Authentication System Using Location-User Association to Prevent Impersonation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Face authentication systems fail to prevent impersonation by third parties due to similarities in face photographs, leading to insufficient security enhancements.
Innovation Solution
An authentication system that employs a dual-layer approach, where successful authentication by a first method (e.g., two-dimensional code) associates the user with a location, and subsequent authentication by a second method (e.g., two-step authentication) is restricted if the user and location are not matched, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If face authentication is performed based on similarity between registered face photographs and photographed face photographs, then authentication speed and ease of operation are improved, but security is worsened because third parties with similar faces can impersonate users
Solution Approach 1:
The authentication process is divided into two independent stages: first, face photograph registration with pattern generation; second, authentication using both the photographed face photograph and the generated pattern. This segmentation allows each stage to serve a specific function - the first captures biometric data while the second adds security verification through pattern matching, preventing impersonation by third parties with similar faces
Solution Approach 2:
Face photographs with multiple patterns are registered in advance before authentication occurs. During authentication, a pattern corresponding to the photographed face photograph is generated and used for verification. This preliminary registration of multiple patterns ensures that even if faces are similar, the specific pattern match provides an additional security layer that prevents unauthorized access
2Reliability
If multiple patterns are registered for face photographs, then security is improved by preventing impersonation, but device complexity and data storage requirements increase
Solution Approach 1:
Instead of storing multiple complete face photographs with different patterns, the system stores a single face photograph and generates patterns locally during authentication. The pattern generation occurs at the point of use based on the photographed face photograph, ensuring security through pattern matching without the storage overhead of multiple registered photographs
3Ease of operation
If face authentication based on similarity is used, then ease of operation is maintained, but authentication precision is worsened because similar faces cannot be distinguished
Solution Approach 1:
The system creates a pattern copy from the photographed face photograph during authentication and compares this generated pattern with the registered pattern. This copying mechanism allows the authentication system to verify identity through pattern matching rather than direct face comparison, maintaining operational simplicity while significantly improving identification accuracy by preventing false matches between similar faces
Data Source
AI summary
An authentication system, including at least one processor configured to: perform authentication based on a first authentication method; record, when the authentication by the first authentication method is successful, an authenticated user and a location of the authenticated user in association with each other in a storage; perform authentication based on a second authentication method; and restrict successful authentication by the second authentication method when a user to be authenticated by the second authentication method and a location of the user to be authenticated are not associated with each other in the storage.