Biometric Authentication With Random Angle Rotation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Biometric authentication methods are vulnerable to interception and replay attacks where an intermediary copies the acquisition datum and submits it for illegitimate authentication.

Innovation Solution

Introducing random angle rotation in biometric authentication, where the user applies a corrective rotation based on an indicated angle during data acquisition, ensuring the acquisition datum varies with each authentication, and the biometric comparator accounts for this variation during comparison.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If biometric authentication is performed using standard acquisition and comparison methods, then authentication can be completed efficiently, but the system becomes vulnerable to replay attacks where intermediaries intercept and submit copied acquisition data

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the orientation parameter of the biometric acquisition datum by applying random rotations during acquisition. The acquisition datum is rotated by a first random angle, and during comparison, the reference datum is rotated by a second random angle. This parameter transformation ensures that even if an intermediary intercepts the acquisition datum, it cannot be reused because the rotation angles change with each authentication attempt, thereby preventing replay attacks while maintaining system efficiency

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces dynamic randomness into the authentication process by generating different rotation angles for each acquisition and comparison operation. The first angle applied to the acquisition datum and the second angle applied to the reference datum are randomly selected during each authentication attempt, making the authentication process dynamic rather than static. This dynamic approach ensures that the same biometric data produces different transformed representations each time, preventing interception and replay attacks

Inventive Principle:
Principle #15Dynamics

2Reliability

If random angle rotation is applied to acquisition datum and reference datum, then replay attacks are prevented and security is enhanced, but the complexity of the biometric comparison process increases

Engineering Contradiction:
Improveauthentication securityVSAvoidbiometric comparison complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary rotation transformations to both the acquisition datum (by a first angle) and the reference datum (by a second angle) before performing the biometric comparison. By pre-processing the data with random rotations and storing or applying the corresponding angles, the system prepares the transformed data in advance, making the actual comparison process straightforward despite the added security layer. This preliminary action approach manages complexity by separating the transformation step from the comparison logic

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10157328B2Method and device for authentification of a user
Publication Date: 2018.12.18 IDEMIA PUBLIC SECURITY FRANCE
  • US10157328B2 patent drawing

AI summary

Method of authentication of a user via a terminal including acquisition elements for performing a biometric acquisition, includes: presentation to the acquisition elements by the user of a member to be verified by biometric comparison and triggering by the user a biometric acquisition to obtain an acquisition datum; biometric comparison of the acquisition datum with a prestored reference datum, the user being authenticated if the biometric comparison is positive and not authenticated otherwise, the method further including the following steps: providing the user with elements indicative of a first angle, the user applying a corrective rotation by a second angle so as to match an acquisition datum with the second angle, and in the biometric comparison step the reference datum is matched with the first angle, the biometric comparison being positive if the second angle is substantially equal to the first angle. Device adapted to implement such a method.