Authentication Device Image Analysis Security Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication methods are vulnerable to cyber attacks, making it difficult for users to trust electronic devices when performing sensitive tasks, especially when these devices may have been compromised by attacks like phishing or spoofing, even with digital certificates and anti-virus software.

Innovation Solution

An authentication device with an image capture device and processing circuitry that operates in a secure mode, capturing and analyzing image data to determine if an electronic device is performing a security-related task and if it has been compromised, providing instructions to the user to interact with the device to assess its security without exchanging data, thus identifying potential security threats without risking the authentication device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If authentication device exchanges data with electronic device to verify security, then verification accuracy is improved, but the authentication device becomes vulnerable to cyber attacks

Engineering Contradiction:
Improveverification accuracyVSAvoidvulnerability to cyber attacks
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent uses image capture devices as an intermediary to indirectly observe and analyze the electronic device's display and operations. Instead of direct data exchange that creates vulnerability, the authentication device captures images of the device screen and analyzes them to detect phishing attempts, spoofing, and other security threats. This intermediary approach maintains verification accuracy while isolating the authentication device from direct attack vectors.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional data-based authentication mechanisms with visual/image-based analysis. Instead of exchanging authentication data that could be intercepted or corrupted, the system uses image capture and processing to visually verify the device's state, displayed content, and operational behavior. This substitution eliminates the security vulnerability associated with data exchange while maintaining the ability to detect security compromises.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If authentication device operates in secure mode without data exchange, then security of authentication device is improved, but verification capability is reduced

Engineering Contradiction:
Improvesecurity of authentication deviceVSAvoidverification capability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent makes the image capture device serve multiple functions: it captures the device display for content analysis, records user interactions for behavior analysis, and documents the physical device state for tamper detection. This multi-functionality allows the authentication device to maintain comprehensive verification capability while operating in secure mode without data exchange, as all necessary information is obtained through visual observation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The authentication device uses its own image capture and processing capabilities to independently verify the electronic device's security state. Instead of relying on data provided by the electronic device (which could be compromised), the system self-generates verification information by capturing and analyzing images of the device's display, operations, and physical state. This self-service approach maintains verification capability while ensuring the authentication device's security.

Inventive Principle:
Principle #25Self-service

3Measurement precision

If image capture device continuously monitors user interactions, then detection accuracy is improved, but processing complexity increases

Engineering Contradiction:
Improvedetection accuracyVSAvoidprocessing complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent implements preliminary classification of captured images to identify only those frames containing relevant security verification information. Before full analysis, the system quickly scans images to detect key elements such as phishing indicators, spoofed interfaces, or abnormal user interactions. This preliminary action filters out unnecessary processing of irrelevant frames, maintaining high detection accuracy while reducing overall processing complexity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent divides the image analysis process into multiple independent segments: display content analysis, interaction behavior analysis, and device state analysis. Each segment processes specific aspects of the captured images independently, allowing parallel processing and reducing the complexity burden on any single processing module. This segmentation enables comprehensive monitoring of user interactions while managing processing complexity through modular architecture.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3756120B1Authentication device
Publication Date: 2022.10.12 OXFORD UNIVERSITY INNOVATION LTD
  • EP3756120B1 patent drawingFigure 1~2
  • EP3756120B1 patent drawingFigure 3
  • EP3756120B1 patent drawingFigure 4

AI summary

An authentication device (101) for verifying the security of a task being performed on an electronic device (105) operated by a user (102). The authentication device includes an image capture device for capturing image data of the electronic device and of the user interacting with the electronic device. The authentication device also includes processing circuitry for processing the captured image data to determine when the electronic device is performing a security related task and to determine when the electronic device has been subject to an event that has compromised or may compromise the security of the electronic device. The authentication device also includes an audio or visual output for providing instructions to the user to interact with the electronic device and for advising the user that the electronic device has been subject to an event that has compromised or may compromise the security of the electronic device.