Biometric Authentication with Dynamic Code Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Digital authentication methods, such as facial recognition, are vulnerable to security breaches like spoofing and require excessive manual tasks from users, leading to inefficiencies and increased security risks.

Innovation Solution

A system that combines facial recognition data with dynamic information, such as QR codes, to authenticate users by capturing an image of both the user's face and dynamic information displayed on their device, which is then evaluated by an authentication service to securely unlock electronic devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If facial recognition is used for authentication, then user convenience is improved, but security vulnerability increases due to spoofing attacks

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent combines facial recognition with QR code verification in a single authentication flow. The system captures an image containing both the user's face and the QR code displayed on their mobile device, then validates both elements together. This merging of biometric and dynamic code verification resolves the contradiction by maintaining user convenience (face recognition) while adding security layers (QR code spoofing detection) to prevent unauthorized access.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If manual authentication tasks are required, then security is improved, but authentication efficiency deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically captures the QR code from the user's mobile device screen through camera imaging, eliminating the need for manual QR code scanning or code entry. The authentication service automatically extracts and validates the QR code data along with facial recognition results. This self-service approach maintains strong security verification while significantly improving authentication efficiency by removing manual intervention steps.

Inventive Principle:
Principle #25Self-service

3Reliability

If dynamic information and biometric data are both captured, then security against spoofing is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity against spoofingVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges facial recognition and QR code verification into a single image capture and processing step. The camera captures one image containing both the user's face and the QR code on their device, and the authentication service processes both elements together in one validation operation. This merging approach improves spoofing resistance by requiring both biometric and dynamic code verification while minimizing system complexity by consolidating multiple verification steps into a unified process.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS20240354385A1Digital User Authentication Processes
Publication Date: 2024.10.24 HEWLETT PACKARD DEVELOPMENT COMPANY LP
  • US20240354385A1 patent drawing
  • US20240354385A1 patent drawing
  • US20240354385A1 patent drawing

AI summary

Digital user authentication processes can use both dynamic information presented on a user device associated with an individual as well as a biometric associated with the individual to evaluate an authentication attempt for the individual. The dynamic information can include information such as QR codes, pin numbers, cryptographic keys, colors, and other types of information. The biometric associated with the individual can include facial recognition data, fingerprint data, and other types of biometric data. The digital authentication processes can provide enhanced security features that are both less vulnerable to manipulation and more efficient for users.