Trusted Multi-User Database for Secure User Presence Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional User Presence Detection (UPD) systems in multi-user environments face issues with spurious system wake events and unauthorized access due to inability to differentiate between trusted and untrusted users, leading to power losses and security breaches.
Innovation Solution
Implementing a Trusted Multi-User (TMU) database that stores biometric data and configuration settings to identify and manage user presence, allowing secure wake and lock operations based on user identity and policy, thereby preventing unauthorized access and optimizing power usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional User Presence Detection (UPD) systems are used to detect any user presence, then system wake events are triggered for any detected user, but this causes spurious wake events and power losses when untrusted users are present
Solution Approach 1:
The system segments users into distinct categories (trusted vs. untrusted) based on biometric verification against the TMU database. This segmentation allows the system to apply different wake policies: trusted users can trigger wake events while untrusted users cannot, thereby preventing spurious wake events and associated power losses.
Solution Approach 2:
The biometric verification process acts as an intermediary between user presence detection and system wake events. Before triggering a wake event, the system verifies the user's trust status through biometric matching, serving as a mediating layer that filters out untrusted users and prevents inappropriate wake events.
2Ease of operation
If the system allows any detected user to access the system, then wake events are triggered frequently, but this leads to unauthorized access and security breaches
Solution Approach 1:
The system performs preliminary biometric verification and trust status determination before allowing system access. By checking the TMU database and verifying biometric data in advance, the system ensures that only pre-approved trusted users can access the system, preventing unauthorized access while maintaining ease of operation for legitimate users.
Solution Approach 2:
Biometric verification serves as an intermediary security layer between user presence detection and system access. This mediating verification process confirms the user's trust status before granting access, thereby maintaining system security without compromising the ease of operation for authenticated users.
3Reliability
If biometric verification against a Trusted Multi-User (TMU) database is implemented, then system security is enhanced by identifying trusted users, but this increases system complexity
Solution Approach 1:
The system implements self-service biometric verification by automatically comparing detected user biometrics against the TMU database without requiring manual authentication. This automated self-verification process enhances security while minimizing the operational complexity burden on users, as the system handles the verification process autonomously.
4Reliability
If the system continuously monitors user presence with biometric verification, then unauthorized access is prevented, but this increases processing requirements and system complexity
Solution Approach 1:
The system extracts only the essential verification function from continuous monitoring - checking biometric data against the TMU database when user presence is detected. This extracted verification approach provides adequate access control without the excessive complexity of continuous comprehensive monitoring, balancing security requirements with system simplicity.
Data Source
AI summary
Embodiments of systems and methods are provided for enrolling new users within a database of trusted users during an active system session. The disclosed systems and methods automate and streamline the process of enrolling new trusted users within a database of trusted users (otherwise referred to as a trusted multi-user database, or TMU database). In some embodiments, the systems and methods disclosed herein may initiate enrollment of a new user within a TMU database upon: (a) receiving confirmation from an authenticated user verifying acceptance of the new user as a trusted user, and (b) detecting a passive enrollment response from the new user. This enables the disclosed systems and methods to securely and efficiently enroll new trusted users within a TMU database, with limited user interaction.