Composite Authentication System for Biometric Spoofing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional authentication techniques, such as biometrics, are vulnerable to spoofing and do not allow users whose biometric signatures have been compromised to regain control over their authentication credentials effectively.

Innovation Solution

Implementing a composite authentication system that combines sequential and biometric credential components, allowing users to change the sequence of biometric inputs, thereby enhancing security and user control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If biometric authentication is used, then user convenience is improved, but security vulnerability increases

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication credential is divided into multiple independent components: a biometric component (fingerprint, iris, or facial recognition) and a sequential component (sequence of actions). This segmentation ensures that compromise of one component does not invalidate the entire authentication mechanism, thereby maintaining security while preserving user convenience.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent creates a composite authentication credential combining different types of authentication factors (biometric and sequential). This composite structure provides enhanced security by requiring multiple different types of verification, making spoofing and unauthorized access significantly more difficult while still maintaining ease of use for authorized users.

Inventive Principle:
Principle #40Composite materials

2Speed

If biometric signatures are used for authentication, then access speed is improved, but control over compromised credentials is lost

Engineering Contradiction:
Improveaccess speedVSAvoidcontrol over compromised credentials
Core Design Contradiction:
SpeedVSAdaptability or versatility

Solution Approach 1:

The sequential component allows users to dynamically change the sequence of actions over time. If a user suspects their biometric data has been compromised, they can modify the sequential component (e.g., change the sequence of actions required) without affecting the biometric component. This dynamic adaptability maintains fast access for legitimate users while providing control and remediation capabilities for compromised credentials.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system allows users to change parameters of the sequential component (such as the sequence order, timing, or specific actions required) to remediate potential compromises. This parameter change capability enables users to maintain fast authentication speeds while adapting to security threats by modifying credential parameters without replacing the entire authentication system.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If multiple credential components are combined, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

By segmenting the authentication system into distinct biometric and sequential components, each handled by dedicated modules, the complexity is managed through modular architecture. The biometric component handles biological verification while the sequential component handles behavioral verification, allowing independent development, testing, and maintenance of each module, thereby reducing overall system complexity despite enhanced security.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9258301B2Advanced authentication techniques
Publication Date: 2016.02.09 OMNISSA LLC
  • US9258301B2 patent drawing
  • US9258301B2 patent drawing
  • US9258301B2 patent drawing

AI summary

A method, system, apparatus, and computer program product are provided for facilitating advanced authentication techniques. For example, a method is provided that includes receiving at least one request to access at least one resource and receiving at least one composite authentication credential, the composite authentication credential comprising a first credential component and a second credential component. The method further includes determining whether the first credential component is valid, determining whether the second credential component is valid and, in an instance in which it is determined that the first and second credential components are valid, causing access to the at least one resource to be permitted.