Security Gesture Authentication for Biometric Spoofing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Biometric authentication methods, such as facial recognition, are vulnerable to spoofing by photographs or videos, posing a significant security risk, especially in Self-Service Terminals like ATMs, leading to potential monetary losses.

Innovation Solution

Implementing a security gesture authentication system that combines facial recognition with user-defined gestures, using multiple biometric factors including background and image authentication, to enhance security and prevent spoofing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If facial recognition authentication is used, then authentication speed and ease of operation are improved, but security reliability deteriorates due to vulnerability to photograph and video spoofing

Engineering Contradiction:
Improveauthentication easeVSAvoidauthentication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication process is segmented into multiple independent verification stages: initial facial recognition authentication followed by a second gesture-based authentication. This segmentation ensures that even if one method is compromised, the other remains intact to prevent unauthorized access.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transitions from two-dimensional static facial image recognition to three-dimensional dynamic gesture recognition. By requiring users to perform specific hand gestures captured through depth-sensing technology, the system adds a spatial dimension that photographs and videos cannot replicate.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Ease of operation

If traditional biometric authentication is used, then ease of operation is improved, but security against spoofing deteriorates

Engineering Contradiction:
Improveauthentication convenienceVSAvoidspoofing vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication through facial recognition before requiring the second gesture-based verification. This preliminary action establishes a baseline security level while maintaining user convenience, and only triggers additional verification when needed.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The gesture recognition system acts as an intermediary layer between the user and the authenticated resource. Rather than directly accepting facial images, the system requires an additional gesture-mediated verification step that photographs and videos cannot perform.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If multiple authentication factors are required, then security reliability is improved, but device complexity and authentication time increase

Engineering Contradiction:
Improveauthentication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is designed to perform multiple functions through integrated processing: facial recognition, gesture detection, and authentication decision-making are all handled within a unified system architecture, reducing overall complexity despite the multi-factor approach.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system maintains continuous authentication monitoring throughout the user interaction. Rather than discrete separate steps, the authentication process flows continuously from facial recognition through gesture verification, minimizing interruptions and reducing perceived complexity for the user.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentEP3493088B1Security gesture authentication
Publication Date: 2022.09.21 NCR VOYIX CORP
  • EP3493088B1 patent drawingFigure 1A
  • EP3493088B1 patent drawingFigure 1B
  • EP3493088B1 patent drawingFigure 1C

AI summary

Real-time facial recognition is augmented with an additional second biometric-based security gesture authentication. Facial biometric authentication is performed on a user for access to a resource. When facial authentication is successful, an image or a video of the user is captured performing a security gesture. Pixel values from the image or video are compared against expected pixel values for the security gesture and when the comparison is within a threshold, the user is provided access to the resource.