Authentication Workflow for Similar-Face Impersonation Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication technologies, such as those described in Patent Literature 1 and Patent Literature 2, are susceptible to impersonation when multiple users with similar biometric features are present in the same facility, leading to security vulnerabilities.
Innovation Solution
An authentication system that includes first authentication means for executing face authentication and passcode authentication for a user upon arrival or presence at a designated place, with additional passcode authentication required if another user with similar facial features has already checked in, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric authentication is used for user verification, then authentication speed and convenience are improved, but security deteriorates when multiple users with similar biometric features are present
Solution Approach 1:
The authentication process is segmented into two distinct stages: first, biometric authentication to identify potential users with similar features; second, presence verification through image recognition to confirm the actual physical presence of the authenticated user. This segmentation resolves the contradiction by maintaining the speed advantage of biometric authentication while adding a security layer that prevents impersonation.
Solution Approach 2:
An image recognition system acts as an intermediary verification step between biometric authentication and access granting. The system captures images of users present at the facility and verifies whether the biometrically authenticated user is actually present, thereby mediating between the convenience of biometric auth and the security requirement against impersonation.
2Reliability
If additional verification steps are added to prevent impersonation, then security is improved, but authentication time and complexity increase
Solution Approach 1:
The system performs preliminary biometric authentication before the user physically arrives or is fully verified present. By pre-authenticating users based on biometric data and storing their information, the system prepares verification results in advance, so that when the user actually arrives, the presence verification can be quickly completed with minimal additional time.
Solution Approach 2:
The system automatically captures images of users present at the facility and performs presence verification without requiring manual intervention. The image recognition system operates autonomously to verify whether the biometrically authenticated user is actually present, eliminating the need for additional manual verification steps that would increase authentication time.
3Device complexity
If biometric authentication is implemented without presence verification, then device complexity is reduced, but security vulnerabilities increase due to impersonation risks
Solution Approach 1:
The system dynamically adjusts the verification process based on whether users with similar biometric features are present. When such users are detected, the system automatically activates presence verification through image recognition. This dynamic approach maintains system simplicity when impersonation risk is low while enhancing security when the risk is detected.
Solution Approach 2:
The system uses feedback from biometric authentication results to determine whether additional presence verification is needed. When biometric authentication identifies users with similar features, the system triggers image recognition verification as feedback, creating a closed-loop security mechanism that maintains simplicity while addressing impersonation risks.
Data Source
AI summary
An authentication system, comprising at least one processor configured to: execute first authentication for a first user when the first user is present at or arrives at a first place; determine whether a second user who has a possibility of being authenticated as the first user by the first authentication is present at the first place, or whether the second user has arrived at the first place; and execute, when it is determined that the second user is not present at or has not arrived at the first place, first processing for the first user based on the first authentication.