Two-Stage Biometric Authentication for Lower False Rejection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user authentication methods on information processing apparatuses face a trade-off between low false acceptance rate and high false rejection rate, leading to reduced usability.

Innovation Solution

An information processing apparatus that performs user authentication using a combination of first and second authentication stages, utilizing eye images from multiple parts of the user, with different acceptance thresholds to balance false rejection and acceptance rates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a low false acceptance rate is set for user authentication, then authentication security is improved, but false rejection rate increases leading to reduced usability

Engineering Contradiction:
Improveauthentication securityVSAvoidusability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication process is divided into two independent stages: first authentication using authentication target information from multiple parts of the user, and second authentication using additional authentication target information. Each stage has its own acceptance threshold, allowing the system to balance security and usability independently at each stage rather than using a single high threshold that causes frequent false rejections.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The authentication system dynamically adjusts the stringency of verification based on the stage of authentication. The first authentication uses a lower threshold to ensure usability, while the second authentication provides an additional security layer. This dynamic approach allows the system to maintain both high security and high usability, resolving the contradiction between reliability and ease of operation.

Inventive Principle:
Principle #15Dynamics

2Measurement precision

If authentication uses multiple pieces of authentication target information from different parts of the user, then authentication accuracy is improved, but authentication process complexity increases

Engineering Contradiction:
Improveauthentication accuracyVSAvoidauthentication process complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The authentication process is segmented into two distinct stages, each using different authentication target information from different parts of the user. The first authentication uses one set of authentication target information, while the second authentication uses additional authentication target information. This segmentation allows the system to gather comprehensive biometric data without overwhelming the user with a single complex process.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The first authentication serves as a preliminary verification step that prepares the authentication state before the final second authentication. By performing preliminary authentication with one set of authentication target information, the system reduces the burden of the second authentication while maintaining overall high accuracy. This preliminary action approach breaks down the complex multi-information authentication into manageable sequential steps.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20260023834A1Information processing apparatus for two-stage authentication, method for controlling information processing apparatus, and storage medium
Publication Date: 2026.01.22 CANON KK
  • US20260023834A1 patent drawing
  • US20260023834A1 patent drawing
  • US20260023834A1 patent drawing

AI summary

An information processing apparatus configured to perform user authentication includes a management unit configured to manage authentication registration information about a user to permit use of the information processing apparatus, and an authentication unit configured to perform authentication of an authentication target user by using a plurality of pieces of authentication target information acquired from a plurality of different parts of the authentication target user and the authentication registration information.