Passive Patient Authentication for Continuous Medical Software Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for authenticating users of medical device software on display devices require periodic active interaction, which is burdensome and can lead to reduced user engagement in monitoring their health conditions, and consume excessive resources.
Innovation Solution
Implement passive continuous authentication using sensor data, pre-processed data, and environmental information to verify the identity of the user without explicit interaction, reducing the need for periodic authentication prompts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If periodic active authentication is implemented, then security is improved, but user engagement and ease of operation deteriorate due to burdensome periodic prompts
Solution Approach 1:
The system performs authentication automatically using sensor data without requiring user action. The mobile device continuously collects biometric data from sensors and compares it against stored templates to authenticate the user passively, eliminating the need for manual login prompts while maintaining security.
Solution Approach 2:
The patent replaces manual authentication mechanisms (typing passwords, fingerprint scanning) with automatic sensor-based biometric authentication. Accelerometers, gyroscopes, and other device sensors continuously capture user behavior patterns and physiological data to perform authentication in the background without mechanical user interaction.
2Reliability
If periodic active authentication is implemented, then authentication reliability is improved, but resource consumption worsens due to excessive processing
Solution Approach 1:
Instead of continuous heavy processing, the system uses periodic authentication checks triggered by specific events (app launches, background transitions) combined with continuous lightweight sensor data collection. This reduces computational load while maintaining authentication reliability through event-driven processing cycles.
Solution Approach 2:
The system performs partial authentication continuously using lightweight sensor data comparison, and only performs full authentication processing when triggered by specific events. This partial continuous monitoring reduces overall computational requirements while maintaining security through selective full authentication cycles.
3Extent of automation
If continuous sensor data collection is implemented, then passive authentication capability is improved, but device complexity increases
Solution Approach 1:
The patent leverages existing multi-functional sensors in mobile devices (accelerometers, gyroscopes, proximity sensors) for authentication purposes. These sensors originally serve other device functions, and the authentication system repurposes their data without requiring dedicated authentication hardware, thereby minimizing added complexity.
Solution Approach 2:
The system introduces a lightweight authentication manager component that acts as an intermediary between existing sensor subsystems and the operating system. This manager consolidates sensor data collection and processing logic in a single module, preventing complexity proliferation across the device architecture while enabling passive authentication.
Data Source
AI summary
Systems, techniques, and devices for performing passive continuous authentication of a user of display device are disclosed. In certain embodiments, the techniques include obtaining first information including at least one of (i) non-analyte sensor data from one or more sensors of a display device or (ii) analyte sensor data from an analyte sensor system. The techniques further include authenticating an identity of the user of the display device at a first point in time and based on the first information. The techniques further include allowing the user of the display device to access a medical device software running on the display device without prompting the user for authentication information, upon determining that the authentication at the first point in time is successful.