System and method for handling an authentication request
It is provided a method for handling an authentication request ( 100 ), the method comprises the steps of: acquiring data from at least two sensors ( 110 a, 110 b ), wherein the acquired data is synchronized when captured by the at least two sensors ( 110 a, 110 b ); providing the acquired, synchronized data to an isolated execution environment ( 120 ); comparing the synchronized data with synchronization dependent authentication rules; authenticating the request, and notifying a function addressed by the request, in case the synchronized data comply with said authentication rules.
1 . A method for handling an authentication request, the method comprising:
acquiring, in response to receiving a request, data from at least two sensors, wherein the acquired data is synchronized when captured by the at least two sensors;
providing the acquired data to an isolated execution environment;
comparing the acquired data with synchronization dependent authentication rules that require data from different sensors to be coherent with one another to an extent which indicates the data from different sensors were acquired at the same location; and
authenticating the authentication request, and notifying a function addressed by the authentication request, in case the acquired data comply with said synchronization dependent authentication rules.
2 . The method according to claim 1 , wherein one of the at least two sensors is a master sensor, and wherein the acquired data has been synchronized by the master sensor.
3 . The method according to claim 1 , wherein the master sensor is synchronized based on a time and a data pattern.
4 . The method according to claim 1 , wherein the acquired data is:
provided to the isolated execution environment as a real-time bit stream to be processed within the isolated execution environment; or
preprocessed prior to comparing the acquired data at the isolated execution environment.
5 . The method according to claim 1 , wherein the acquired data is preprocessed prior to comparing the acquired data at the isolated execution environment, wherein the preprocessing comprises at least one of image pre-processing and time alignment.
6 . The method according to claim 1 , wherein each of the at least two sensors are any of: a camera, an IMU, a fingerprint sensor, an accelerometer, a gyro meter, a magnetometer, a pressure sensor, a temperature sensor, a light sensor, a photosensor, a microphone or an IR camera.
7 . The method according to claim 1 , wherein the acquired data is transferred to the isolated execution environment through a pass-through channel.
8 . The method according to claim 1 , wherein the acquired data comprise at least one of: image data, pin data, face ID data, audible data, haptic data, light flickering data and fingerprint data.
9 . The method according to claim 1 , wherein synchronization of the acquired data is executed:
with respect to at least one of time and at least one observed data pattern.
10 . The method of claim 1 , wherein the acquired data comprises data of different data types from at least two sensors of at least two different sensor types, wherein the synchronization dependent authentication rules require data of different data types to be coherent with one another to an extent which indicates the data of different data types were acquired at the same location.
11 . The method of claim 1 , wherein the synchronization dependent authentication rules require data from different sensors to be coherent with one another in terms of a pattern of the data over time.
12 . The method of claim 1 , wherein said comparing comprises:
comparing data from the at least two sensors to one another in order to determine an extent to which the data from the at least two sensors are coherent with one another; and
comparing the determined extent to the extent required by the synchronization dependent authentication rules.
13 . A communication device for handling an authentication request, the communication device comprising processing circuitry configured to:
acquire data from at least two sensors, wherein the acquired data is synchronized when captured by the at least two sensors;
provide the acquired data to an isolated execution environment;
compare the acquired data with synchronization dependent authentication rules that require data from different sensors to be coherent with one another to an extent which indicates the data from different sensors were acquired at the same location; and
authenticate the authentication request, and notify a function addressed by the authentication request, in case the acquired data comply with said synchronization dependent authentication rules.
14 . The communication device according to claim 13 , wherein one of the sensors is configured to act as a master sensor, and wherein the master sensor is configured to synchronize the acquired data.
15 . The communication device according to claim 14 , wherein the master sensor is configured to synchronize the acquired data based on a time and a data pattern.
16 . The communication device according to claim 13 , wherein the acquired data is:
provided to the isolated execution environment as a real-time bit stream to be processed within the isolated execution environment; or
preprocessed prior to comparing the acquired data at the isolated execution environment.
17 . The communication device according to claim 13 , wherein the acquired data is preprocessed prior to comparing the acquired data at the isolated execution environment, wherein the preprocessing comprises at least one of image pre-processing and time alignment.
18 . The communication device according to claim 13 , wherein each of the at least two sensors comprise any of: a camera, an IMU, a fingerprint sensor, an accelerometer, a gyro meter, a magnetometer, a pressure sensor, a temperature sensor, a light sensor, a photosensor, a microphone or an IR camera.
19 . The communication device according to claim 13 , wherein the processing circuitry is further configured to transfer the acquired data to the isolated execution environment through a pass-through channel.
20 . The communication device according to claim 13 , wherein the acquired data comprise at least one of: image data, pin data, face ID data, audible data, haptic data, light flickering data and fingerprint data.
21 . The communication device according to claim 13 , wherein synchronization of the acquired data is executed:
with respect to at least one of time and at least one observed data pattern.
22 . A system for handling an authentication request, the system comprising:
a user device;
at least two sensors; and
an isolated execution environment, arranged within a cloud server;
wherein the system is configured to:
acquire data from the at least two sensors, wherein the acquired data is synchronized when captured by the at least two sensors;
provide the acquired data to the isolated execution environment;
compare the acquired data with synchronization dependent authentication rules that require data from different sensors to be coherent with one another to an extent which indicates the data from different sensors were acquired at the same location;
authenticate the authentication request, and notify a function addressed by the authentication request, in case the acquired data comply with said synchronization dependent authentication rules.