Virtual Environment Authentication via Biometric Token Generation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems fail to effectively detect and prevent unauthorized access and malicious activities in virtual environments, leading to vulnerabilities in network security and data leakage.

Innovation Solution

A system implementing multifactor authentication using a combination of user images, serial numbers, and credentials to generate a non-mutable token for identity verification, enhancing security by increasing the complexity of hacking and spoofing attempts.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multifactor authentication is implemented using user images, serial numbers, and credentials, then information security and authorization control are improved, but device complexity and processing requirements increase

Engineering Contradiction:
Improveinformation securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is divided into distinct segments: capturing user image data, extracting biometric features, verifying credentials, and generating authorization tokens. Each segment handles a specific aspect of authentication, making the complex system manageable and maintainable while ensuring comprehensive security verification

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system introduces an intermediary authentication module that acts as a mediator between users and the virtual environment. This module processes multifactor authentication data and generates authorization tokens, isolating the complexity of security verification from both the user interface and the core virtual environment operations

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If facial recognition and feature extraction are performed on user images, then authentication accuracy is improved, but processing time and computational resources increase

Engineering Contradiction:
Improveauthentication accuracyVSAvoidauthentication processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

User biometric features are extracted and stored in advance during the account setup phase. When authentication is needed, the system compares current images against pre-extracted features rather than performing full feature extraction in real-time, significantly reducing authentication processing time while maintaining accuracy

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system extracts only the most critical biometric features (such as facial landmarks, iris patterns, or fingerprint characteristics) rather than analyzing entire images in detail. This partial action approach achieves sufficient authentication accuracy while minimizing computational overhead and processing time

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If non-mutable tokens are generated for user identification, then security against spoofing is improved, but system complexity and token management overhead increase

Engineering Contradiction:
Improveanti-spoofing capabilityVSAvoidtoken management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system replaces traditional credential verification mechanisms with cryptographic token-based authentication. Non-mutable tokens generated through cryptographic functions provide robust anti-spoofing protection without requiring complex physical security infrastructure or manual verification processes

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The authentication system transitions from verifying mutable credentials (passwords, usernames) to verifying immutable cryptographic tokens. This parameter change fundamentally improves security against spoofing and credential theft, as tokens cannot be altered or reproduced, though it requires implementing cryptographic token generation and validation protocols

Inventive Principle:
Principle #35Parameter changes

4Object-affected harmful factors

If comprehensive user verification is performed before virtual environment interactions, then unauthorized access prevention is improved, but network throughput and system performance may decrease

Engineering Contradiction:
Improveunauthorized access preventionVSAvoidnetwork throughput
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

User authentication and authorization verification are performed in advance before users enter the virtual environment or access sensitive resources. Once authenticated, users receive session tokens that enable subsequent operations without repeated verification, preventing unauthorized access while minimizing ongoing impact on network throughput

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements periodic re-authentication or token refresh mechanisms rather than continuous verification for every action. This approach maintains strong security by periodically confirming user identity while allowing uninterrupted operation during authenticated sessions, balancing security with network performance

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS12081543B2System and method for user authentication for information security
Publication Date: 2024.09.03 BANK OF AMERICA CORP
  • US12081543B2 patent drawing
  • US12081543B2 patent drawing
  • US12081543B2 patent drawing

AI summary

A system receives a request to authorize an interaction between a first avatar associated with a first user and a second avatar associated with a second user within a virtual environment. The system receives a request to verify the identity of the first user. The system receives an image of the first user and extracts facial features from the image. The system identifies a serial number and a user credential associated with the first user. The system generates a token based on the facial features, the serial number, and the user credential. The system verifies the identity of the first user based on the token. If the identity of the first user is verified, the system authorizes the interaction between the first avatar and the second avatar.