User-to-User Authentication Using Biometric Token Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user authentication methods, including username-password combinations and two-factor authentication, are inadequate in preventing identity fraud and social hacking, as they do not verify user identity beyond initial access to a system.

Innovation Solution

A user-to-user authentication method using biometric data and contact data-based tokens, such as unique links, QR codes, or IVR calls, to verify the identity of communicating users during an ongoing connection, providing an additional security layer beyond traditional system authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If username and password authentication is used, then ease of operation is improved, but security is worsened due to brute force attacks and social hacking

Engineering Contradiction:
Improveease of accessVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication process is divided into two distinct phases: initial system access authentication (username/password) and ongoing communication partner authentication (biometric verification). This segmentation allows each phase to use appropriate security measures without compromising overall usability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Biometric data is collected and stored in advance during user registration. During ongoing communications, this pre-stored biometric data is quickly compared with real-time biometric input, enabling rapid verification without disrupting the communication flow.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If two-factor authentication is implemented, then security is improved, but device complexity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses a single biometric template that serves multiple authentication purposes across different communication sessions and platforms. The stored biometric data can be rapidly compared against various biometric modalities (fingerprint, facial recognition, voice) without requiring separate authentication mechanisms for each.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system automatically performs biometric verification during ongoing communications without requiring user intervention beyond providing the initial biometric sample. The authentication process happens transparently in the background, eliminating the need for users to manually configure or manage complex authentication settings.

Inventive Principle:
Principle #25Self-service

3Device complexity

If traditional authentication is used, then device complexity is reduced, but reliability is worsened as no further verification is made after initial access

Engineering Contradiction:
Improveauthentication mechanism simplicityVSAvoididentity verification
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

Biometric verification is performed continuously throughout the communication session, not just at the beginning. Each communication event triggers a biometric check, ensuring ongoing verification of the communication partner's identity without requiring the user to re-authenticate manually.

Inventive Principle:
Principle #20Continuity of useful action

Solution Approach 2:

The system provides immediate feedback to users about the authentication status of their communication partners. When a biometric mismatch is detected, the system alerts the user and can automatically terminate the communication, providing real-time security monitoring.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP4187842B1Method and system for user authentication
Publication Date: 2026.03.04 UNIFY BETEILIGUNGSVERWALTUNG GMBH & CO KG
  • EP4187842B1 patent drawingFigure 1~2
  • EP4187842B1 patent drawingFigure 3

AI summary

A method for user authentication during a connection between a first user (A) and a second user (B) is provided, wherein the method comprises receiving an authentication request from the first user (A) for authenticating the second user (B), executing an authentication process of the first user (A), receiving contact data of the second user (B) from the first user (A), sending a Token (304) to the second user (B) wherein the Token (304) is based on and/or addressed by the contact data (303) provided by the first user (A), requesting executing an authentication process of the second user (B) based on the Token, generating a result for the authentication process for the second user (B) and providing the result of the authentication process of the second user (B) to the first user (A) and/or to the second user (B).