Message Authentication via PRNU Fingerprint Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for authenticating and validating electronic transactions lack robustness, particularly in ensuring the 'What You See Is What You Sign' (WYSIWYS) functionality, as they are prone to tampering and require additional measures like voice confirmation or separate channels, and do not effectively bind authentication to a legally binding electronic signature.

Innovation Solution

A system and method utilizing image processing techniques to validate and authenticate messages by capturing images of transaction data using a user imaging device, analyzing the images for photo response non-uniformity (PRNU) fingerprints, and comparing extracted data with the original message to ensure authenticity and integrity, thereby generating a digital signature only after successful validation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If image processing techniques with PRNU analysis are used to validate and authenticate messages, then security and authenticity verification are improved, but device complexity and processing time increase

Engineering Contradiction:
Improvemessage authentication reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by capturing an image of the message display and extracting PRNU fingerprints before the actual authentication decision is made. This allows the authentication process to verify message integrity and source authenticity in advance, improving reliability without significantly impacting the final authentication timing.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates a visual copy of the message through image capture and analyzes this copy for authentication purposes. By working with the image copy rather than directly manipulating the original message data, the system can perform complex PRNU analysis and fingerprint matching without affecting the core message processing operations.

Inventive Principle:
Principle #26Copying

2Measurement precision

If PRNU fingerprint matching is performed on captured images, then device identification accuracy is improved, but processing time and computational resources increase

Engineering Contradiction:
Improvedevice identification accuracyVSAvoidauthentication processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system applies partial action by focusing PRNU analysis specifically on the display region within the captured image where the message is shown. Rather than analyzing the entire image, the system concentrates computational resources on the relevant portion, improving device identification accuracy while reducing overall processing time and resource consumption.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If image capture and analysis steps are added to the authentication process, then WYSIWYS functionality is improved, but ease of operation deteriorates

Engineering Contradiction:
ImproveWYSIWYS functionalityVSAvoiduser operation simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system merges the image capture functionality with the existing authentication interface by integrating the camera capture step into the normal authentication flow. The message display, image capture, and authentication verification are combined into a single unified process, maintaining WYSIWYS reliability while preserving ease of operation through seamless integration.

Inventive Principle:
Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach securely performs electronic transactions and authenticates messages by ensuring that the transaction data is unaltered and originates from a trusted device, providing strong WYSIWYS functionality and legally binding electronic signatures, enhancing security and user control over the signature process.

Implementation Method 1

receiving an image P M of the message M captured using a user imaging device

Methodology Applied
Scientific EffectPhotoelectric Effect: Photoelectric Effect

Implementation Method 2

analysing the received image P M using one or more image processing techniques to determine if the image is valid by determining whether the received image P M comprises a PRNU matching one of the one or more digital fingerprints stored in the data store

Methodology Applied
Scientific EffectPhoto Response Non-Uniformity:

Data Source

PatentEP3265947B1Method and system for encryption
Publication Date: 2021.06.30 CRYPTOMATHIC LTD
  • EP3265947B1 patent drawingFigure 1
  • EP3265947B1 patent drawingFigure 2
  • EP3265947B1 patent drawingFigure 3

AI summary

There is described a validation and authentication system and method for authenticating and validating messages. The system comprises a data store storing one or more digital fingerprints associated with user imaging devices. There is also a communication module configured to: receive a message M; receive a request for validation and authentication and receive an image PM of the message M captured using a user imaging device. The system comprises an image validation module for analysing the received image PM using one or more image processing techniques to determine if the image is valid and authentic. If the received image PM is determined to be authentic and valid, the image validation module generates a response to the request.