Non-Tactile Vascular Biometric Authentication Gateway
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current biometric authentication systems face issues such as false positives/negatives, vulnerability to theft or copying, and lack of user verification during forcible entry, leading to security concerns and data breaches.
Innovation Solution
A non-tactile biometric authentication system using Vascular Recognition Technology (VRT) scans veins in a user's hand, with the data processed through an intermediary server to authenticate users, ensuring secure access without physical contact and reducing the risk of data breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional biometric authentication systems (fingerprint scanners, retina scanners) are used, then user identification capability is provided, but false positives/negatives occur and security vulnerabilities exist
Solution Approach 1:
The authentication process is divided into multiple independent verification steps: initial biometric scan, liveness detection through blink/eye movement verification, and secondary authentication factors. This segmentation allows each step to independently validate specific aspects of user identity, reducing false positives and negatives by requiring multiple conditions to be simultaneously satisfied.
Solution Approach 2:
The system performs preliminary liveness detection by requiring the user to blink or move their eyes before granting full access. This preliminary action verifies that the subject is a living human being rather than a static image or replica, preventing spoofing attacks and reducing false authentication events.
2Ease of manufacture
If non-biometric authentication systems (username/password, digital tokens) are used, then implementation simplicity is achieved, but usernames and passwords can be determined and physical devices can be stolen or copied
Solution Approach 1:
The system introduces an intermediary biometric verification layer between the user and the authentication system. Instead of directly relying on passwords or physical tokens that can be stolen, the system uses unique biological characteristics (eye patterns, facial structure) that cannot be copied or transferred, while still maintaining user-friendly access methods.
Solution Approach 2:
The patent replaces mechanical authentication methods (physical key fobs, smart cards, written passwords) with optical biometric verification. By substituting the mechanical interaction of swiping a card or typing a password with optical scanning of unique biological features, the system eliminates the possibility of stealing or copying physical authentication devices while maintaining ease of use.
3Reliability
If current biometric scanners are used, then user identification is enabled, but there is no verification that the user is living, allowing forcible entry
Solution Approach 1:
The system performs preliminary liveness detection by requiring the user to blink or move their eyes before granting full access. This preliminary action verifies that the subject is a living human being rather than a static image or replica, preventing spoofing attacks and reducing false authentication events.
Solution Approach 2:
The system provides real-time feedback during the authentication process by monitoring eye movements and blink responses. The system adjusts the authentication sequence based on detected responses, requiring additional verification steps if liveness is not confirmed, thereby preventing unauthorized access while maintaining smooth authentication for legitimate users.
Data Source
AI summary
Systems and methods are provided for authenticating a user. The method includes accepting, using a graphical user interface coupled to an electronic computing device, a login request from the user to access a remote server, wherein the login request includes biometric data of the user, using a non-tactile biometric scanner, and comparing, using a processor on an intermediary server, the biometric data of the user with biometric data stored in memory of the intermediary server, wherein the biometric data stored in the memory is associated with one or more known users. The method further includes determining, based on the comparison, whether an identity of the user is authentic, and if the identity of the user is authenticated, relaying the login request to the remote server.


