Biometric User Verification With Device-Keyed Live Image Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems are vulnerable to credential interception and impersonation, especially in biometric authentication, as they often rely on user-supplied credentials and images that can be manipulated or intercepted by third parties, compromising security and authenticity.
Innovation Solution
An authentication server maintains device-specific profiles linked to a unique device key, using a hardware camera to capture biometric images, digitally signed by the authentication service, ensuring real-time, live image capture, and employing machine learning to verify the authenticity of the images, thus preventing image swapping and impersonation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user-supplied credentials and images are used for authentication, then ease of operation is improved, but security is worsened due to vulnerability to credential interception and impersonation
Solution Approach 1:
The patent introduces an authentication service as an intermediary between the user and the authentication system. This service executes on the client device and mediates the authentication process by controlling the camera, capturing biometric images, and verifying authenticity before transmitting data to the server, thereby maintaining ease of operation while enhancing security
Solution Approach 2:
The authentication service performs preliminary actions by controlling the camera to capture real-time biometric images and verifying their authenticity before the actual authentication occurs. This preliminary verification prevents credential interception and impersonation attacks by ensuring the biometric data is genuine and not manipulated
2Measurement precision
If biometric images are captured and stored for authentication, then authentication accuracy is improved, but vulnerability to image manipulation and impersonation worsens
Solution Approach 1:
The patent converts the potential harm of image manipulation into a benefit by implementing verification mechanisms that specifically detect and identify manipulated or synthetic images. The authentication service verifies the authenticity of captured images and rejects those that show signs of manipulation, thereby transforming the risk into a protective measure
Solution Approach 2:
The system applies preliminary anti-action by verifying the authenticity of biometric images before they are used for authentication. The authentication service checks whether images are real-time captures rather than pre-recorded or manipulated, preventing image swapping and impersonation attacks before they can compromise security
3Reliability
If device-specific profiles with unique device keys are implemented, then security is improved, but device complexity worsens
Solution Approach 1:
The authentication service on the client device performs self-service by automatically managing device keys and profile associations without requiring manual user configuration. The service handles key generation, storage, and verification processes autonomously, maintaining enhanced security while minimizing the complexity burden on the user
Data Source
AI summary
Systems and methods for user verification may include processor(s) to maintain a plurality of authentication profiles for respective users, where each authentication profile includes profile image(s) and a device key linked to a respective client device. The processor(s) may receive a request including the device key of the client device and a biometric image captured during the session by a camera of the client device. The processor(s) may identify the authentication profile corresponding to the user based on the device key included in the authentication profile matching the device key included in the request. The processor(s) may compare feature(s) extracted from the biometric image to feature(s) extracted from the profile image(s), and store the biometric image in the authentication profile based determining that the feature(s) from the biometric image match feature(s) from a profile image of the authentication profile.