AR Visual Display System for Phishing-Resistant Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current authentication methods are vulnerable to security risks due to easily guessable or crackable passwords and standardized user interfaces, which can be manipulated by phishing scams, lacking integration of augmented reality technology for enhanced security and user experience.

Innovation Solution

The implementation of a visual display system using augmented reality to manipulate images of a real scene for secure user registration and authentication, involving a processor, image sensor, and database to receive and compare augmented reality images, authenticate users, and authorize access based on confidence scores calculated from comparison metrics.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional password-based authentication is used, then user registration and login processes are simple and standardized, but security vulnerabilities increase due to easily guessable or crackable passwords and susceptibility to phishing scams

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces traditional mechanical/password-based authentication systems with augmented reality-based biometric authentication. The system captures real-world scenes through mobile device cameras, overlays virtual objects and instructions, and authenticates users based on their physical actions and environmental interactions rather than memorized credentials, thereby substituting a vulnerable mechanical system with a more secure AR-based system

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces augmented reality virtual objects and instructions as intermediaries between the user and the authentication system. These virtual elements guide users through physical actions and serve as a mediator to verify user identity through their interactions with the real-world environment, adding a layer of complexity that enhances security while maintaining user-friendly operation

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If complex passwords are required to improve security, then password strength increases, but user convenience decreases and security risks increase when users reuse or store passwords

Engineering Contradiction:
Improvepassword securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent enables users to authenticate themselves through their own physical actions and environmental interactions captured by augmented reality. The system leverages the user's unique physical presence and capabilities to verify identity, eliminating the need for users to create, remember, or manage complex passwords while maintaining high security standards

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent substitutes the password memorization and entry mechanism with a physical action-based authentication system. Users perform specific physical actions guided by AR instructions, and the system verifies their identity based on these actions rather than requiring them to recall and type complex passwords, thereby improving both security and convenience

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Ease of manufacture

If standardized user interfaces are used, then implementation is simple and consistent, but security risks increase due to ease of manipulation by phishing scams

Engineering Contradiction:
Improveinterface implementation easeVSAvoidphishing resistance
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent transforms the static, standardized user interface into a dynamic augmented reality experience. The interface elements are overlaid on the real-world environment and respond to user actions in real-time, creating a dynamic interaction paradigm that is inherently more difficult for phishing attacks to replicate compared to static web-based interfaces

Inventive Principle:
Principle #15Dynamics

4Reliability

If augmented reality technology is integrated into authentication, then security and user experience are enhanced, but system complexity and processing requirements increase

Engineering Contradiction:
Improveauthentication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent leverages the mobile device's existing camera and display capabilities to perform multiple functions: capturing real-world scenes, displaying augmented reality instructions and virtual objects, and processing authentication data. By making the mobile device a multi-functional platform that combines photography, augmented reality display, and biometric authentication, the system reduces overall complexity while enhancing security

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20230274514A1Visual display systems and method for manipulating images of a real scene using augmented reality
Publication Date: 2023.08.31 CAPITAL ONE SERVICES LLC
  • US20230274514A1 patent drawing
  • US20230274514A1 patent drawing
  • US20230274514A1 patent drawing

AI summary

The present disclosure relates to a visual display system for manipulating images of a real scene using augmented reality. In one implementation, the system may include at least one processor in communication with a first mobile device; and a storage medium storing instructions that, when executed, configure the at least one processor to perform operations. The operations may include receiving a request from a mobile device to access an account of a user, receiving a first image depicting a real scene from an image sensor of the mobile device, receiving a selection of a virtual object, receiving an augmented reality image comprising the virtual object overlaid on the first image, comparing the augmented reality image to one or more stored augmented reality images, authenticating the user based on the comparison, and authorizing access to the user account based on the authentication