Multi-Factor Authentication Using Wearable Proximity and Biometrics

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems relying on traditional credentials and biometrics are vulnerable to unauthorized access as these can be falsified or obtained by unauthorized users, leading to security breaches in secure systems.

Innovation Solution

Implementing a multi-factor, hardware-based authentication system that uses advanced biometrics and wearable devices to validate user identity, including proximity detection and analysis of biometric data such as gait, heart rate, and other health metrics, to enhance security and prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional credentials (username/password) are used for authentication, then ease of operation is improved, but security reliability deteriorates because credentials can be falsified or obtained by unauthorized users

Engineering Contradiction:
Improveease of authenticationVSAvoidauthentication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication process is segmented into multiple independent factors: something the user knows (credentials), something the user has (wearable device), and something the user is (biometric data). Each factor provides a separate layer of security, so compromise of one factor does not lead to complete system compromise.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A wearable device acts as an intermediary authentication element between the user and the system. The device stores and transmits authentication data, adding a hardware-based layer that is difficult to replicate or compromise compared to software-based credentials alone.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If traditional biometric data (fingerprint) is used for authentication, then ease of operation is improved, but security reliability deteriorates because biometric data can be falsified or obtained without authorization

Engineering Contradiction:
Improveease of authenticationVSAvoidauthentication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

Multiple authentication factors are merged into a single authentication process: credentials, wearable device presence, and biometric data are combined. This multi-factor approach ensures that even if one factor is compromised, the others provide additional security layers.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The authentication system transitions from two-dimensional verification (credentials only or basic biometrics only) to three-dimensional verification by adding the wearable device as a spatial and temporal dimension. The system verifies not just identity but also device presence and proximity.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Reliability

If multi-factor hardware-based and advanced biometric authentication is implemented, then authentication security is improved, but device complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The wearable device serves multiple functions: it acts as a credential storage device, a biometric sensor, and a communication device. This multi-functionality reduces the need for separate dedicated hardware components for each authentication factor.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system automatically collects and processes multiple authentication factors without requiring manual intervention. The wearable device automatically transmits data, biometric sensors automatically capture information, and the system automatically verifies all factors, reducing operational complexity despite increased security.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10958639B2Preventing unauthorized access to secure information systems using multi-factor, hardware based and/or advanced biometric authentication
Publication Date: 2021.03.23 BANK OF AMERICA CORP
  • US10958639B2 patent drawing
  • US10958639B2 patent drawing
  • US10958639B2 patent drawing

AI summary

Systems for providing secure access to systems are provided. A computing device may receive a request to access functionality which may include login credentials of a user. Upon receiving the request to access functionality, the computing device may execute a scan of an area surrounding the computing device to detect any wearable devices within proximity of the computing device that are linked to the computing device. The authenticating information and, in some examples, detected, linked wearable device, may be validated. Based on the validation, authentication response data may be generated and transmitted to an authentication computing platform which may cause the authentication computing platform to validate the authentication response data and cause the computing device to connect to a client interface computing platform. After a connection between the computing device and client interface computing platform is established, interface data may be transmitted from the client interface computing platform to the computing device and one or more interfaces may be displayed on the computing device.