Multimodal Authentication Scoring for Adaptive Security Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems lack flexibility in adjusting security levels based on the purpose and environment, leading to reduced convenience and accuracy due to excessive strictness or environmental interference.
Innovation Solution
An authentication system that uses a combination of face and voice authentication, along with position verification, calculates a comprehensive score to determine the level of security required, allowing for flexible operation permissions and additional authentication when necessary, thereby enhancing convenience and accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric authentication systems are used to provide convenient and contactless authentication, then authentication convenience and hygiene are improved, but vulnerability to deepfake attacks and spoofing increases
Solution Approach 1:
The patent introduces multiple intermediary layers between the user and the authentication system: liveness detection algorithms that analyze real-time physiological signals, attention verification mechanisms that confirm user awareness, and multi-modal biometric fusion that combines different biometric traits. These intermediaries act as mediators to distinguish genuine users from deepfake attacks while maintaining convenient contactless authentication.
Solution Approach 2:
The system dynamically changes authentication parameters based on risk assessment: adjusting the complexity of liveness detection challenges, modifying the number of authentication factors required, and adapting verification thresholds based on the detected threat level. This allows the system to maintain ease of use for legitimate users while increasing security parameters when deepfake attacks are detected.
2Reliability
If multi-factor authentication is implemented to enhance security, then authentication reliability is improved, but system complexity and user burden increase
Solution Approach 1:
The patent implements dynamic multi-factor authentication where the number and type of authentication factors are adjusted in real-time based on risk assessment. For low-risk scenarios, only essential factors are required, while high-risk scenarios trigger additional verification steps. This dynamic approach enhances security when needed while minimizing complexity for routine authentications.
Solution Approach 2:
The system performs preliminary risk assessment and liveness detection before requiring full multi-factor authentication. By pre-evaluating the authentication request and detecting potential spoofing attempts early, the system can determine whether simplified or full multi-factor authentication is necessary, reducing unnecessary complexity for legitimate users.
3Reliability
If deepfake detection technologies are deployed to improve security, then vulnerability to spoofing is reduced, but processing time and computational resources increase
Solution Approach 1:
The patent implements partial deepfake detection by applying detection algorithms selectively based on risk indicators. Instead of running full-scale detection on every authentication attempt, the system performs lightweight initial screening and only activates comprehensive deepfake detection when suspicious patterns are detected. This partial action approach maintains security while minimizing processing time for legitimate authentications.
Solution Approach 2:
The system employs periodic liveness detection challenges during the authentication process, inserting verification steps at strategic intervals rather than continuously. This periodic approach maintains deepfake detection capability while allowing faster processing during non-challenge periods, balancing security with authentication speed.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In order to enhance convenience in an authentication system using a plurality of types of authentication, a terminal device 10 transmits authentication data including a face image and a voice of a user, the position of the terminal device 10, to the server device 20. The server device 20 uses the received authentication data to perform individual authentications including face authentication, voiceprint authentication, position adequacy verification. The server device 20 applies adds up weighted scores of the individual authentications to calculate a comprehensive score. When the comprehensive score exceeds a first threshold, a high security operation is permitted. When the comprehensive score is not higher than the first threshold and exceeds a second threshold, a low security operation is permitted. When performing additional authentication using additional authentication data received from the terminal device 10, the comprehensive score further includes the additional authentication score, and the high security operation is permitted when the comprehensive score exceeds the first threshold.