Wireless Device Authentication System for Secure Website Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks when accessing websites due to the need to remember and manage multiple login information and passwords, which are often insecure, and existing solutions like smart cards or hardware tokens are inconvenient and costly.
Innovation Solution
A system and method for secure website access authentication using a wireless device, where user information is received, an authentication request is sent to the device, and a confirmation key is used to grant access without requiring additional hardware, utilizing a network interface, storage unit, and authentication unit to analyze and verify user identities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users write down login information and passwords to remember them easily, then ease of operation is improved, but security level deteriorates
Solution Approach 1:
The patent uses a wireless communication device as a copy of the authentication system, storing authentication information securely in the device rather than requiring users to write down passwords. The device generates and stores authentication keys that can be used to verify identity without exposing sensitive information.
Solution Approach 2:
The wireless communication device acts as an intermediary between the user and the authentication server. It handles the secure storage and transmission of authentication information, mediating the authentication process so users don't need to directly manage passwords while maintaining security.
2Reliability
If smart cards or hardware tokens are used for authentication, then security level is improved, but device complexity and cost increase
Solution Approach 1:
The patent makes the wireless communication device universal by using it for both communication purposes and authentication purposes. The device's existing capabilities (storage, communication, processing) are leveraged to provide authentication functionality without adding dedicated hardware tokens or smart cards.
Solution Approach 2:
The wireless communication device serves itself as the authentication mechanism. It autonomously generates authentication keys, stores them securely, and uses them to verify identity with the server, eliminating the need for external authentication hardware.
Data Source
AI summary
A system and method for providing secure authentication for website access or other secure transaction. In one embodiment, when a user accesses a website, the web server identifies the user, and sends an authentication request to the user's mobile device. The mobile device receives the authentication requests and sends back authentication key to the web server. Upon verifying the authentication key, the web server grants the access to the user.