabilities increase due to potential spoofing and hacking
Solution Approach 1:
The patent introduces an intermediary authentication system that mediates between the smart lock and user device. Instead of direct communication, the system uses multiple authentication factors (biometric data, device identifiers, location information) verified by a server before granting access. This intermediary layer prevents direct spoofing attacks while maintaining user control.
Solution Approach 2:
The authentication process is segmented into multiple independent verification steps: biometric authentication, device identifier verification, and location validation. Each segment operates independently and contributes to the overall security decision, preventing a single point of failure or exploitation.
2Reliability
If multi-factor authentication with geo-location and voice commands is implemented, then security is improved by eliminating direct communication sessions, but device complexity increases
Solution Approach 1:
The system leverages universal, pre-existing device capabilities (microphone for voice, GPS for location, biometric sensors) rather than requiring specialized hardware. The same device components serve multiple functions: the microphone is used for both voice commands and biometric authentication, reducing overall system complexity.
Solution Approach 2:
The system uses the user's own device to perform authentication functions. The smartphone's biometric sensor, location service, and microphone automatically provide the required data without external辅助设备, eliminating the need for additional dedicated authentication devices.
3Ease of operation
If conventional applications communicate directly with smart locks for activation, then authentication control is improved, but security vulnerabilities arise from potential spoofing and hacking
Solution Approach 1:
A server acts as an intermediary between the user device and smart lock. The server receives authentication data from the device, performs verification, and only communicates the final authorization decision to the lock. This prevents direct communication protocols from being exploited for spoofing attacks.
Solution Approach 2:
The patent replaces traditional mechanical/authentication protocols with biometric and behavioral verification. Instead of relying on application-layer authentication that can be spoofed, the system uses physiological and behavioral characteristics (voice patterns, biometric data) that are much harder to replicate or hack.
Data Source
AI summary
A method of multi-factor authentication is performed by an access control device. In response to detecting a voice command, the access control device sends a query to a location server for a current location of a user equipment (UE) included in a list of trusted UEs. The access control device may then receive an indication of the current location from the location server and in response thereto, the access control device may determine whether the current location of the UE is within a threshold distance of the access control device. If so, the access control device may generate an access signal that indicates that a user associated with the UE is authorized to access a protected resource.