Biometric Authentication System with One-Time Passphrase
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods over networks are inadequate in preventing fraudulent transactions due to password misuse and sophisticated techniques like phishing, leading to increased risks for sensitive information.
Innovation Solution
A method and system that utilize biometric authentication data captured from a communications device, compared against stored data, and a one-time pass-phrase generated and transmitted via separate communication channels to authenticate users, enhancing security by requiring multiple verification steps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional username and password authentication is used, then ease of operation is improved, but security against fraudulent access deteriorates
Solution Approach 1:
The authentication process is segmented into multiple independent verification steps: biometric authentication, one-time passcode generation, and separate communication channel verification. Each segment provides a layer of security that cannot be compromised by a single point of failure, resolving the contradiction between ease of operation and security reliability.
Solution Approach 2:
A biometric authentication system acts as an intermediary between the user and the protected resources. The biometric data serves as a mediator that verifies identity without exposing passwords, while the one-time passcode system provides an additional intermediary layer that prevents fraudulent access even if biometric verification is bypassed.
2Reliability
If biometric authentication and one-time passcode systems are implemented, then security against fraud is improved, but device complexity increases
Solution Approach 1:
The system uses a communications device that performs multiple functions: it captures biometric authentication data, generates one-time passcodes, and transmits verification information. By making the device multi-functional, the system reduces the need for separate dedicated hardware components, thereby managing complexity while maintaining high security reliability.
Solution Approach 2:
The communications device automatically captures biometric data, generates one-time passcodes, and handles verification transmissions without requiring manual intervention or separate administrative systems. This self-service capability reduces operational complexity while maintaining robust security against fraud.
3Reliability
If multiple authentication factors are required, then transaction security is improved, but time for authentication increases
Solution Approach 1:
The one-time passcode is generated and transmitted periodically with a limited validity window. This periodic action creates a time-bound verification process that secures transactions while limiting the time users spend on authentication. The passcode expires after a short period, forcing quick verification and reducing overall authentication time while maintaining high security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device (20) when the inputted information is known, and transmits a biometric authentication request from a server (12) to an authentication system (16) when the state of the communications device (20) is enrolled. Additionally, the method includes validating the communications device (20), capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device (20), biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system (16) when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.