Fingerprint Spoof Detection Using Context-Aware Multi-Sensor Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sensor-based authentication systems, particularly fingerprint sensors, are vulnerable to spoofing attacks using false images or instruments, which current spoofing detection algorithms struggle to detect effectively.
Innovation Solution
Implement a multi-sensor authentication system that includes a fingerprint sensor and additional sensors like IMU, accelerometer, gyroscope, ambient light sensor, and proximity sensor to analyze fingerprint and context data, providing additional verification to confirm the presence of a real user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single fingerprint sensor is used for authentication, then the device complexity is low, but the reliability of authentication is insufficient to detect sophisticated spoofing attacks
Solution Approach 1:
The authentication system is segmented into multiple independent sensor components (fingerprint sensor, ambient light sensor, proximity sensor, IMU, accelerometer, gyroscope, face detection sensor, touchscreen). Each sensor independently collects specific data about the authentication attempt, and the processor integrates these segmented data sources to make a comprehensive authentication decision, thereby improving reliability without requiring any single sensor to be overly complex
Solution Approach 2:
Multiple sensor data streams are merged and integrated by the processor to create a unified authentication assessment. The fingerprint sensor data, ambient light conditions, proximity information, motion data from IMU/accelerometer/gyroscope, and face detection results are combined to provide a holistic view of the authentication attempt, enabling detection of sophisticated spoofing attacks that would be invisible to any single sensor
2Reliability
If multiple sensors are activated continuously to improve authentication reliability, then the detection capability improves, but the power consumption increases
Solution Approach 1:
The sensor activation system transitions from static continuous operation to dynamic conditional activation. The processor dynamically adjusts which sensors are active based on the authentication context and fingerprint detection scores. Sensors are activated only when needed according to the authentication flow, improving reliability when required while minimizing power consumption during normal operation
Solution Approach 2:
The system changes the operational parameters of the sensor system by adjusting activation states based on fingerprint detection scores. When the fingerprint score falls within a particular range indicating uncertainty, the system changes the parameter of sensor activation to include additional sensors. This parameter change allows the system to adapt its power consumption to the actual authentication needs, maintaining reliability without continuous full-power operation
3Difficulty of detecting and measuring
If additional sensors are used to detect spoofing attacks, then the spoof detection capability improves, but the device complexity increases
Solution Approach 1:
Existing sensors in the device are made multi-functional for authentication purposes. The ambient light sensor serves both its original lighting function and provides environmental context for authentication. The proximity sensor detects both proximity and potential spoofing attempts. The IMU, accelerometer, and gyroscope provide motion context that can indicate genuine user interaction versus spoofing. This multi-functionality enables enhanced spoofing detection without adding dedicated specialized sensors for each function
Data Source
AI summary
Implementations relate to user authentication and spoof detection for a device using a fingerprint sensor and additional device sensors. In some implementations, a computer-implemented method includes analyzing a fingerprint image from a fingerprint sensor of a device, to determine fingerprint detection score(s). If these scores meet fingerprint validity thresholds by greater than a respective particular range, a positive authentication indication is provided. Respective sensor data is obtained from additional sensors of the device, such as an inertial measurement unit, ambient light sensor, proximity sensor, touchscreen, etc. If one or more fingerprint detection scores meet their fingerprint validity thresholds within the respective particular range, respective context scores are determined for the sensor data of each additional sensor. If the context scores meet respective context validity thresholds, the positive authentication indication is provided, or otherwise a negative authentication indication is provided.