Authentication Profile Linking Using Biometric Match Scores
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for accessing protected resources are cumbersome and prone to social engineering attacks, leading to delays and increased exposure to unauthorized access due to inconsistencies in user identity information and disparate data architectures.
Innovation Solution
An authentication system that uses an authentication server to receive an image of an identification document from a client device, computes a match score by comparing user identity information with stored information from a resource server, and transmits an authentication status based on the match score, ensuring reliable binding of the authentication profile to the resource account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used, then users can access protected resources, but the process is cumbersome and prone to social engineering attacks
Solution Approach 1:
The patent introduces an authentication server as an intermediary between the user and the resource server. This server receives authentication requests, verifies user credentials against stored information, and manages authentication states. The intermediary handles the complex verification process, making it more secure while keeping the user interface simple through the authentication service on the client device.
Solution Approach 2:
The system implements feedback mechanisms where the authentication server communicates authentication status back to both the client device and resource server. The server compares user-provided information with stored data, generates match scores, and provides feedback on authentication success or failure, enabling adaptive security decisions.
2Reliability
If users reauthenticate after losing access, then access can be regained, but delays occur and exposure to unauthorized access increases
Solution Approach 1:
The system performs preliminary authentication actions by maintaining authentication states and profiles on the client device through the authentication service. When users lose access, the system can quickly verify their identity using pre-stored credentials and authentication data, significantly reducing reauthentication time while maintaining security.
Solution Approach 2:
The authentication system dynamically adjusts authentication requirements based on the user's current state, device context, and risk assessment. The match score mechanism allows flexible verification levels, enabling faster authentication when confidence is high while maintaining stricter checks when needed, thus reducing overall authentication delays.
3Adaptability or versatility
If identity information is stored across different servers, then data architecture flexibility is achieved, but inconsistencies in user identity information occur
Solution Approach 1:
The authentication server serves multiple functions: storing user credentials, verifying identities, computing match scores, and managing authentication states across different resource servers. This universal authentication authority ensures consistent identity verification while allowing flexible data architecture across distributed resource servers.
Solution Approach 2:
The system uses match score parameters to quantify identity verification confidence levels. By computing numerical scores based on comparing user-provided information with stored data, the system transforms qualitative identity matching into measurable parameters, enabling precise accuracy assessment while maintaining architectural flexibility.
Data Source
AI summary
Systems and methods for linking an authentication account to a device may include processor(s) to maintain a plurality of authentication profiles, each authentication profile corresponding to a respective user and including at least one profile image, an immutable identifier, and authentication data used to authenticate the respective user. The processor(s) may receive a request including the device key, an immutable identifier, and a biometric image captured by a camera of a client device. The processor(s) may identify a subset of authentication profiles having respective immutable identifiers that match the immutable identifier from the request. The processor(s) may compare feature(s) extracted from the biometric image of the request to features extracted from the a profile image of the subset of authentication profiles, and link the device key of the client device with an authentication profile in a data structure to register the client device with the authentication server.