Shared Video Stream Authentication for Transaction Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional digital transaction systems separate user authentication and transaction verification, creating a gap that is often exploited by attackers, leading to insufficient cybersecurity.
Innovation Solution
A unified process that fuses biometric data and transaction information into a single data stream, ensuring that modifying either corrupts both, thereby simultaneously authenticating the user and verifying the transaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user authentication and transaction verification are separated into distinct processes, then system complexity is reduced and ease of operation is improved, but security reliability deteriorates due to exploitation gaps by attackers
Solution Approach 1:
The patent merges user authentication and transaction verification into a single unified process. The system captures biometric data (face, fingerprint, iris, voice, gait, handwriting, or behavior patterns) and transaction data simultaneously, then fuses them into a unified data item. This integration eliminates the security gaps between separate processes while maintaining coherent system architecture through a single authentication-verification flow that prevents attackers from exploiting timing differences or process separations.
2Reliability
If biometric data and transaction data are stored separately, then data management simplicity is improved, but security deteriorates as attackers can manipulate one data type without affecting the other
Solution Approach 1:
The system combines biometric data and transaction data into a single unified data item structure. This unified data item contains both the biometric characteristics and transaction information, creating an integrated data representation where modifying either component inherently affects the other. This approach prevents selective manipulation of individual data types while maintaining organized data storage through a single coherent structure.
Solution Approach 2:
The unified data item functions as a composite data structure that integrates multiple data types (biometric and transactional) into a single cohesive unit. This composite structure ensures that the integrity of one data type cannot be compromised independently, as the unified design creates interdependent relationships between all contained data elements.
3Reliability
If real-time video feed display is added during data entry, then security is improved by deterring cyber-attacks, but ease of operation deteriorates due to additional visual elements on screen
Solution Approach 1:
The system introduces an intermediary layer that captures biometric data through video feeds without requiring the user to directly interact with or notice the video display elements. The camera system operates as an invisible intermediary, passively collecting biometric information while the user focuses on the transaction interface. This approach maintains user-friendly operation while enhancing security through automated biometric verification.
Data Source
AI summary
A user interacts with a remote server via an end-user device, and enters transaction data. A user-facing camera of the end-user device captures a live video feed of the interacting user; which is displayed in real time on the screen of the end-user device while the user is filling-out fields and entering transaction data. The concurrent, real-time, video-feed display of the interacting user, near—or as a background layer behind—the fillable fields of the transaction data, deters at least some cyber-attacks or prevents fraud attempts. Optionally, the screen of the end-user device is also continuously shared, over a secure communication channel, via a locally-installed Screen Sharing Module, with a trusted remote server; which performs continuous biometric authentication of the user, and continuously verifies the integrity of user-provided transaction data against locally-collected data and user interactions. Optionally, a server-side generated QR code or barcode or visual representation, is sent by the trusted remote server and is also displayed on the screen of the end-user device, which is then Screen-Shared back towards the trusted remote server, as an additional security measure.