Image-Based Authentication System Preventing Spoofing Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication mechanisms fail to securely verify the identity and location of users, particularly in sensitive transactions like online banking, as they do not provide non-refutable, foolproof, and hack-resistant authentication.
Innovation Solution
A computer-implemented authentication system using a combination of images and one-time equations, where users select and register interlinked images, creating image and index-value matrices, and traverse them in specified sequences to solve a unique one-time equation for authentication, preventing spoofing and cloning attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication mechanisms (PIN, challenge questions, biometrics) are used, then user verification is achieved, but the system cannot prevent spoofing, cloning, or man-in-the-middle attacks
Solution Approach 1:
The system performs preliminary actions by pre-distributing image sets to multiple devices before the authentication challenge occurs. During authentication, the system presents a challenge that requires the user to identify specific images from these pre-distributed sets on different devices. This preliminary distribution creates binding between devices and user knowledge that prevents spoofing and cloning attacks, as the attacker would need to compromise multiple devices simultaneously.
Solution Approach 2:
The patent transitions from traditional one-dimensional authentication (single device, single factor) to multi-dimensional authentication involving multiple devices, image recognition, and spatial relationships. The system uses image matrices arranged in specific patterns and requires users to identify images based on their positions and relationships across different devices, adding dimensional complexity that prevents simple replay or spoofing attacks.
2Reliability
If multiple authentication factors are combined to improve security, then authentication reliability increases, but system complexity increases
Solution Approach 1:
The system uses images as multi-functional elements that serve both as visual identifiers and as carriers of authentication data. The same image set is distributed to multiple devices, and the images are used both for user selection during registration and for verification during authentication. This universal use of images simplifies the system architecture while maintaining high security through multi-factor verification.
Solution Approach 2:
The system creates copies of image sets and distributes them to multiple devices. These copies are identical or related images that the user has previously encountered. During authentication, the system presents challenges that require the user to identify specific images from these copied sets on different devices. This copying approach allows the system to verify user knowledge across multiple devices without requiring complex cryptographic protocols on each device.
3Reliability
If challenge questions related to personal information are used, then authentication is achieved, but the system cannot verify user location or prevent impersonation
Solution Approach 1:
The system performs preliminary action by distributing image sets to specific devices associated with the user before authentication. The user's interaction with these images on specific devices creates a binding between the user's knowledge and the physical devices. During authentication, the system can verify not only the user's identity through image selection but also the location/context through which device is presenting and receiving the challenge, thereby achieving both identity and location verification.
Data Source
Figure 1
Figure 2
Figure 2A
AI summary
A system (1000) and method for providing challenge response solutions to authenticate a user have been provided. The interlinking means (10) of the system (1000) interlinks a plurality of images with unique index values such that each of the images has a unique index value. The registration means (14) enables users to select at least two interlinked images for the purpose of registration. The challenge generation means (16) generates, transmits an authentication challenge of the form of one-time equation. The web server (100), prior to transmitting the one-time equation, computes the value of the equation based on at least the sequence specified by the user. The web server (100) compares the value calculated by the user with the value calculated prior to transmission and authenticates the user only in the event that the value calculated by the user is equivalent to the stored value.