Wristband Authentication via Motion Correlation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Proximity-based authentication methods are insecure in multi-user shared settings as they do not require explicit user intent, leading to unintended authentications and vulnerabilities due to relay attacks, especially in environments where multiple users are near a computer.
Innovation Solution
A system and method using a wristband with an accelerometer and digital radio to detect user intent through specific movements, such as tapping a key or wiggling a mouse, before initiating authentication, ensuring that the user explicitly conveys their intention to authenticate.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If proximity-based authentication is used, then authentication speed is improved, but security deteriorates due to unintended authentications and relay attacks
Solution Approach 1:
The system performs preliminary actions by detecting user intent through wristband motion data before initiating authentication. The desktop detects intent actions (keyboard/mouse movements) and correlates them with wristband data in advance, ensuring authentication only proceeds when user intent is confirmed, thus preventing unintended authentications while maintaining speed
Solution Approach 2:
The wristband acts as an intermediary device that mediates between the user and the desktop. It captures motion data from the user's wrist and transmits it to the desktop for correlation with intent actions, serving as a trusted intermediary that prevents both unintended authentications and relay attacks by requiring physical presence and explicit user action
2Ease of operation
If proximity-based authentication is used, then ease of operation is improved, but security deteriorates in multi-user shared settings
Solution Approach 1:
The system performs preliminary intent detection by monitoring wristband motion data before authentication. In multi-user settings, the desktop correlates intent actions with specific user wristbands in advance, ensuring that only the user who performed the intent action can authenticate, thus maintaining convenience while preventing unauthorized access in shared environments
Solution Approach 2:
The wristband serves as a user-specific intermediary that links individual users to the authentication system. Each user's wristband captures their unique motion patterns and transmits them to the desktop, which correlates these patterns with intent actions to identify which user should authenticate, solving the multi-user identification problem while maintaining ease of operation
3Reliability
If explicit intent detection is required, then security is improved, but device complexity increases
Solution Approach 1:
The system uses self-service by leveraging the user's own natural movements (keyboard typing, mouse usage) as the intent detection mechanism. The wristband automatically captures motion data without requiring the user to perform specific authentication actions, and the desktop automatically correlates the data, reducing perceived complexity while maintaining security
Solution Approach 2:
The system replaces complex mechanical authentication systems (keyboards, mice, passwords) with a simpler motion-based intent detection mechanism. The wristband's accelerometer and the desktop's correlation algorithm substitute for traditional authentication interfaces, reducing overall system complexity while enabling explicit intent detection through natural user movements
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach prevents unintended authentications and enhances security by requiring explicit user intent, reducing disruptions and vulnerabilities in multi-user environments while maintaining usability and efficiency.
Implementation Method 1
an authentication device with an accelerometer and a digital radio that you wear on your wrist
Implementation Method 2
sending a query to an authentication device in radio proximity of the digital device
Data Source
AI summary
A system and method for authenticating users of a digital device includes an authentication device attached to an authorized user. The authentication device includes one or more motion sensors and acts as a user identity token. To authenticate with a digital device, the user performs one or more interactions with the digital device using the hand associated with the authentication device. The digital device correlates the inputs received due to the interactions with the user's hand and/or wrist movement, as measured by the authentication device. Access to the digital device is allowed if the inputs and movements are correlated.