Screen Capture Authentication via Sensory Data Sampling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification methods, especially in online transactions, face challenges such as the need to share confidential information, susceptibility to identity theft, and limitations in implementing biometric identification, particularly in remote transactions where image-based knowledge systems struggle to establish shared secret images effectively.
Innovation Solution
A method and system that utilize the unique experiences of users within interactive computing environments to generate shared secret images for authentication, leveraging robust visual memory by sampling and storing sensory inputs from digital sessions like online gaming or video calls, and using these images in verification processes, with parameters like duration and user interaction to select memorable images for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric identification methods are used for identity verification, then security and reliability are improved, but ease of operation and implementability deteriorate due to complexity and infeasibility in remote transactions
Solution Approach 1:
The patent uses screen capture images (copies of visual output) from the user's computer display during normal transactions as authentication tokens. Instead of requiring physical biometric samples, the system captures and stores visual copies of what the user sees on their screen, which can later be presented as authentication challenges. This copying approach maintains security while enabling remote verification.
Solution Approach 2:
The patent introduces screen capture images as an intermediary between the user and the verification system. Rather than directly verifying biometric data or confidential information, the system uses intermediate visual representations (screen captures) that the user has already seen during normal transactions. This intermediary approach simplifies the verification process while maintaining security.
2Ease of operation
If confidential information such as passwords and account numbers is used for identity verification, then ease of operation is improved, but reliability deteriorates due to susceptibility to discovery and identity theft
Solution Approach 1:
The system replaces confidential information with screen capture images that the user has already seen during normal transactions. Instead of relying on passwords or account numbers that can be stolen, the system uses visual copies of transaction screens as authentication tokens. The user simply needs to recognize images they have already viewed, eliminating the need to memorize or transmit sensitive data.
3Reliability
If image-based knowledge systems are used for authentication, then reliability is improved by leveraging human visual memory, but device complexity increases due to the difficulty of establishing numerous known images between system and user
Solution Approach 1:
The system allows users to automatically accumulate screen capture images during their normal transactions without requiring manual selection or setup. As users conduct transactions, the system automatically captures and stores relevant screen images in the user's profile. This self-service approach eliminates the complex manual process of establishing shared secret images while maintaining high authentication accuracy.
Solution Approach 2:
The system performs preliminary screen capture and storage of authentication images during normal transactions, before they are needed for verification. By accumulating screen captures in advance during routine usage, the system prepares the authentication database without requiring separate setup steps. This preliminary action simplifies the overall process while ensuring sufficient authentication material is available.
Data Source
AI summary
A digital data sampler operating in a computer processor selects and stores digital data samples from a data stream used for generating audio-visual output during a session with a client operated by a user. The session generates the data stream independently of the data sampler. The data sampler may collect parameter data correlated to a probability will be remembered by the user at some future time, for each sample. The data sampler may store the data samples and parameter data as shared secret data for use in a future authentication session. During a future authentication session, an authentication device selects test data from the shared secret data to generate sensible output in an authentication process. The authentication process grants access to a controlled resource in response to user input indicating specific knowledge of the shared secret data selected from a presentation of similar sensible outputs.