Dynamic Authentication System for Real-Time Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for online transactions are inadequate in verifying the true identity of users, as they rely on biographical data alone, which can be stolen, and require physical presence for registration, making them inconvenient and vulnerable to identity theft, while also failing to ensure compliance with regulations like Anti-Money Laundering and Counter Terrorism Financing.
Innovation Solution
A dynamic authentication system that captures both biographical and biometric data, including voice and facial recognition, using a pervasive computing device to perform real-time 'aliveness' and anti-spoofing tests, and updates user credentials in real-time to ensure accuracy and integrity, eliminating the need for physical presence and multiple passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biographical data alone is used for authentication, then the authentication process is simple, but the system becomes vulnerable to identity theft and cannot verify true user identity
Solution Approach 1:
The patent combines multiple authentication factors (biographical data, biometric data, device data, behavioral data) into a unified authentication system. This merging of diverse data sources creates a comprehensive authentication mechanism that verifies true user identity while maintaining operational simplicity through integrated processing.
Solution Approach 2:
The authentication system uses composite credential verification by combining different types of data (biographical, biometric, device, behavioral) similar to how composite materials combine different substances. This composite approach creates a robust authentication mechanism where the strength comes from the combination of multiple data types rather than any single source.
2Reliability
If physical presence is required for registration, then identity verification is more secure, but user convenience is reduced and accessibility is limited
Solution Approach 1:
The patent replaces the mechanical requirement of physical presence with electronic and acoustic signal processing. Voice biometrics and device data capture allow remote authentication by substituting physical verification with electronic verification methods that maintain security while enabling remote access.
Solution Approach 2:
The system introduces device data and behavioral data as intermediary elements that bridge the gap between remote interaction and identity verification. These intermediaries provide verification signals that confirm user identity without requiring physical presence, acting as mediators between the user and the authentication system.
3Reliability
If multiple passwords are required for different services, then security is improved, but user burden increases and error rates rise
Solution Approach 1:
The patent creates a universal authentication system that works across multiple services and devices. The biometric and behavioral credentials serve multiple functions and are applicable across different platforms, eliminating the need for service-specific passwords while maintaining security through the multi-functional nature of the authentication mechanism.
Solution Approach 2:
The system enables self-service authentication where users automatically provide verification through their voice patterns and device usage behavior. This eliminates the manual process of remembering and entering multiple passwords, as the system automatically verifies identity through ongoing interaction patterns without user intervention.
4Device complexity
If static authentication credentials are used, then the system is simpler to implement, but the credentials become outdated and less secure over time
Solution Approach 1:
The patent implements dynamic authentication credentials that continuously adapt based on user behavior patterns and device data. Instead of static credentials, the system uses evolving biometric and behavioral profiles that automatically update to reflect current user characteristics, maintaining accuracy and security without manual intervention.
Solution Approach 2:
The system incorporates feedback loops where authentication data is continuously collected and used to refine credential profiles. This feedback mechanism ensures credentials remain accurate and up-to-date by automatically adjusting based on ongoing verification data, maintaining reliability without increasing system complexity.
Data Source
AI summary
A system, method and a computer-readable medium for authenticating a user in a live manner in non-face-to-face transactions, including a user downloading an authentication application from a server to a pervasive computing device, and after downloading the application, having an icon residing on the display of the device. When the authentication application is activated by the user, biographical and multi-biometric information of the user is requested by the application, and subsequently submitted to an authentication engine residing in a secure network cloud. The authentication process further includes, verifying by the authentication engine all of the requested information, compliance with government regulations such as CFT/AML, and the 4th Data Protection Principle. Users have the ability to check their biographical data through a system called, RITE, forming part of this application. Memorised IDs and passwords are not required. The aliveness of the user is verified at each transaction request.