Authentication System Biometric Passcode Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems, such as face authentication, do not provide sufficient security as they allow impersonation by individuals with similar facial features, as they do not require a complete match and rely on similarity-based determination, leading to potential security breaches.
Innovation Solution
An authentication system that registers both first and second authentication information for each user, performs similarity-based first authentication and match-based second authentication, and restricts users with similar first authentication information from sharing the same second authentication information, enhancing security by ensuring unique passcodes for users with similar biometric data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If similarity-based authentication is used, then authentication convenience is improved, but security deteriorates because individuals with similar biometric features can impersonate each other
Solution Approach 1:
The authentication information is segmented into two distinct types: first authentication information (biometric data like face images) and second authentication information (passcodes). This segmentation allows the system to combine similarity-based biometric authentication with exact-match passcode verification, thereby maintaining convenience while improving security by preventing impersonation of users with similar biometric features.
Solution Approach 2:
The system performs preliminary action by restricting the registration of second authentication information (passcodes) for users with similar first authentication information (biometric data). By proactively preventing similar users from registering identical passcodes during the registration phase, the system eliminates the security vulnerability before authentication occurs, ensuring that even if biometric similarity allows access, the unique passcode requirement blocks impersonation.
2Reliability
If unique passcodes are assigned to users with similar biometric features, then security is improved, but device complexity increases due to additional restriction mechanisms
Solution Approach 1:
The system merges the registration and authentication functions into a unified authentication device that handles both first authentication information (biometric data) and second authentication information (passcodes). By combining these functions in a single device with integrated restriction logic, the system achieves enhanced security without proportionally increasing complexity, as the restriction mechanism is embedded within the existing authentication workflow rather than requiring separate external systems.
Data Source
AI summary
Registration means of an authentication system (S) registers, for each user, first authentication information and second authentication information in storage means. First authentication means performs first authentication based on a similarity between the first authentication information that has been input and the registered first authentication information. Second authentication means performs second authentication based on a match between the second authentication information that has been input and the registered second authentication information. Restriction means restricts a plurality of users having similar first authentication information to each other from registering the same second authentication information as each other.