Wireless Identity Verification for Location-Bound Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification methods using USB keys are inadequate for secure environments as they fail to address office location requirements, allow easy portability, and are limited to single-user usage, posing security risks and poor user experience.
Innovation Solution
A wireless signal-based identity verification method utilizing a secure device with a private key for signing service information, followed by server-side signature verification using a public key, enabling multiple users to connect and authenticate without manual intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If USB key is used for identity verification, then security is improved, but portability increases and location control is lost
Solution Approach 1:
The patent replaces the mechanical USB key insertion method with a wireless connection system. The secure device creates a wireless network coverage area, and clients connect wirelessly within this area, eliminating the need for physical USB key insertion while maintaining security through cryptographic verification of wireless connections.
Solution Approach 2:
The patent introduces a wireless network as an intermediary between the user and the verification system. The secure device acts as a wireless access point, and the wireless connection serves as the medium for identity verification, replacing the direct physical connection of USB keys while enabling location-based control.
2Reliability
If USB key is used for identity verification, then security is improved, but device complexity increases and multi-user support is poor
Solution Approach 1:
The secure device serves multiple functions: it acts as a wireless access point for network connectivity and simultaneously as an identity verification system. Multiple clients can connect to the wireless network and undergo verification independently, enabling multi-user support without requiring separate verification devices for each user.
Solution Approach 2:
The system performs automatic verification without requiring manual intervention. When a client connects to the wireless network, the verification process occurs automatically through the exchange of cryptographic information, eliminating the need for users to manually insert USB keys or perform complex verification steps.
3Reliability
If USB key is used for identity verification, then security is improved, but ease of operation deteriorates due to manual intervention requirements
Solution Approach 1:
The verification system operates autonomously once a client connects to the wireless network. The automatic exchange of cryptographic information and verification processes eliminate the need for manual USB key insertion, certificate writing, and signing operations, significantly improving ease of operation while maintaining security.
Solution Approach 2:
The patent replaces manual mechanical operations (USB key insertion, certificate writing) with automated wireless cryptographic verification. The system automatically establishes secure connections and performs verification through wireless data exchange, eliminating cumbersome manual steps while maintaining strong security through cryptographic protocols.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This specification provides wireless signal-based identity verification methods in a secure environment, which are applied to a client. The client is located in a network coverage area of a secure device, and the secure device is a wireless network access device. The method includes: obtaining service information in response to a service operation of a user, and connecting to the secure device; sending the service information to the secure device as raw data, so that the secure device signs the raw data by using a private key; receiving a signing result; and sending the signing result to a server, so that the server performs signature verification on the signing result by using a public key, and performs a service when the signature verification succeeds. This specification further provides a corresponding system. According to the methods in this specification, the secure device is installed at a specified location, and the secure device performs signing by using the private key of the secure device, so that when performing a service operation, a user needs to be connected to the secure device at the specified location for verification, and the user can be strictly required to be at the specified location, thereby implementing a secure and trusted network environment.