Authentication Account Linking to Devices With Signed Biometrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to credential interception and impersonation, especially when biometric images are captured from sources outside the device, leading to compromised security and lack of persistence due to changing user identities.
Innovation Solution
An authentication server maintains profiles with device-specific keys and biometric data, using a hardware camera to capture real-time biometric images, digitally signed to prevent manipulation, and compares these images with stored profiles for secure authentication across devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If biometric images are captured from sources outside the device, then authentication flexibility is improved, but security is worsened due to vulnerability to credential interception and impersonation
Solution Approach 1:
The patent introduces an authentication service as an intermediary between the biometric image source and the authentication system. This service executes on the client device and verifies that biometric images are captured by authorized hardware components (camera, microphone) rather than external sources. The intermediary validates the origin and integrity of biometric data, allowing flexible authentication methods while maintaining security through controlled access to hardware capabilities.
2Reliability
If device keys are bound to specific devices, then security against credential sharing is improved, but device compatibility is worsened
Solution Approach 1:
The patent implements dynamic device key binding where authentication services can be transferred between devices through controlled processes. Device keys are not permanently fixed but can be reassigned when users legitimately change devices. The system dynamically updates device key associations in authentication profiles, allowing security to adapt to legitimate device changes while preventing unauthorized credential sharing. This dynamic approach maintains security against credential sharing while preserving device compatibility for legitimate use cases.
3Reliability
If biometric images are digitally signed, then prevention of image manipulation is improved, but processing complexity is worsened
Solution Approach 1:
The patent applies digital signing to biometric images at the point of capture, before the images are transmitted or stored. The authentication service on the client device signs biometric images immediately when captured by authorized hardware, embedding cryptographic signatures that prove authenticity and prevent manipulation. This preliminary action ensures security is established upfront, eliminating the need for complex verification processes later in the authentication chain, thus reducing overall processing complexity while maintaining strong prevention against image manipulation.
Data Source
AI summary
Systems and methods for linking an authentication account to a device may include processor(s) to maintain a plurality of authentication profiles, each authentication profile corresponding to a respective user and including at least one profile image, an immutable identifier, and authentication data used to authenticate the respective user. The processor(s) may receive a request including the device key, an immutable identifier, and a biometric image captured by a camera of a client device. The processor(s) may identify a subset of authentication profiles having respective immutable identifiers that match the immutable identifier from the request. The processor(s) may compare feature(s) extracted from the biometric image of the request to features extracted from the a profile image of the subset of authentication profiles, and link the device key of the client device with an authentication profile in a data structure to register the client device with the authentication server.