File Sharing Authentication via Biometric Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing file sharing systems lack robust security measures, as they do not adequately authenticate the identity of users other than the intended recipient, potentially allowing unauthorized access and the spread of hoax information, and do not provide control over files once they are shared.

Innovation Solution

A system that requires additional authentication from the file's author or other designated individuals before granting access, using biometric or other forms of authentication to ensure the legitimacy of the user attempting to access the file, and provides additional security settings to control access and verify the file's origin.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional file sharing authentication is used, then ease of operation is improved, but security and reliability are worsened due to lack of robust user identity verification

Engineering Contradiction:

ImprovesecurityVSAvoidease of operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication of the file author's identity before allowing file sharing. The authentication process is initiated in advance by sending a request to the author's device, verifying their identity through biometric or other authentication methods before generating sharing credentials. This preliminary verification ensures security is established before the sharing operation begins.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary authentication service that mediates between the file author, the file sharing system, and the recipient. This intermediary verifies the author's identity independently and issues authenticated credentials, adding a security layer without significantly impacting the user experience. The intermediary acts as a trusted third party that enhances reliability while maintaining operational flow.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If additional authentication processes are implemented, then security is improved, but device complexity and processing time are worsened

Engineering Contradiction:

ImprovesecurityVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is segmented into distinct phases: initial author authentication, credential generation, and recipient verification. Each phase is handled by specialized system components, distributing the complexity across multiple modular elements rather than concentrating it in a single complex authentication module. This segmentation makes the system more manageable and maintainable.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system implements self-service authentication where the author's device performs local biometric verification and the system automatically generates authenticated credentials without requiring manual intervention. The authentication process is automated and self-executing, reducing the operational complexity despite the enhanced security measures. The system serves itself by automatically verifying identities and managing authentication states.

Inventive Principle:

Principle #25Self-service

3Reliability

If biometric authentication is required, then reliability of user identity verification is improved, but ease of operation and processing time are worsened

Engineering Contradiction:

Improveidentity verificationVSAvoidprocessing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

Inventive Principle:

Principle #25Self-service

4Loss of information

If authentication of file author is required, then control over file origin and legitimacy is improved, but device complexity and user workflow are worsened

Engineering Contradiction:

Improvefile origin verificationVSAvoidsystem complexity

Core Design Contradiction:

Loss of informationVSDevice complexity

Solution Approach 1:

The system implements feedback mechanisms where the authentication status and file origin verification results are tracked and communicated throughout the file sharing process. The system receives feedback from the authentication process and uses it to control subsequent file access and sharing operations. This feedback loop ensures file origin integrity while providing systematic control over the complexity through automated decision-making based on authentication outcomes.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11831646B2Authentication for secure file sharing

Publication Date: 2023.11.28 CITRIX SYSTEMS INC

AI summary

This disclosure is directed to embodiments of systems and methods for controlling the access to files or other data. In some of the disclosed embodiments, a computing system receives a request for access to data by a first device operated by a first user, and determines that an identity of a second user associated with the data is to be authenticated to allow access to the data by the first device. The computing system invokes an authentication process to authenticate the identity of the second user based on an input provided to a second device by the second user and, based on that authentication process, determines that the identity of the second user has been authenticated based on the first input. The computing system then provides access to the data by the first device based at least in part on authentication of the identity of the second user. The authentication process may, for example, authenticate the identity of the second user based on a biometric input provided by the second user.