Wearable Biometric Authentication for Cross-Session Identity Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods, such as usernames/passwords, facial recognition, and multi-factor authentication, are susceptible to hacking and data breaches, offering inadequate security against malicious activities.
Innovation Solution
A decision intelligence-based framework utilizing a wearable device, like a smart ring, monitors biometric data to maintain authentication across sessions by ensuring the device remains worn by the user, providing a session token that remains valid as long as the device is correctly attached.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, facial recognition, fingerprints) are used, then user convenience is maintained, but security is compromised due to susceptibility to hacking and spoofing
Solution Approach 1:
The patent replaces traditional mechanical authentication systems (keyboards for passwords, facial recognition cameras, fingerprint sensors) with a biometric authentication system using a wearable device that continuously monitors physiological signals (heart rate, body temperature, galvanic skin response) to verify user identity, thereby improving security without sacrificing convenience
Solution Approach 2:
The patent introduces a wearable device as an intermediary between the user and the system being accessed. This device continuously monitors biometric data and acts as a secure token that proves the user's identity and presence, eliminating the need for repeated authentication while maintaining high security standards
2Reliability
If multiple authentication layers (MFA) are implemented, then security is improved, but the system becomes more complex and each layer remains vulnerable to data breaches
Solution Approach 1:
The patent extracts the authentication function from multiple separate systems (password management, biometric databases, MFA protocols) and consolidates it into a single wearable device that continuously verifies user identity through physiological monitoring, thereby reducing system complexity while maintaining or improving security
Solution Approach 2:
The wearable device serves multiple functions: it acts as a continuous biometric authentication mechanism, a security token for accessing multiple systems, and a presence verification device, replacing the need for multiple separate authentication layers and simplifying the overall system architecture
3Reliability
If continuous biometric monitoring is performed via wearable device, then cross-session authentication security is improved, but energy consumption increases
Solution Approach 1:
The patent implements periodic sampling of biometric data rather than continuous monitoring, where the wearable device checks physiological signals at intervals to verify user presence and identity, thereby maintaining security while significantly reducing energy consumption compared to continuous monitoring
Solution Approach 2:
The system performs biometric monitoring at a level sufficient to ensure security (detecting presence, verifying identity) without excessive resource consumption, using minimal but adequate sampling rates and processing power to maintain authentication security while conserving battery life
Data Source
AI summary
Disclosed are systems and methods that provide a novel cross-session authentication framework that enables secure local and/or network sessions to be effectuated via biometric tracking via a wearable device (e.g., smart ring). In some implementations, when a user wearing a smart ring is authenticated with a first secure resource (e.g., a computer system such as a smart phone application associated with the smart ring), such authentication can be maintained and leveraged to access other resources that are separately being securely held. The smart ring, when properly worn, can monitor biometrics (e.g., vital signs) of a user, and based therefrom, determine if and/or when the smart ring is removed/manipulated from the user's finder. Until the smart ring is removed, the smart ring's confirmation of being worn by the user can be leveraged as an identification token that can enable the user access to other securely held information.