Multi-Sensor User Authentication With Time-Window Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices performing user authentication using biometric data do not consider the time differences between data acquisition points, leading to potential reliability issues and vulnerability to spoofing attacks.
Innovation Solution
The electronic device identifies a reference device among multiple sensors and determines if the time points of authentication data acquisition from other sensors fall within a threshold time range of the reference device's acquisition time, enhancing authentication security by considering time point differences.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the electronic device authenticates the user using biometric data acquired from multiple sensors according to a specified sequence without considering time differences, then the authentication process is simple and fast, but the reliability of user authentication deteriorates and the device becomes vulnerable to spoofing attacks
Solution Approach 1:
The patent applies preliminary action by recording the time points of biometric data acquisition from multiple sensors before performing authentication. The processor stores acquisition time information along with the biometric data, and then uses this pre-recorded time information to verify whether the data was collected within an appropriate time window, thereby preventing spoofing attacks without adding complex real-time verification mechanisms.
Solution Approach 2:
The patent implements feedback by using the acquired time point information to determine whether to accept the biometric data for authentication. The processor compares the recorded acquisition time with the current time to provide feedback on whether the data is still valid for authentication purposes, thereby enhancing reliability while maintaining a relatively simple authentication flow.
2Reliability
If the electronic device considers the difference between time points of acquiring biometric data from multiple sensors, then the reliability of user authentication is improved, but the authentication process becomes more complex
Solution Approach 1:
The patent applies partial action by selectively verifying only the time difference aspect of biometric data without implementing comprehensive multi-factor authentication or complex temporal analysis. The processor checks whether acquisition time points fall within a predetermined time window, which provides sufficient security enhancement without requiring excessive processing time or complex algorithms.
3Object-affected harmful factors
If the electronic device uses multiple sensors to acquire biometric data, then the security against spoofing attacks is enhanced, but the device complexity increases
Solution Approach 1:
The patent uses time point information as an intermediary element to connect multiple sensors and verify their authenticity. Instead of directly complexly integrating multiple sensors, the processor uses the acquisition time stamps as a mediator to determine whether the biometric data from different sensors was collected in a reasonable time sequence, thereby enhancing spoofing resistance without proportionally increasing device complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An electronic device according to various embodiments of the present disclosure includes: at least one sensor; a communication circuit; at least one processor operably coupled with the at least one sensor and the communication circuit; and at least one memory operably coupled with the at least one processor, wherein the memory may store instructions which, when executed, cause the processor to: receive a request for authenticating a user of the electronic device using a designated authentication method; identify whether a device set as a reference device is a first device among the first device and a second device which are included in the at least one sensor and the communication circuit, and are capable of generating authentication data required for using the designated authentication method to authenticate the user; generate data, when 1-1 authentication data for authenticating the user is acquired from the first device, indicating a 1-1 time point at which the processor acquired the 1-1 authentication data; generate data, when 2-1 authentication data for authenticating the user is acquired from the second device, indicating a 2-1 time point at which the processor acquired the 2-1 authentication data; confirm, based on the data indicating the 1-1 time point and the data indicating the 2-1 time point, whether the 2-1 time point is within a threshold time range based on the 1-1 time point; and authenticate the user using the 1-1 authentication data and the 2-1 authentication data based on whether the 2-1 time point is within the threshold time range based on the 1-1 time point.