Biometric Authentication Using Dynamic User Manipulations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional biometric authentication techniques lack enhanced security and resistance to replay attacks, as they rely solely on biometric samples without additional manipulation or dynamic entropy, making them vulnerable to unauthorized access.
Innovation Solution
The method involves obtaining enrollment information by applying selected manipulations such as filters, markings, and overlays to biometric samples, which are then used to create a richer biometric sample for authentication, incorporating entropy variations and password rotation techniques to ensure secure access, requiring users to apply specific manipulations during authentication, thus enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional biometric authentication is used without manipulations, then the authentication process is simple and fast, but the security is weak and vulnerable to replay attacks
Solution Approach 1:
The patent applies dynamics by making the biometric authentication process dynamic through user-selected manipulations. Instead of a static biometric comparison, the system requires users to apply dynamic manipulations (filters, markings, overlays) to their biometric samples during authentication. This dynamic element prevents replay attacks because captured biometric samples cannot be reused without the specific manipulations that were originally applied.
Solution Approach 2:
The patent uses manipulations as an intermediary element between the user and the biometric authentication system. These manipulations act as a mediator that adds an additional layer of security without replacing the biometric authentication process. The manipulations (selected from filters, markings, overlays) serve as an intermediate verification step that enhances security while maintaining the core biometric authentication functionality.
2Reliability
If selected manipulations are applied to biometric samples, then the entropy and security are increased, but the authentication process becomes more complex
Solution Approach 1:
The patent applies partial action by allowing users to select a subset of manipulations from available options rather than requiring all possible manipulations. Users can choose from filters, markings, and overlays based on their preferences or requirements, making the process more manageable while still achieving enhanced security through the combination of biometric data with selected manipulations.
Solution Approach 2:
The system performs preliminary action by providing users with a catalog of available manipulations before the authentication process begins. Users can review and select their preferred manipulations in advance, which simplifies the actual authentication process while ensuring that the security-enhancing manipulations are properly applied to the biometric samples.
3Reliability
If multiple manipulations are required for authentication, then replay attacks are prevented, but the authentication time increases
Solution Approach 1:
The patent applies periodic action by implementing time-based constraints on the manipulation process. The system provides users with a limited time window to select and apply manipulations during authentication. This periodic approach ensures that authentication is completed within a reasonable time frame while still requiring the security-enhancing manipulations to be applied, thus preventing replay attacks without excessive time loss.
Data Source
AI summary
Biometric authentication techniques are provided using selected manipulations of biometric samples. An exemplary method comprises obtaining enrollment information from a user, wherein the enrollment information comprises first manipulations to a first biometric sample of the user; initiating a challenge to the user in connection with an authentication request by the user to access a protected resource; processing second manipulations by the user of a second biometric sample of the user submitted in response to the challenge, and wherein the processing comprises determining a likelihood that the second manipulations of the second biometric sample of the user submitted in response to the challenge matches the first manipulations to the first biometric sample of the user submitted by the user with the enrollment information; and resolving the authentication request based on the likelihood. The first manipulations comprise, for example, applying selected filters, selected markings and/or selected overlays to specified portions of the first biometric sample.