Biometric Authentication for Computing Resource Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional password and PIN-based security systems are vulnerable to brute force attacks, guessing, and shoulder surfing, especially on shared devices, leading to unauthorized access to sensitive resources.

Innovation Solution

Implementing biometric security measures on computing devices, where unique biometric factors such as fingerprints, facial recognition, or voice patterns are used to create pattern-matching templates for authentication, allowing authorized access while denying access to unauthorized users.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If passwords are made complex to improve security, then security strength is improved, but ease of operation deteriorates because typing complex passwords is cumbersome and error-prone

Engineering Contradiction:
Improvesecurity strengthVSAvoidease of authentication
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/manual password typing process with biometric authentication systems that automatically verify user identity through physiological characteristics (fingerprints, facial recognition, iris scans, etc.), eliminating the need for users to manually input complex passwords while maintaining strong security

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The biometric system performs automatic authentication without requiring user intervention in the verification process itself - the system captures, processes, and verifies biometric data automatically, allowing users to simply present their biological characteristic for access

Inventive Principle:
Principle #25Self-service

2Ease of operation

If PINs are made short and simple to improve ease of operation, then ease of operation is improved, but security strength deteriorates making them vulnerable to brute force attacks and guessing

Engineering Contradiction:
Improveease of authenticationVSAvoidsecurity strength
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent changes the fundamental parameter of authentication from artificial codes (PINs, passwords) to biological characteristics, which are inherently complex and impossible to guess or brute force, thereby achieving both simplicity in use and strength in security simultaneously

Inventive Principle:
Principle #35Parameter changes

3Ease of operation

If passwords are saved on the host operating system to improve ease of operation, then ease of operation is improved, but security strength deteriorates because shared users can access resources without consent

Engineering Contradiction:
Improveease of authenticationVSAvoidaccess control security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments authentication into distinct phases: initial device unlock authentication and per-resource authentication. Each resource can require separate biometric verification, allowing fine-grained control over access while maintaining convenience through automatic authentication where appropriate

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3005211B1Resource management based on biometric data
Publication Date: 2019.01.23 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP3005211B1 patent drawingFigure 1
  • EP3005211B1 patent drawingFigure 2
  • EP3005211B1 patent drawingFigure 3

AI summary

The techniques and systems disclosed herein pertain to preventing unauthorized access to computing resources by unauthorized persons by deploying biometric security. To implement biometric security, the computing device, possibly by the OS, may obtain samples of one or more biometric factors unique to the owner. The computing device may construct pattern-matching templates corresponding to the biometric samples, which may be stored for later use when a protected resource is requested. Computing resources may be selected for protection by a biometric security mechanism by an authorized user or by other techniques or default settings. Before allowing certain restricted actions, the OS may request that the user provide one of the previously registered biometric samples. If the biometric sample matches the user's stored pattern-matching template, the OS may grant access to the computing resource, otherwise, the OS may deny access to the computing resource.