FingerPIN Authentication Integrating PIN and Biometrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, including knowledge-based, possession-based, and biometric-based systems, face limitations such as susceptibility to credential theft, device dependency, and privacy concerns, leading to a need for more secure and efficient multi-factor authentication solutions.
Innovation Solution
The FingerPIN method integrates fingerprints and personal identification numbers (PINs) using a confidential mapping, allowing users to simultaneously prove knowledge of the PIN and biometric validity by scanning fingerprints in a sequence determined by the PIN, reducing the number of steps and devices required for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional multi-factor authentication is used (combining PIN and fingerprints sequentially), then security is improved, but authentication time and complexity increase
Solution Approach 1:
The patent combines multiple authentication factors (PIN knowledge-based factor and fingerprint biometric factor) into a single integrated authentication event. The system processes both the PIN verification and fingerprint verification simultaneously rather than sequentially, merging what were previously separate authentication steps into one unified process that completes in a single user interaction.
Solution Approach 2:
The system performs preliminary setup during enrollment where the user's PIN is mapped to specific fingerprint positions. This pre-established mapping allows the authentication system to verify both factors simultaneously during the actual authentication event, eliminating the need for sequential processing and reducing authentication time.
2Ease of operation
If fingerprint authentication alone is used, then convenience is improved, but security against compromised biometrics worsens
Solution Approach 1:
The patent creates a composite authentication credential that combines two different authentication factor types (knowledge-based PIN and biometric fingerprint) into a single integrated credential. This composite credential provides both the convenience of biometric authentication and the security of knowledge-based authentication, as both factors must be verified simultaneously for successful authentication.
3Ease of operation
If knowledge-based authentication (passwords/PINs) is used, then ease of operation is improved, but susceptibility to credential theft increases
Solution Approach 1:
The system merges the knowledge-based PIN factor with the biometric fingerprint factor in a single authentication event. This combination means that even if the PIN is compromised through social engineering or shoulder surfing, the attacker cannot authenticate without also providing the correct fingerprint, thereby mitigating the susceptibility to credential theft while maintaining ease of operation.
Data Source
AI summary
A method of authenticating a user that includes initializing the multi-factor authentication system based on an input; presenting a challenge requesting the user to enter a specific authenticator of a sequence of authenticators stored in the multi-factor authentication system, where the stored sequence of authenticators represents a combination of a plurality of authentication factors; receiving an authenticator from the user in response to the challenge; verifying identity of the user by determining whether the received authenticator matches the specific authenticator requested by the challenge; and granting the access based on a determination that the received authenticator matches the specific authenticator requested, or denying the access based on a determination that the received authenticator does not match the specific authenticator requested.