Multi-User Biometric Authentication With Dual Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication systems for multi-user accounts lack robust security measures, allowing unauthorized interactions to occur, which can be time-consuming and resource-intensive to rectify.
Innovation Solution
A system that requires biometric authentication data from both the requesting user and an authorizing user associated with the multi-user account, ensuring that interactions are only authorized if both users' biometric data is verified within a specified time threshold.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is implemented for multi-user accounts, then security is improved, but authentication complexity increases
Solution Approach 1:
The authentication process is segmented into distinct phases: first user authentication phase and second user authentication phase. Each phase has specific requirements and procedures, making the overall complex process manageable through structured division. The system identifies whether a first user or second user is attempting authentication and applies appropriate procedures accordingly.
Solution Approach 2:
The system performs preliminary actions by pre-establishing user accounts with associated biometric data and authorization relationships before actual authentication events. The multi-user account structure includes pre-configured first users, second users, and their biometric authentication data, enabling rapid authentication during actual use without requiring complex real-time setup.
2Ease of operation
If multiple users can access accounts, then ease of operation is improved, but unauthorized interactions increase
Solution Approach 1:
The system implements continuous feedback loops where authentication requests are evaluated against stored biometric data and authorization conditions. After each authentication attempt, the system provides feedback by either granting or denying access based on whether the biometric data matches and the user meets authorization criteria, preventing unauthorized interactions while maintaining ease of operation for authorized users.
Solution Approach 2:
Different users are assigned different levels of access and authorization within the same account system. First users and second users have different authentication requirements and access rights, creating local quality differences in the user experience based on their specific roles and authorization levels.
3Productivity
If biometric verification time threshold is reduced, then productivity is improved, but authentication reliability decreases
Solution Approach 1:
The system dynamically adjusts the time threshold parameter for biometric verification based on the specific authentication scenario and user requirements. Different time thresholds can be applied to different authentication types or user levels, optimizing the balance between speed and reliability for each specific case rather than using a fixed threshold.
Data Source
AI summary
In some implementations, a system may receive interaction request data indicating a request by a first user to perform a requested interaction via a user account, wherein the first user is associated with the user account. The interaction request data may indicate a first user identifier and first user biometric authentication data associated with the first user. The system may identify a second user identifier associated with a second user associated with the user account. If the system determines that an authorization condition is satisfied, the system may transmit, to a second user device associated with the second user, a second user authentication. The system may receive, from the second user device, second user biometric authentication data associated with the second user. The system may authorize the requested interaction based on receiving the second user biometric authentication data within a time threshold after a request time associated with the request.