Continuous Sensitive Content Authentication via Biometric Polling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device access control methods lack continuous verification of user identity, making them susceptible to unauthorized access and circumvention, especially for sensitive content, as they do not require re-verification of access credentials over time.
Innovation Solution
Implementing continuous content authentication, where a user is prompted to perform an authentication procedure before accessing sensitive content, and the system continuously polls for verification while the content is displayed, removing access if verification fails, ensuring ongoing certified indicators of verification are maintained.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional device access control methods are used, then initial access can be granted, but continuous verification of user identity is lacking making the system susceptible to unauthorized access
Solution Approach 1:
The patent implements continuous authentication by continuously polling biometric sensors to verify user identity throughout the session. The system maintains an active authentication state by repeatedly checking biometric data rather than performing a single initial verification, ensuring ongoing confirmation that the authorized user remains in possession of the device.
Solution Approach 2:
The system incorporates feedback mechanisms by continuously monitoring biometric sensor data and comparing it against stored authentication credentials. The authentication state is dynamically adjusted based on continuous feedback from biometric verification, allowing the system to detect and respond to unauthorized access attempts in real-time.
2Reliability
If continuous authentication polling is implemented, then unauthorized access can be detected, but the authentication system becomes more complex
Solution Approach 1:
The biometric authentication system leverages the device's existing biometric sensors (fingerprint, facial recognition, iris scanners) that are already present in modern devices. The system uses these self-contained biometric verification capabilities without requiring external authentication infrastructure, reducing overall system complexity while maintaining continuous verification.
Solution Approach 2:
The patent utilizes multi-functional biometric sensors that serve both initial authentication and continuous verification purposes. The same biometric hardware and software infrastructure is used for both granting initial access and maintaining ongoing authentication, eliminating the need for separate verification systems and reducing complexity.
3Reliability
If access control is strengthened for sensitive systems, then security improves, but usability becomes more difficult and frustrating for users
Solution Approach 1:
The system performs preliminary biometric authentication before granting access to sensitive content. By verifying the user's identity upfront and establishing an authenticated session, the system eliminates the need for repeated authentication prompts during normal usage, improving ease of operation while maintaining security.
Solution Approach 2:
The continuous authentication system performs periodic biometric verification at predetermined intervals during the session. This periodic checking mechanism balances security requirements with user convenience by not requiring constant verification while still detecting unauthorized access attempts, making the system more usable than continuous real-time verification would allow.
Data Source
AI summary
Continuous sensitive content authentication is described. In one example, a request to open content, such as a photograph, spreadsheet, or text-based document, among other types of content, is received. Based on a sensitivity level or access profile rule associated with the content, an individual can be prompted to perform an authentication procedure before the content is displayed. The content can be displayed in response to a verification using the authentication procedure or removed (or not displayed) in response to a rejection using the authentication procedure. Additionally, the authentication procedure can be continuously polled to confirm the verification while the content is displayed. While the content is being displayed, the content can be removed from display at any time if the authentication procedure no longer produces the verification result. In some cases, the content can also be deleted after a rejection is detected using the authentication procedure.