Biometric Access Provisioning for Secondary User Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems lack a secure and efficient method to grant authenticated access to resources using individual characteristic data, such as fingerprints or facial scans, when the primary user becomes unavailable.

Innovation Solution

A system with an authentication agent on the endpoint device manages access by comparing secondary user's individual characteristic data against an authentication credential repository, using machine learning to convert data formats for compatibility and granting access if a match is found.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication credentials are stored in a centralized repository, then access control and security are improved, but data format compatibility across different endpoint devices deteriorates

Engineering Contradiction:
Improveaccess controlVSAvoiddata format compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a machine learning model as an intermediary component that translates between different data formats. This mediator converts authentication data from various endpoint devices into a standardized format that can be stored and verified against credentials in the centralized repository, thus maintaining both security and compatibility.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system changes the parameter of data format by using machine learning models to transform authentication data into different representations. The model learns to convert diverse input formats (from different devices) into a consistent internal format, enabling the centralized repository to handle multiple formats without compromising security.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If individual characteristic data is secured with primary user credentials, then security is improved, but access efficiency for secondary users deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidaccess efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary action by pre-storing authentication credentials of secondary users in the centralized repository before they are needed. When a secondary user needs to access resources, the system can quickly verify their credentials against the pre-stored data without requiring real-time complex authentication, thus maintaining security while improving access efficiency.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If authentication credentials are converted to different formats using machine learning, then adaptability to different devices is improved, but system complexity deteriorates

Engineering Contradiction:
Improvedata format compatibilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex format conversion functionality into a separate, dedicated machine learning model component. This extraction isolates the complexity from the core authentication system, allowing the main system to remain simple while the specialized model handles the complex translation tasks between different data formats.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12632520B2System for provisioning authenticated access to resources linked with individual characteristic data
Publication Date: 2026.05.19 BANK OF AMERICA CORP
  • US12632520B2 patent drawing
  • US12632520B2 patent drawing
  • US12632520B2 patent drawing

AI summary

A system is provided for provisioning authenticated access to resources linked with individual characteristic data. In particular, the system may comprise an endpoint device associated with a primary user, where the endpoint device stores a resource that is secured using the authentication credentials of the primary user. The endpoint device may have an authentication agent installed thereon that may manage authenticated access to the endpoint device and/or the resources stored thereon. In the event of the primary user's unavailability, a secondary user may attempt to pass the authentication check of the primary user's endpoint device. If a match is found, the authentication agent may grant authorization for the secondary user to access the endpoint device and/or the resources stored thereon.