Composite Passcode Generation via Biometric and Token Fusion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems rely solely on one-time use passwords (OTPs) for user authentication, which lack robustness and do not leverage available biometric factors from electronic devices, limiting the strength of authentication and alert detection capabilities.
Innovation Solution
Integration of biometric factors with token codes to generate composite passcodes, utilizing electronic devices' input components like cameras, microphones, and accelerometers to enhance authentication, providing a primary channel for token codes and an auxiliary channel for biometric data, which can include alerts and behavioral recognition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authentication systems use only OTP codes, then the system is simple to operate, but the authentication strength is weak
Solution Approach 1:
The patent combines OTP codes with biometric factors into a single composite authentication code. The biometric module captures biometric data (e.g., fingerprint, facial recognition) and merges it with the OTP code generated by the token module, creating a multi-factor authentication code that enhances security while maintaining a unified interface for the user.
Solution Approach 2:
The electronic apparatus integrates multiple authentication functions into a single device. The token application serves as both an OTP generator and a biometric capture interface, allowing the same device to perform traditional token authentication and enhanced biometric authentication without requiring separate systems.
2Reliability
If biometric factors are integrated with token codes, then authentication strength is improved, but the complexity of generating and processing authentication codes increases
Solution Approach 1:
The system automatically captures biometric factors and integrates them with OTP codes without requiring manual user intervention. The biometric module automatically enrolls and captures biometric data, the token module generates OTP codes, and the system automatically combines these elements into composite authentication codes, reducing the operational burden on users despite the increased processing complexity.
Solution Approach 2:
The system performs biometric enrollment and token setup in advance before actual authentication is needed. During enrollment, biometric templates are captured and stored, and during setup, the token application is configured with cryptographic keys. This preliminary preparation reduces the complexity during actual authentication operations, as the system only needs to retrieve and combine pre-processed data.
3Difficulty of detecting and measuring
If multiple authentication channels are used, then detection capability is enhanced, but the system complexity increases
Solution Approach 1:
The authentication system is divided into distinct functional modules: a token module for generating OTP codes, a biometric module for capturing biometric factors, and an integration module for combining these into composite codes. This segmentation allows each module to specialize in its function while maintaining manageable complexity through modular architecture.
Data Source
AI summary
A technique provides authentication codes to authenticate a user to an authentication server. The technique involves generating, by an electronic apparatus (e.g., a smart phone, a tablet, a laptop, etc.), token codes from a cryptographic key. The technique further involves obtaining biometric measurements from a user, and outputting composite passcodes as the authentication codes. The composite passcodes include the token codes and biometric factors based on the biometric measurements. Additionally, the token codes and the biometric factors of the composite passcodes operate as authentication inputs to user authentication operations performed by the authentication server. In some arrangements, the biometric factors are results of facial recognition (e.g., via a camera), voice recognition (e.g., via a microphone), gate recognition (e.g., via an accelerometer), touch recognition and/or typing recognition (e.g., via a touchscreen or keyboard), combinations thereof, etc.