To strengthen the protection of user credentials, Sony has filed a patent application that describes a new way to authenticate to the PlayStation Network using the DualSense PS5 controller or its successors. A patent called Controller‑Driven Video Game Console Login, which discovered portal RespawnFirst, demonstrates a mechanism that can make the gamepad a mandatory element for logging into the account.
According to the description, the console sends an authorization request to the controller, which in turn interacts with the mobile device via Bluetooth, NFC, proximity sensors, or light and audio signals. After establishing the contact, the smartphone confirms receiving the signal and transmits the credentials to the controller. The accessory then sends the information to the console, completing the login process. At the same time, the controller can confirm the establishment of a contact using vibration or illumination.
Currently, users can use the PlayStation mobile app to use saved access keys, but the new patent offers a hardware alternative. This approach makes it difficult for attackers, because they need to physically own the controller to make game purchases or sell accounts with trophies.
At the same time, there are potential flaws in the patent. If the gamepad is missing or faulty, the console owner will not be able to log in to their account. In addition, as RespawnFirst points out, the new system does not solve the main problem – the weak process of regaining access to accounts.
Examples from practice show that users often lose their accounts due to fraudsters who, having only an ID or order number, convince the support service to provide them with confidential data. Critics accuse the company of insufficient training of personnel responsible for the protection of information.
Like many of Sony’s patents, this concept may only remain on paper. Meanwhile, players and experts continue to call on the company to strengthen account recovery procedures, which currently remain the most vulnerable link in the PlayStation Network’s security system.
Share:
