Biometric Authentication for Computing Resource Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password and PIN-based security systems are vulnerable to brute force attacks, guessing, and shoulder surfing, especially on shared devices, leading to unauthorized access to sensitive resources.
Innovation Solution
Implementing biometric security measures on computing devices, where unique biometric factors such as fingerprints, facial recognition, or voice patterns are used to create pattern-matching templates for authentication, allowing authorized access while denying access to unauthorized users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If passwords are made complex to improve security, then security strength is improved, but ease of operation deteriorates because typing complex passwords is cumbersome and error-prone
Solution Approach 1:
The patent replaces the mechanical/manual password typing process with biometric authentication systems that automatically verify user identity through physiological characteristics (fingerprints, facial recognition, iris scans, etc.), eliminating the need for users to manually input complex passwords while maintaining strong security
Solution Approach 2:
The biometric system performs automatic authentication without requiring user intervention in the verification process itself - the system captures, processes, and verifies biometric data automatically, allowing users to simply present their biological characteristic for access
2Ease of operation
If PINs are made short and simple to improve ease of operation, then ease of operation is improved, but security strength deteriorates making them vulnerable to brute force attacks and guessing
Solution Approach 1:
The patent changes the fundamental parameter of authentication from artificial codes (PINs, passwords) to biological characteristics, which are inherently complex and impossible to guess or brute force, thereby achieving both simplicity in use and strength in security simultaneously
3Ease of operation
If passwords are saved on the host operating system to improve ease of operation, then ease of operation is improved, but security strength deteriorates because shared users can access resources without consent
Solution Approach 1:
The patent segments authentication into distinct phases: initial device unlock authentication and per-resource authentication. Each resource can require separate biometric verification, allowing fine-grained control over access while maintaining convenience through automatic authentication where appropriate
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The techniques and systems disclosed herein pertain to preventing unauthorized access to computing resources by unauthorized persons by deploying biometric security. To implement biometric security, the computing device, possibly by the OS, may obtain samples of one or more biometric factors unique to the owner. The computing device may construct pattern-matching templates corresponding to the biometric samples, which may be stored for later use when a protected resource is requested. Computing resources may be selected for protection by a biometric security mechanism by an authorized user or by other techniques or default settings. Before allowing certain restricted actions, the OS may request that the user provide one of the previously registered biometric samples. If the biometric sample matches the user's stored pattern-matching template, the OS may grant access to the computing resource, otherwise, the OS may deny access to the computing resource.