Dynamic Video Stream Authentication for Online Identity Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional security mechanisms for online transactions, such as Captchas, are flawed and can be easily exploited by hackers, as they rely on predictable keyboard entry and formulaic execution, making them vulnerable to brute force attacks and keyloggers, and lack time-sensitivity and computational intensity to deter hacking.

Innovation Solution

A security mechanism that uses variable multiplexing and rate-independent interlacing of images with non-formulaic graphics, transmitted as framebuffer data without contextual information, making it computationally difficult for computers to analyze while allowing humans to identify the data, and requiring user interaction through dynamic image recognition.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional security mechanisms like Captchas are used, then user authentication is provided, but they are vulnerable to brute force attacks and keyloggers

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidvulnerability to hacking

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies dynamics by transitioning from static Captcha images to dynamic video stream authentication. The security mechanism uses real-time video streaming with continuous motion and changing visual content, making it resistant to pre-capture and brute force attacks. The video stream requires continuous human visual processing, preventing automated hacking attempts.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent replaces the mechanical keyboard entry system with a visual-based authentication system. Instead of requiring users to type Captcha codes, the system uses video stream analysis where users respond to visual challenges through their natural viewing behavior, eliminating the vulnerability to keyloggers that capture keyboard inputs.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If keyboard entry is used for security verification, then user input is collected, but it is easily accessed through keyloggers

Engineering Contradiction:

Improveuser input collectionVSAvoidkeylogger vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a video stream as an intermediary between the user and the authentication system. The video stream acts as a mediator that translates user visual attention and response behavior into authentication data, bypassing the need for direct keyboard input and the associated keylogger vulnerability.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If Captchas are placed at a specific location on screen, then user interaction is simplified, but hackers can easily identify and capture the entry box

Engineering Contradiction:

Improveentry box accessibilityVSAvoidpredictable location vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Inventive Principle:

Principle #15Dynamics

4Extent of automation

If text-based Captchas are used, then heuristics can be implemented, but offshore labor can analyze and respond to the textual content

Engineering Contradiction:

Improveautomated heuristic processingVSAvoidoffshore labor exploitation

Core Design Contradiction:

Extent of automationVSObject-affected harmful factors

Solution Approach 1:

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

5Reliability

If security mechanisms are made computationally intensive, then hacking is discouraged, but user experience may be degraded

Engineering Contradiction:

Improvesecurity strengthVSAvoiduser interaction complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent applies segmentation by dividing the authentication process into distinct phases: video stream presentation, user visual response, and server-side verification. This segmentation allows the system to present simple visual challenges to users while performing computationally intensive analysis on the server side, maintaining both user-friendly interaction and strong security.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS9256901B2Methods and system for enabling communication of identity information during online transaction

Publication Date: 2016.02.09 CITRIX SYSTEMS INC

AI summary

Methods and system for enabling communication of identity information for an online transaction includes detecting a request to enter the identity information. In response, a first and a second image with a detectable trait are identified for displaying on a receiver device. A first and second delta-based analyzers are executed to monitor changes of the first and the second images. The changes of the images are combined. The changes of the images are adjustable to respective first and second display settings. The combined changes of the images are transmitted to a receiver device for display. A query regarding the detectable trait is transmitted to the receiver device and a response from a user is received. User input of the identity information is enabled at the receiver device when the response to the query is determined to be successful.