Wearable Device Identity Authentication with Graphical Interface
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current payment authentication processes on wearable devices lack user interaction and security, leading to low participation and high risks of account theft due to reliance on pre-stored data, which can be forged by thieves.
Innovation Solution
Implementing a system where a wearable device with a graphical user interface allows users to interact during the authentication process, transmitting verification information to a server for processing, and using format-based filtering to enhance security and efficiency by minimizing data transmission and preventing interference from other information types.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If payment authentication is processed on a mobile terminal bound to the wearable device, then security is improved, but user participation and convenience are reduced
Solution Approach 1:
The authentication system is segmented into multiple components: the wearable device generates the authentication request, the mobile terminal processes the authentication logic, and the server performs verification. This segmentation allows each component to perform its specialized function, improving overall security while maintaining user convenience through the wearable device's interface.
Solution Approach 2:
The mobile terminal acts as an intermediary between the wearable device and the server. It receives authentication requests from the wearable device, processes them locally, and communicates with the server. This intermediary role enhances security by keeping sensitive processing on the mobile terminal while allowing the wearable device to maintain user interaction capabilities.
2Ease of operation
If pre-stored data is used for authentication, then convenience is improved, but security is reduced due to vulnerability to forgery
Solution Approach 1:
Authentication data is pre-stored in the wearable device for quick access, but the system performs preliminary verification actions on the mobile terminal before final authentication. This allows the convenience of pre-stored data while adding security layers that prevent forgery, as the pre-stored data must pass through multiple verification steps.
Solution Approach 2:
The system implements feedback mechanisms where the server verifies authentication requests and provides feedback to the mobile terminal, which then communicates with the wearable device. This feedback loop ensures that pre-stored data is validated against current security criteria, preventing forgery while maintaining the convenience of fast authentication.
3Productivity
If format-based filtering is implemented, then information processing efficiency is improved, but system complexity increases
Solution Approach 1:
The system changes the parameter of data transmission by implementing format-based filtering. Only authentication-related information in specific formats is transmitted between devices, while other information is filtered out. This parameter change improves processing efficiency by reducing data volume and focus on relevant information, while the filtering logic is implemented as standardized rules rather than complex processing.
Data Source
AI summary
A wearable device transmits a service request generated by the wearable device to a server, where the service request is associated to a service application type. The wearable device receives an identity authentication request message associated to the service application type from the server using a preset standard interface. The wearable device verifies a signature in the identity authentication request message according to a public key of the service application type. In response to verifying the signature, the wearable device retrieves service authentication information of an account corresponding to the identity authentication request message from a locally pre-stored service authentication information database. The wearable device transmits a verification response message comprising the acquired service authentication information to the server using the preset standard interface.