Side-Channel Biometric Timing Reconciliation for Remote Desktop Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods for remote sessions face accuracy issues due to the loss of timing data during transmission in remote desktop environments, leading to reduced authentication system precision.
Innovation Solution
The implementation of a method that uses a side-channel communication channel to preserve and transmit time-based user data, such as keystroke and mouse movement patterns, for real-time authentication, allowing for continuous identity verification by comparing the received data with prior profiles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If timing data is transmitted through the main remote desktop communication channel, then the authentication system can verify user identity, but the timing precision is lost due to re-emission of events on the remote machine introducing jitter
Solution Approach 1:
The patent divides the authentication data transmission into two separate channels: the main remote desktop channel for visual output and a side-channel for timing data. This segmentation allows timing information to be transmitted independently without being affected by the re-emission jitter in the main channel, thereby preserving timing precision for authentication purposes.
Solution Approach 2:
The patent introduces a side-channel as an intermediary communication path between the local and remote machines. This side-channel specifically handles timing data transmission, acting as a mediator that bypasses the timing distortion introduced by the main remote desktop protocol's event re-emission process.
2Reliability
If a side-channel communication is implemented to preserve timing data, then authentication accuracy is improved, but the device complexity increases due to additional communication channels
Solution Approach 1:
The side-channel communication mechanism is designed to serve multiple purposes: it transmits timing data for authentication, carries metadata for synchronization, and provides a framework that could potentially support other types of data exchange. This multi-functionality justifies the added complexity by providing versatile communication capabilities beyond just timing data transmission.
Data Source
AI summary
Various implementations disclosed herein include devices, systems, and methods that authenticate user identities based on input/sensor data received from remote workstations and/or during remote communication sessions. The input/sensor data may correspond to timing and patterns from which user identities may be authenticated. Some implementations disclosed herein communicate input/sensor data in a way that preserves the timing and pattern information of the data and/or in a way that allows such information to be used for authentication in real-time. Some implementations enable continuous provision of input/sensor data and/or enable continuous authentication of user identities during remote communication sessions.