Passive Continuous Session Authentication via Biometric Video Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional security systems authenticate users only once and require re-authentication if the session is inactive, leading to intrusive active continuous authentication systems or resource-intensive passive systems that are costly and slow.

Innovation Solution

A passive continuous session authentication system that generates biometric and behavioral attribute data structures from video and sensor data to continuously re-authenticate users without requiring constant user interaction, using video monitoring and sensor data to synchronize temporal information and maintain seamless session security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional security systems authenticate users only once and require re-authentication only when session is inactive, then system resource consumption is reduced and user interaction is minimized, but session security is compromised and authentication reliability deteriorates

Engineering Contradiction:
Improvesession securityVSAvoidsystem resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system performs continuous authentication automatically in the background without requiring user initiation or interaction. The biometric and behavioral analysis occurs passively as the user normally uses the device, eliminating the need for users to manually trigger re-authentication while maintaining continuous security verification

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Instead of continuous heavy processing, the system periodically samples biometric data from video feeds and sensor data, performing authentication checks at intervals rather than continuously. This periodic approach maintains security while significantly reducing computational resource consumption compared to constant monitoring

Inventive Principle:
Principle #19Periodic action

2Reliability

If active continuous authentication systems are implemented to continuously verify user identity, then session security is improved, but user interaction requirements increase and system complexity worsens

Engineering Contradiction:
Improvesession securityVSAvoiduser interaction requirements
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication system operates autonomously in the background, automatically capturing biometric data from the device's camera and sensors, processing it through AI models, and verifying user identity without requiring any user action. The system serves itself by managing the entire authentication lifecycle passively

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Instead of requiring users to actively prove their identity through deliberate actions (as in traditional authentication), the system inverts the approach by having users simply behave naturally while the system passively observes and analyzes their biometric and behavioral patterns to continuously verify identity

Inventive Principle:
Principle #13The other way round (Inversion)

3Reliability

If passive continuous authentication using video and sensor data is implemented, then authentication reliability is improved and user interaction is minimized, but data processing requirements and computational resources increase

Engineering Contradiction:
Improveauthentication reliabilityVSAvoiddata processing requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts only the essential biometric features and behavioral attributes from video and sensor data that are necessary for authentication, rather than processing all raw data. This extraction approach maintains high authentication reliability while significantly reducing the computational burden by focusing only on relevant authentication-critical features

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The authentication system is divided into separate modular components: video processing module, sensor data processing module, biometric analysis module, and behavioral analysis module. Each module handles specific data types and processing tasks independently, which reduces overall system complexity by allowing specialized optimization of each segment and enabling parallel processing

Inventive Principle:
Principle #1Segmentation

4Reliability

If frequent re-authentication is required to maintain session security, then authentication reliability is improved, but user convenience deteriorates and time consumption increases

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidtime consumption for re-authentication
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs continuous authentication in the background without interrupting the user's workflow or requiring them to stop their current activity. The biometric and behavioral analysis occurs continuously as the user naturally uses the device, eliminating the time loss associated with stopping work to perform re-authentication tasks

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS12155650B2Systems and methods for passive continuous session authentication
Publication Date: 2024.11.26 WELLS FARGO BANK NA
  • US12155650B2 patent drawing
  • US12155650B2 patent drawing
  • US12155650B2 patent drawing

AI summary

Systems, apparatuses, methods, and computer program products are disclosed for providing passive continuous session authentication. An example method includes authenticating a session for a user of a client device. The example method further includes generating a video data structure comprising a video stream, deriving a set of biometric attributes of the user from the video stream, synchronizing temporal information with the set of biometric attributes derived from the video stream, generating an aggregated behavioral attribute data structure comprised of the video data structure and the set of biometric attributes derived from the video stream synchronized to the temporal information, and re-authenticating, by the session authentication circuitry at a second time after the first time, the session for the user of the client device based on the aggregated behavioral attribute data structure.