Authentication System Using Audio Video Channels for Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication systems are vulnerable to attacks like man-in-the-middle attacks, especially when using biometric data, and require complex, costly technologies to ensure high security, which are not feasible for all service requests due to varying security needs.
Innovation Solution
An authentication system that establishes audio and/or video communication channels between a requester and an authenticator, allowing the authenticator to confirm the requester's identity through voice or face recognition, using a conferencing bridge to merge communication channels and ensure a high security level without relying on biometric sensors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric sensors and complex authentication technologies are used, then security level is improved, but device complexity and cost increase
Solution Approach 1:
The patent replaces complex biometric sensor systems with a communication-based authentication approach using audio and video streams. Instead of relying on fingerprint scanners, facial recognition cameras, or other biometric hardware, the system uses standard communication channels to transmit multimedia data for identity verification, thereby reducing device complexity while maintaining security
Solution Approach 2:
The patent introduces a conferencing bridge as an intermediary component that facilitates secure audio and video communication between the requester and authenticator. This mediator handles the complex tasks of stream management, encryption, and coordination, allowing the authentication system to achieve high security without requiring complex end-user devices
2Reliability
If biometric sensors and complex authentication technologies are used, then security level is improved, but cost increases
Solution Approach 1:
The patent substitutes expensive biometric sensor hardware with software-based audio and video processing over existing communication infrastructure. By using standard microphones, speakers, and camera capabilities already present in modern devices, the system eliminates the need for specialized expensive authentication hardware, thereby reducing implementation costs while maintaining high security levels
Solution Approach 2:
The patent makes the authentication system work with existing multi-functional communication devices that users already possess. By leveraging the universal audio and video capabilities of smartphones and computers for authentication purposes, the system avoids requiring separate dedicated authentication devices, thus reducing overall system cost
3Ease of operation
If standard communication channels are used for authentication, then ease of operation is improved, but vulnerability to attacks increases
Solution Approach 1:
The conferencing bridge acts as a trusted intermediary that secures the communication channel between requester and authenticator. It implements encryption, authentication, and protocol management to protect against man-in-the-middle attacks, thereby maintaining ease of operation through standard channels while mitigating security vulnerabilities
Solution Approach 2:
The system incorporates real-time feedback mechanisms where the conferencing bridge monitors the audio and video streams for signs of interception or manipulation. The bridge can detect anomalies in the communication flow and respond by alerting participants or terminating the session, providing continuous security feedback without complicating the user experience
Data Source
AI summary
An authentication system for authenticating a human requester requesting a service, wherein the authentication system is configured to establish via a first and a second port of the authentication system an authentication communication channel comprising a first communication channel to the requester and a second communication channel to a human authenticator, such that at least one of an audio stream of a voice of the requester, a video stream of a face of the requester and a 3D-data stream of the face of the requester is transmittable between the end node device of the requester and the end node device of the authenticator; and to record a confirmation message of the authenticator, wherein the confirmation message confirms or rejects at least one of the claimed identity and the requested service.