Identity Verification via Sensor Event Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user identity verification methods, such as username and password combinations, fail to ensure that only authorized individuals access systems, as they do not account for the physical presence or context of the user, making them vulnerable to unauthorized access.
Innovation Solution
A method that utilizes a chain of events detected by sensors in the user's environment to verify identity, where each event is timestamped and weighed for importance, and compared to a target chain of events to determine if the access request is legitimate, intercepting and blocking requests that deviate beyond a threshold from the expected sequence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional username and password matching is used for user identification, then the system is simple to operate, but it fails to verify whether an authorized person rather than a substitute is providing the input, making it vulnerable to unauthorized access
Solution Approach 1:
The system performs preliminary actions by capturing sensor data and generating a chain of events representing the user's normal behavior pattern before the actual access request occurs. This preliminary chain of events serves as a baseline for comparison, allowing the system to verify identity reliability without adding complex real-time verification mechanisms during the access moment.
Solution Approach 2:
The patent introduces an intermediary chain of events derived from sensor data that mediates between the simple username/password input and the reliability verification need. This intermediary layer analyzes behavioral patterns and environmental context without requiring direct complex interactions between the user and the verification system.
2Reliability
If physical objects or biometrics are used for authentication, then user identity verification reliability improves, but these measures may be circumvented by stealing ID cards or forging fingerprints
Solution Approach 1:
The system transitions from static authentication (fixed credentials like ID cards or fingerprints) to dynamic authentication based on chains of events that capture user behavior patterns over time. This dynamic approach adapts to the user's normal behavior, making it difficult to circumvent since stolen credentials alone cannot replicate the dynamic behavioral chain.
Solution Approach 2:
The system continuously monitors and captures sensor data to build and update the user's chain of events, creating a feedback loop that reinforces the authentication model. This ongoing feedback mechanism allows the system to learn and adapt to legitimate user behavior, making it resistant to circumvention attempts while maintaining high reliability.
3Reliability
If a chain of events with multiple sensors and complex verification is implemented, then unauthorized access is prevented, but the system complexity increases
Solution Approach 1:
The patent employs a multi-functional sensor system where sensors serve multiple purposes: capturing environmental data, tracking user behavior, and generating the chain of events. This universal approach allows the system to achieve high security reliability without proportionally increasing complexity, as the same infrastructure supports multiple security functions.
Solution Approach 2:
The system performs self-verification by automatically comparing the current access request against the pre-established chain of events without requiring manual intervention. The sensors and processing algorithms work autonomously to verify or reject access, reducing the operational complexity despite the sophisticated verification methodology.
Data Source
AI summary
Disclosed herein are systems and method for verifying user identity. In one exemplary aspect, a method comprises receiving sensor data from at least one sensor and parsing the sensor data to determine a plurality of identifiers of a user authorized to access data via a computing device. The method comprises generating, for each identifier, an event including the user. The method comprises intercepting, on the computing device, a data access request including an identifier of the user. The method comprises verifying whether the data access request is from the user authorized to access data by generating a chain of events including the user for a period of time preceding the data access request, determining a deviation of the chain of events from a target chain of events, and in response to determining the deviation is less than a threshold deviation value, granting the data access request.