Biometric Sensor Corroboration for Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional security systems rely predominantly on credential-based authentication, which can be compromised if user credentials are stolen, allowing unauthorized access to sensitive resources, and do not effectively verify the physical presence of the authorized user.
Innovation Solution
A security management system that utilizes sensor data, including biometric data, to corroborate the presence of an authorized user by determining their location within a physical environment, ensuring that the user is proximate to the device used for authentication, thereby enhancing the security of system resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If credential-based authentication is used, then authentication simplicity is improved, but security reliability deteriorates
Solution Approach 1:
The patent introduces sensor data (biometric sensors, location sensors, device sensors) as intermediary verification mechanisms between the user and the authentication system. These sensors act as mediators that objectively verify user presence and device ownership without requiring complex user interaction, thus maintaining simplicity while enhancing security through physical presence confirmation.
Solution Approach 2:
The patent changes the authentication parameters from purely credential-based (passwords, tokens) to multi-parameter verification including biometric data, location coordinates, device identifiers, and sensor readings. This parameter expansion transforms the authentication process from a single-factor system to a multi-dimensional verification system that simultaneously checks digital and physical presence.
2Reliability
If sensor data and biometric verification are added, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent leverages existing multi-functional components in modern devices that serve multiple purposes. For example, the device's camera serves both as a standard camera and a biometric sensor for authentication; the microphone serves for voice commands and voiceprint authentication; the accelerometer serves for motion detection and device orientation verification. This multi-functionality approach adds security capabilities without requiring entirely new dedicated hardware.
Solution Approach 2:
The authentication system utilizes data and sensors already present in the user's device and environment, making the verification process self-service rather than requiring external specialized equipment. The device's own sensors, combined with environmental sensors and network location data, perform the verification autonomously, reducing the need for additional complex infrastructure.
3Object-affected harmful factors
If physical presence verification is implemented, then unauthorized access prevention is improved, but measurement precision requirements increase
Solution Approach 1:
The patent segments the physical presence verification into multiple independent measurement components: location verification through GPS or network triangulation, biometric verification through separate sensor modalities (face, fingerprint, voice), and device state verification through individual sensors. Each segment operates independently with its own precision requirements, and the overall system requires all segments to validate simultaneously, reducing the burden on any single measurement system.
Data Source
AI summary
An attempt to authenticate to a system resource using a particular device and particular credentials is identified and an identity of a user associated with the particular credentials is determined. In association with the attempt to authenticate, a location associated with the particular device is determined and sensor data generated by a set of sensors deployed in an environment is accessed, at least some of the sensor data including biometric data. The sensor data is used to detect a location of the user, and a degree of proximity between the location associated with the particular device and the location of the user is determined. An authentication action is caused to be performed corresponding to the attempt to authenticate based on the degree of proximity.