Wireless CSI Authentication for Continuous Trust Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods are vulnerable to compromise and do not ensure high certainty in user and device authentication, particularly during sessions, and may expose personal information.
Innovation Solution
A continuous multi-factor authentication (CMFA) system that utilizes biometric and wireless sensing data, including CSI, to derive a trust score and dynamically adjust authorization levels based on environmental context.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (username/password, pin codes, two factor authentication) are used, then authentication can be initiated, but high certainty in user authentication cannot be ensured and devices may become compromised or stolen
Solution Approach 1:
The patent implements continuous authentication by continuously collecting biometric data (facial recognition, voice recognition, gait analysis) and environmental data during the entire user session, rather than performing authentication only at login. This continuous verification process maintains high authentication certainty throughout the session, preventing device compromise while the user is actively using the device.
Solution Approach 2:
The system continuously monitors multiple factors including biometric data, device sensors, environmental context, and user behavior patterns, then feeds this information back to dynamically adjust authorization levels. This feedback loop ensures that authentication certainty is maintained and authorization is adapted in real-time based on the user's actual state and environment.
2Reliability
If continuous monitoring of user activity is implemented to maintain authentication certainty, then device security is improved, but personal information may be exposed to authentication providers
Solution Approach 1:
The patent introduces a trusted execution environment (TEE) or secure enclave as an intermediary layer between the continuous authentication monitoring system and the authentication provider. This secure intermediary processes and verifies biometric and environmental data locally, generating authentication proofs without exposing raw personal information to external providers, thus maintaining device security while preventing information exposure.
Solution Approach 2:
The system extracts only the essential authentication verification results from continuous monitoring data, rather than transmitting or storing the raw biometric and personal information. By taking out only the necessary authentication proof elements while leaving the sensitive personal data protected locally, the system maintains device security without exposing personal information to authentication providers.
3Reliability
If multiple authentication factors are continuously verified, then authentication certainty is improved, but the complexity of the authentication system increases
Solution Approach 1:
The patent merges multiple authentication factors (facial recognition, voice recognition, gait analysis, device sensors, environmental context) into a unified continuous authentication framework. By combining these diverse factors into a single integrated system that operates continuously in the background, the patent achieves high authentication certainty without requiring complex separate authentication mechanisms for each factor.
Solution Approach 2:
The system implements a universal authentication framework that can verify multiple types of authentication factors (biometric, behavioral, environmental) through a single multi-functional platform. This universal approach allows the system to handle diverse authentication requirements using one integrated system rather than multiple separate systems, reducing overall complexity while maintaining high authentication certainty.
Data Source
AI summary
A method of continuous multi-factor authentication may include executing wireless sensing based at least in part on execution of a continuous multi-factor authentication (CMFA) application at a computing device, collecting channel state information (CSI) data from a network device communicatively coupled to the computing device, transmitting the CSI data to a CMFA device, and receiving a trust score from the CMFA device based on the CSI data.