Non-Intrusive Privacy-Preserving Authenticator for Continuous Biometric Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods face challenges in providing non-intrusive, privacy-preserving, and adaptive authentication solutions that effectively manage risk based on user environment and location, while ensuring strong security and usability, especially in scenarios where explicit user interaction is not feasible and location data privacy is a concern.
Innovation Solution
The implementation of a non-intrusive privacy-preserving authenticator (NIPPA) that uses a combination of non-intrusive authentication mechanisms, such as location and user behavior sensors, to continuously assess the assurance level of user possession without disclosing personal data, and dynamically selects authentication techniques based on risk assessment and location awareness, ensuring privacy and adaptability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit user interaction is required for authentication, then security is improved, but usability and user experience deteriorate due to increased friction
Solution Approach 1:
The system performs authentication automatically without requiring explicit user interaction. Sensors continuously monitor biometric data (facial features, speech patterns, lip movements) and the system self-authenticates transactions based on predefined assurance thresholds, eliminating the need for users to manually initiate authentication while maintaining security
Solution Approach 2:
The patent replaces manual authentication actions (user pressing buttons or confirming transactions) with automated sensor-based detection. Optical sensors, microphones, and cameras continuously capture biometric data and the system automatically processes this information to determine authentication status, substituting mechanical user actions with automated sensing and processing
2Adaptability or versatility
If location data is collected for risk assessment, then authentication adaptability is improved, but user privacy deteriorates due to potential disclosure of personal information
Solution Approach 1:
The system extracts only the necessary location information needed for risk assessment without capturing or storing detailed personal data. Location data is processed to determine risk levels and authentication requirements, then the extracted insights are used immediately without retaining the underlying personal information that could compromise privacy
Solution Approach 2:
The patent introduces an intermediary processing layer that decouples location data collection from privacy-sensitive storage. The system collects location information, processes it through risk assessment algorithms to generate authentication decisions, and never stores the raw location data in a manner that could identify or track user movements, thus protecting privacy while maintaining adaptability
3Reliability
If continuous authentication monitoring is implemented, then security assurance is improved, but system complexity and computational resources worsen
Solution Approach 1:
The system implements continuous authentication monitoring by constantly capturing biometric data through sensors during device usage. Facial recognition, speech pattern analysis, and lip movement detection operate continuously or periodically to maintain an ongoing assurance of user identity, replacing discrete authentication events with continuous verification
Solution Approach 2:
The patent employs multi-functional sensors that serve both primary device functions and authentication monitoring. Cameras used for display or other purposes also capture facial features for authentication; microphones used for audio output also record speech patterns; this consolidates hardware requirements and reduces system complexity despite continuous monitoring demands
4Ease of operation
If non-intrusive authentication is used, then user experience is improved, but measurement precision of user identity deteriorates
Solution Approach 1:
The system merges multiple biometric modalities (facial recognition, speech pattern analysis, lip movement detection) to achieve accurate identity verification without intrusive user actions. By combining these different sensing approaches, the system maintains high measurement precision while keeping the user experience smooth and non-intrusive
Solution Approach 2:
The patent uses a composite authentication approach that combines multiple sensing modalities and data sources to create a robust verification system. Rather than relying on a single sensor or biometric trait, the system integrates information from facial cameras, microphones, and lip movement detectors to achieve accurate identity measurement through composite analysis
Data Source
AI summary
A system, apparatus, method, and machine readable medium are described for performing eye tracking during authentication. For example, one embodiment of a method comprises: receiving a request to authenticate a user; presenting one or more screen layouts to the user; capturing a sequence of images which include the user's eyes as the one or more screen layouts are displayed; and (a) performing eye movement detection across the sequence of images to identify a correlation between motion of the user's eyes as the one or more screen layouts are presented and an expected motion of the user's eyes as the one or more screen layouts are presented and/or (b) measuring the eye's pupil size to identify a correlation between the effective light intensity of the screen and its effect on the user's eye pupil size; capturing audio of the user's voice; and performing voice recognition techniques to determine a correlation between the captured audio of the user's voice and one or more voice prints.