Portable Wireless Security Device for Automatic Multi-Factor Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating electronic transactions on mobile devices, such as RFID payments and online access, are vulnerable to malicious software hijacking and inconvenient for users, with biometric scanners requiring constant interaction and password-based systems being insecure and cumbersome.
Innovation Solution
A portable wireless security device (WSD) that pairs with a mobile device to provide a bi-directional, multi-factor authentication process, using a wireless link to monitor the presence of the WSD and authorize transactions only when it is in close proximity, replacing traditional methods with a secure and automatic two-factor authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric scanners such as fingerprint readers are placed on the mobile device, then authentication security is improved, but user convenience deteriorates due to constant swiping requirement
Solution Approach 1:
The system performs authentication automatically without requiring user intervention. The mobile device autonomously detects the presence of the wireless security device and executes authentication protocols without user action, making the system self-serving and eliminating the need for constant fingerprint swiping.
Solution Approach 2:
The patent replaces the mechanical fingerprint scanning process with a wireless communication-based authentication system. Instead of physical contact and mechanical scanning, the system uses wireless signals to detect the security device and perform authentication automatically, substituting mechanical operations with wireless electronic communication.
2Reliability
If password-based authentication is used for each transaction, then security against hijacking is improved, but user convenience deteriorates due to frequent password entry requirements
Solution Approach 1:
The system performs preliminary authentication by detecting the wireless security device before the transaction occurs. The authentication is prepared and executed automatically in advance, so that when a transaction happens, the user doesn't need to enter a password - the authentication is already complete or will be completed automatically.
Solution Approach 2:
The authentication system operates autonomously without requiring user input. The mobile device automatically detects the security device, verifies authentication credentials, and executes the authentication protocol without user intervention, making the system self-serving and eliminating frequent password entry requirements.
3Reliability
If a secondary portable device with LCD display is used for transaction authentication, then security is improved through random number generation, but device complexity and user interaction requirements increase
Solution Approach 1:
The patent merges the authentication functionality into the existing mobile device ecosystem. Instead of using a separate secondary portable device with LCD display, the system integrates the wireless security device authentication into the mobile device's existing wireless communication and authentication frameworks, combining multiple functions into a unified system.
Solution Approach 2:
The wireless security device serves multiple authentication purposes through a single device. It can authenticate mobile device access, RFID transactions, online services, and ATM operations using the same wireless communication mechanism, making it a universal authentication solution that eliminates the need for multiple specialized devices.
4Extent of automation
If ATM card with PIN number is used for authentication, then two-factor authentication is achieved, but security deteriorates as PIN can be easily hijacked and card can be stolen or replicated
Solution Approach 1:
The patent replaces the physical ATM card and PIN number system with a wireless authentication system. Instead of physical cards that can be stolen and copied, and PINs that can be observed or guessed, the system uses wireless communication signals for authentication, substituting the mechanical/physical authentication method with an electronic wireless one that is harder to intercept and replicate.
Solution Approach 2:
The wireless security device acts as an intermediary between the user and the authentication system. Instead of the user directly providing physical card and PIN information that can be hijacked, the wireless security device mediates the authentication process through wireless communication, adding an additional layer of security that prevents direct exposure of authentication credentials.
Data Source
AI summary
A portable wireless security device (WSD) along with methods of use for providing a multi-factor authentication process for authorizing RFID payment transactions, online processes and email correspondences made by a mobile device.