Continuous Biometric Authentication for Mobile Application Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional systems fail to provide continuous authentication and validation of users after initial access to applications, allowing unauthorized access and being inconvenient for users, thus compromising data privacy and security.

Innovation Solution

Implementing enhanced security measures using biometric authentication and tracking on mobile devices, where biometric data such as fingerprint data is continuously captured and compared to pre-stored data to verify user identity, modifying application functionality and accessibility accordingly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication systems are used, then users can access applications after initial authentication, but unauthorized access cannot be prevented and repeated authentication input is required

Engineering Contradiction:

Improveuser authentication reliabilityVSAvoiduser operation convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary biometric authentication to establish user identity, then continuously monitors biometric characteristics throughout the application session. This preliminary action ensures that the initial authentication is followed by ongoing verification, preventing unauthorized access while maintaining convenience after the first authentication.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements continuous biometric verification throughout the application usage session rather than stopping after initial authentication. The biometric sensor continuously captures and compares biometric data, ensuring uninterrupted verification of user identity while the application remains accessible, thus maintaining both security and convenience.

Inventive Principle:

Principle #20Continuity of useful action

2Reliability

If continuous biometric verification is implemented, then unauthorized access is prevented and data security is enhanced, but system complexity increases

Engineering Contradiction:

Improvedata securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system uses the user's own biometric characteristics (fingerprint, facial features, or voice) as the authentication mechanism. The biometric sensor continuously captures the user's natural biometric data without requiring external verification systems or complex authentication protocols, thereby enhancing security while minimizing system complexity.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system replaces traditional mechanical authentication methods (keyboards, passwords, tokens) with biometric sensing technology. The biometric sensor directly captures physiological characteristics and compares them against stored templates, eliminating the need for complex authentication interfaces and reducing overall system complexity while improving security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If repeated authentication input is required, then security is maintained, but user convenience deteriorates

Engineering Contradiction:

Improveauthentication securityVSAvoiduser input convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs continuous biometric verification in the background throughout the application session without requiring the user to repeatedly input authentication data. The biometric sensor continuously captures biometric characteristics and compares them against stored templates, maintaining security while allowing uninterrupted user interaction with the application.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The system replaces repeated manual authentication input (typing passwords, entering PINs) with automatic biometric sensing. The biometric sensor continuously captures physiological characteristics such as fingerprint patterns, facial features, or voice characteristics and compares them against stored templates, eliminating the need for repeated user input while maintaining authentication security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11334654B2Dynamic enhanced security based on biometric authentication

Publication Date: 2022.05.17 BANK OF AMERICA CORP

AI summary

Systems for enhanced security using biometric controls are provided. A user may launch an application on a user device and one or more rules or instructions may be executed activating enhanced security functions for the application. As the user interacts with a touch screen display of the device, user input including biometric data may be captured. The biometric data may be compared to pre-stored biometric data of the user. If the biometric data matches the pre-stored data, the system may capture additional user input and biometric data and analyze that data to verify the user. If the biometric data does not match the pre-stored data, functionality and/or accessibility of the application may be modified. The system may continue to capture user input and/or biometric data and if the registered user's data is again recognized, the functionality and/or accessibility may again be modified to provide access to the registered user.