Cognitive Image Authentication System for User Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user identification protocols are vulnerable due to poor password management practices and lack of robust authentication methods, leading to potential unauthorized access and data security threats.
Innovation Solution
A method and system that utilize cognitive interactions, including the generation and use of composite images, to authenticate user identity through user interactions, employing a hardware processor to obtain and compare user inputs with stored interactions, and generate alphanumeric passwords based on image metadata, thereby enhancing security and preventing non-human threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional password-based authentication is used, then ease of operation is improved, but reliability deteriorates due to poor password management practices and vulnerability to unauthorized access
Solution Approach 1:
The patent replaces traditional mechanical/password-based authentication systems with a cognitive interaction system that uses image-based puzzles and human perceptual abilities. The system substitutes knowledge-based factors (passwords) with behavioral and cognitive factors (image manipulation, pattern recognition), making automation difficult while maintaining ease of human operation.
Solution Approach 2:
The system changes the authentication parameter from static knowledge (passwords) to dynamic cognitive behavior (image interactions). By transforming the authentication mechanism from memorization-based to perception-based, the system simultaneously improves reliability through harder-to-compromise factors and maintains ease of operation through intuitive visual tasks.
2Ease of operation
If knowledge-based authentication factors are used, then ease of operation is improved, but object-generated harmful factors increase due to easily mined personal data and social engineering vulnerabilities
Solution Approach 1:
The patent replaces knowledge-based authentication (vulnerable to social engineering and data mining) with cognitive-based authentication using image puzzles. This substitution eliminates the harmful factor of easily mined personal data while maintaining ease of operation through intuitive visual interactions that do not rely on memorized secrets.
3Reliability
If device-based authentication is used, then reliability is improved, but device complexity increases due to requirements for additional verification devices and tokens
Solution Approach 1:
The patent creates a universal authentication system that can be implemented across multiple platforms and devices without requiring specialized hardware or additional tokens. The cognitive interaction module works with standard web browsers and mobile devices, eliminating the need for separate verification devices while maintaining high reliability through image-based challenges.
4Reliability
If image-based authentication with cognitive interactions is implemented, then reliability is improved, but ease of operation deteriorates due to complex interaction requirements
Solution Approach 1:
The system uses composite images created by combining portions of multiple user-selected photographs. This copying and recombination approach creates unique authentication challenges that are easy for humans to recognize and manipulate intuitively, while being extremely difficult for automated systems to replicate, thus improving reliability without significantly impacting ease of operation.
Data Source
AI summary
Disclosed herein is a method for authenticating a user identity according to predetermined user interactions, including the use of at least one hardware processor for obtaining at least one image from a database, presenting said at least one image to a user through an authentication interface, requesting from the user at least one user interaction related to said at least one image, obtaining an input comprising at least one user interaction input, comparing said at least one user interaction input with said at least one user interaction to validate the user identity and to validate the user is a human, providing an indication regarding the user identity according to a result of comparing said at least one user interaction input with said at least one user interaction.