Periodic Facial Authentication for Continuous Service Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password-based authentication methods are vulnerable to security threats and cause user fatigue due to frequent authentication requirements, while biometric methods like facial recognition can be inefficient and prone to failure, necessitating improved access control systems that integrate periodic and reinforced authentication without user intervention.
Innovation Solution
A service access control system that performs periodic facial authentication at regular intervals, deactivates sessions on failure, and initiates reinforced authentication for resumed service access, using separate channels for additional verification when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If periodic facial authentication is performed at regular intervals, then security is enhanced through continuous verification, but user fatigue increases due to frequent authentication requirements
Solution Approach 1:
The system performs facial authentication in advance at regular intervals before service access is needed, maintaining continuous verification without requiring user intervention at the moment of service access. The authentication results are stored and used for subsequent access decisions, reducing immediate user burden while maintaining security.
Solution Approach 2:
The system implements periodic facial authentication at predetermined time intervals rather than continuous or on-demand authentication. This periodic verification maintains security through regular checks while reducing overall authentication frequency compared to continuous verification, thereby decreasing user fatigue.
2Reliability
If authentication is repeated for each service and authorization cycle, then access control security is improved, but the burden on users to perform authentication procedures increases
Solution Approach 1:
The system merges multiple authentication results obtained at different time intervals into a single comprehensive authentication state. Instead of requiring separate authentication procedures for each service access, the system combines periodic authentication outcomes to maintain continuous access authorization, reducing repeated authentication burden while preserving security.
Solution Approach 2:
The system maintains continuous service access authorization based on periodic authentication results, allowing uninterrupted service provision between authentication intervals. This continuous authorization eliminates the need for repeated authentication procedures during service usage, reducing time burden while maintaining security through regular periodic verification.
3Reliability
If the number of authentication times increases, then security verification is strengthened, but the possibility of exposing user information increases
Solution Approach 1:
The system extracts only essential facial authentication data needed for verification purposes and stores processed authentication results rather than raw biometric data. This extraction approach maintains security verification capability while minimizing the storage and transmission of sensitive user information, thereby reducing exposure risk.
Solution Approach 2:
The system introduces an authentication result as an intermediary between the user and service access control. Instead of repeatedly processing raw facial biometric data for each authentication instance, the system uses stored authentication results as intermediaries to verify access rights, reducing direct handling of sensitive user information while maintaining verification security.
Data Source
AI summary
Disclosed is an operation method of a service access control system. The operation method includes, when an access request of a registered user, which includes access right information, is received through a first user terminal, providing, by a service server, a service to the first user terminal, controlling, by the service server, the first user terminal to capture facial images of the registered user at regular intervals regardless of user input while the service is being provided, obtaining, by an authentication server, the facial images captured by the first user terminal at the regular intervals, performing, by the authentication server, facial authentication at the regular intervals on the basis of the facial images, and when the facial authentication fails, deactivating, by the service server, an access session of the first user terminal to the service and interrupting providing the service.


