User-to-User Authentication Using Biometric Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods, including username-password combinations and two-factor authentication, are inadequate in preventing identity fraud and social hacking, as they do not verify user identity beyond initial access to a system.
Innovation Solution
A user-to-user authentication method using biometric data and contact data-based tokens, such as unique links, QR codes, or IVR calls, to verify the identity of communicating users during an ongoing connection, providing an additional security layer beyond traditional system authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If username and password authentication is used, then ease of operation is improved, but security is worsened due to brute force attacks and social hacking
Solution Approach 1:
The authentication process is divided into two distinct phases: initial system access authentication (username/password) and ongoing communication partner authentication (biometric verification). This segmentation allows each phase to use appropriate security measures without compromising overall usability.
Solution Approach 2:
Biometric data is collected and stored in advance during user registration. During ongoing communications, this pre-stored biometric data is quickly compared with real-time biometric input, enabling rapid verification without disrupting the communication flow.
2Reliability
If two-factor authentication is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The system uses a single biometric template that serves multiple authentication purposes across different communication sessions and platforms. The stored biometric data can be rapidly compared against various biometric modalities (fingerprint, facial recognition, voice) without requiring separate authentication mechanisms for each.
Solution Approach 2:
The system automatically performs biometric verification during ongoing communications without requiring user intervention beyond providing the initial biometric sample. The authentication process happens transparently in the background, eliminating the need for users to manually configure or manage complex authentication settings.
3Device complexity
If traditional authentication is used, then device complexity is reduced, but reliability is worsened as no further verification is made after initial access
Solution Approach 1:
Biometric verification is performed continuously throughout the communication session, not just at the beginning. Each communication event triggers a biometric check, ensuring ongoing verification of the communication partner's identity without requiring the user to re-authenticate manually.
Solution Approach 2:
The system provides immediate feedback to users about the authentication status of their communication partners. When a biometric mismatch is detected, the system alerts the user and can automatically terminate the communication, providing real-time security monitoring.
Data Source
Figure 1~2
Figure 3
AI summary
A method for user authentication during a connection between a first user (A) and a second user (B) is provided, wherein the method comprises receiving an authentication request from the first user (A) for authenticating the second user (B), executing an authentication process of the first user (A), receiving contact data of the second user (B) from the first user (A), sending a Token (304) to the second user (B) wherein the Token (304) is based on and/or addressed by the contact data (303) provided by the first user (A), requesting executing an authentication process of the second user (B) based on the Token, generating a result for the authentication process for the second user (B) and providing the result of the authentication process of the second user (B) to the first user (A) and/or to the second user (B).