Fingerprint Authentication Using Scan Order and Rotation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional password-based authentication methods are vulnerable to attacks like shoulder surfing, and biometric authentication lacks secrecy and revocability, making them inadequate for secure access control in electronic devices.
Innovation Solution
Implementing a multi-factor authentication system using digital fingerprint scans that requires matching both the fingerprint patterns and their registered order, as well as angular rotation offsets, to grant access, which are stored as secrets, preventing unauthorized access even if a fingerprint is replicated.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is used, then security against shoulder surfing is improved, but revocability and secrecy are lost
Solution Approach 1:
The authentication system segments the biometric authentication process into multiple independent factors: fingerprint pattern matching, scan order verification, and angular rotation offset validation. This segmentation allows the system to maintain security while adding revocability through the non-biometric elements (order and rotation) that can be changed without affecting the user's physical characteristics.
2Ease of operation
If traditional password authentication is used, then ease of operation is improved, but vulnerability to shoulder surfing attacks increases
Solution Approach 1:
The system captures and analyzes the temporal and spatial characteristics of the user's natural finger movement pattern as they place their finger on the sensor. By copying and verifying these movement characteristics (scan order and rotation sequence), the system creates an authentication mechanism that is as easy to use as traditional passwords but resistant to shoulder surfing, since observers cannot replicate the dynamic movement pattern.
3Reliability
If fingerprint authentication is used, then security is improved, but susceptibility to fingerprint replication attacks increases
Solution Approach 1:
The system adds temporal and angular dimensions to the traditional fingerprint authentication process. Instead of only verifying the static fingerprint pattern, the system also verifies the sequence in which fingerprint scans occur and the angular rotation offsets between consecutive scans. This multi-dimensional approach ensures that even if an attacker replicates the fingerprint pattern, they cannot replicate the dynamic temporal and angular characteristics of the legitimate user's authentication behavior.
Data Source
AI summary
An electronic device includes a fingerprint detector sensor, a processor, and a memory coupled to the processor. The memory stores computer readable program code that when executed by the processor causes the processor to perform operations. The operations include receiving a sequence of digital fingerprint scans from the fingerprint detector sensor. The operations further include selectively allowing electronic access by a user to an application processed by the processor based on determining a combination of whether the digital fingerprint scans match a defined number of digital fingerprints stored in a data structure residing in the memory and whether an order of the digital fingerprint scans in the sequence matches a registered order of the defined number of digital fingerprints.