BioAura Continuous Authentication via Biomedical Data Fusion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional authentication mechanisms are inadequate in providing continuous user verification, leading to security vulnerabilities such as unauthorized access after initial login, as they often require user intervention and lack robustness in distinguishing legitimate users from impostors.
Innovation Solution
A continuous authentication system utilizing biomedical data streams from wearable medical sensors, processed by a BioAura engine, which combines multiple biomedical data streams to generate authentication outputs, ensuring high accuracy and continuous verification without user intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional one-time authentication is used, then the authentication process is simple and quick, but the system cannot detect intruders after initial authentication and leaves security vulnerabilities
Solution Approach 1:
The system implements continuous authentication by continuously monitoring multiple biomedical data streams (heart rate, blood pressure, temperature, etc.) from wearable sensors after initial login, rather than performing authentication only once. This continuous monitoring enables real-time detection of intruders while maintaining security, resolving the contradiction between reliability and complexity through ongoing verification processes.
Solution Approach 2:
The system changes the authentication parameters from static credentials (passwords) to dynamic biomedical parameters (heart rate, blood pressure, temperature patterns). By monitoring multiple physiological parameters continuously and analyzing their patterns, the system achieves reliable continuous authentication without requiring complex additional hardware, as these parameters naturally vary and provide distinctive user profiles.
2Ease of operation
If knowledge-based authentication (password) is used, then the authentication mechanism is easy to implement, but the user must focus on authentication steps which may lead to safety risks and distraction
Solution Approach 1:
The system uses self-service authentication by automatically collecting and analyzing biomedical data from wearable sensors without requiring active user participation. The authentication process happens passively in the background, eliminating the need for users to focus on authentication steps or enter passwords, thereby improving both ease of operation and user safety while maintaining security through continuous physiological monitoring.
3Ease of operation
If simple security policies (lock after inactivity) are used, then the system is easy to operate, but it exposes windows of vulnerability and requires user re-authentication which is annoying
Solution Approach 1:
The system maintains continuous authentication monitoring even during periods of user inactivity by continuously analyzing biomedical data streams. This eliminates security vulnerability windows that occur with simple lock policies, as the system can detect when an unauthorized user takes over the device. The continuous analysis of physiological parameters provides seamless security without requiring users to re-authenticate, improving both reliability and ease of operation.
Data Source
AI summary
A user authentication system for an electronic device for use with a plurality of wireless wearable medical sensors (WMSs) and a wireless base station that receives a biomedical data stream (biostream) from each WMS. The system includes a BioAura engine located on a server, the server has a wireless transmitter/receiver with receive buffers that store the plurality of biostreams, the BioAura engine has a look up stage and a classifier, the classifier generates an authentication output based on the plurality of biostreams, the authentication output authenticates the user's access to the electronic device. The wireless base station has a transmitter/receiver having receive buffers that store the biomedical data from each WMS, the wireless base station has a communication engine that retrieves the biostream from each WMS and transmits the plurality of biostreams to the server.