Wireless Proximity Authentication for Session Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security systems are vulnerable to tailgating, where unauthorized individuals can access restricted computer systems by exploiting the absence of the authorized user, as most systems lack the ability to differentiate between the authorized user and an unauthorized person who takes their place after the authorized user has logged in.

Innovation Solution

A system utilizing wireless transmitters and receivers to monitor the proximity of authorized users, automatically terminating their session if they leave the vicinity or become inactive, thereby preventing unauthorized access by ensuring only authorized users with valid credentials and signals can access the system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional username and password security measures are used, then basic access control is achieved, but the system remains vulnerable to tailgating attacks where unauthorized users can access the system when the authorized user is away

Engineering Contradiction:
Improvesecurity against tailgatingVSAvoidaccess control system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces wireless transmitters and receivers as intermediary devices between the authorized user and the access control system. The transmitter worn by the user continuously communicates their presence to the receiver at the terminal, which mediates the authentication process by verifying the user's proximity before allowing access or maintaining session continuity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical presence detection methods (such as physical keycard insertion or biometric scanning at each interaction) with wireless electromagnetic field-based detection. The wireless transmitter and receiver system substitutes the need for repeated mechanical authentication actions, enabling continuous presence verification through signal detection.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If the system continuously monitors user presence through wireless signals, then unauthorized access is prevented, but additional hardware and system complexity are introduced

Engineering Contradiction:
Improveprevention of unauthorized accessVSAvoidwireless monitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The wireless transmitter serves multiple functions: it acts as a presence detector, an authentication credential, and a session manager. The same device that the user wears for mobile identification continuously performs presence verification, eliminating the need for separate monitoring hardware and reducing overall system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system uses the authorized user's own wireless device (smartphone, wearable, or transponder) to perform the presence verification function. The user's device essentially serves itself by continuously broadcasting its location and authentication credentials, eliminating the need for active scanning or complex monitoring infrastructure.

Inventive Principle:
Principle #25Self-service

3Reliability

If automatic session termination is implemented when users leave, then security is enhanced, but user convenience is reduced due to frequent logins

Engineering Contradiction:
Improvesession securityVSAvoiduser login convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication by establishing the user's presence through wireless signal detection before the session begins. Once authenticated, the system proactively maintains session continuity by continuously monitoring the wireless signal, automatically handling re-authentication in the background without requiring user action.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Instead of requiring continuous user interaction or single-point authentication, the system implements periodic wireless signal checks at predetermined intervals. The access control system periodically verifies the user's presence through the wireless transmitter, maintaining security while allowing uninterrupted access during legitimate use.

Inventive Principle:
Principle #19Periodic action

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This solution effectively reduces unauthorized access, enhancing security by ensuring that only authorized users can maintain access to restricted systems, thereby protecting sensitive data and reducing the risk of data theft and administrative burdens.

Implementation Method 1

uses wireless transmitters and receivers to allow a computer system to identify when an authorized user has left the vicinity of an access terminal

Methodology Applied
Scientific EffectElectromagnetic transmission: Electromagnetic Induction

Implementation Method 2

measure the strength of a signal in order to determine the proximity of a wireless transmitter

Methodology Applied
Scientific EffectSignal strength detection: Electromagnetic Induction

Data Source

PatentUS10292051B2System and method for preventing unauthorized access to restricted computer systems
Publication Date: 2019.05.14 COLLATERAL OPPORTUNITIES LLC
  • US10292051B2 patent drawing
  • US10292051B2 patent drawing
  • US10292051B2 patent drawing

AI summary

A method and system for automatically terminating access or initiating a logout session for a restricted access system by determining that an authorized user has left the vicinity of the restricted access system. The authorized user preferably carries a wireless transmitter which transmits an authorization signal. When the authorized user leaves the vicinity of the restricted access system after logging in, the signal is no longer received by a wireless receiver or too weak of a signal, such that an access control system in communication with the wireless receiver automatically causes the restricted access system to initiate a logout action in order to prevent or reduce the chance of an unauthorized user gaining access to the restricted access system. In one embodiment the signal strength from the authorization signal at the time of logon is used as a baseline signal strength for future calculations that determine when to initiate an automatic termination of access to the restricted access system.