User authentication is ubiquitous, be it to authorize transactions, to log in to online services, or access work places. Multifactor authentication increases security enormously but is often disregarded because it is seen as not user-friendly.
Stricter regulations make multifactor authentication compulsory in an increasing amount of contexts in Europe. Biometrics can help to do this in a user-friendly way. However, conventional biometrics are often not secure and prone to tracking. oculid’s biometric procedure is based on individual static and dynamic characteristics of eye movements. These cannot be imitated by other people because the details of a person’s eye movements are not under the deliberate control of the brain, nor can they be imitated by mechanical replicas. As the properties of the eye movements depend on the specific movement that is performed, a users’ authentication template could be changed after a hack and the user can subsequently continue to use the system. This sets it apart from static biometrics as e.g. face iris or fingerprint that cannot be used again if they have been hacked. Combined with a second factor, e.g. another biometric or a personal code that is entered via oculid´s proprietary gaze based interaction, the system allows for a particularly secure form of authentication. The authentication is built in such a way that these multiple factors are assessed in just one step and thereby combines security and user-friendliness. It is ideally suited to cater to the requirements of industries and sectors that are in need of extremely secure but at the same time convenient authentication. Furthermore, oculid’s biometric is a cooperative method, i.e. it cannot be used to track individuals without their consent.
oculid has created several prototypical implementations of its authentication. Input data stems from a dedicated eye tracking device that is attached to a screen. However, a transfer to built-in cameras on mobile phones is underway and scheduled to be completed by the end of 2019. After refinement and a beta phase, the scalable product will be launched in 2020.
oculid currently targets authentication for digital payments, i.e. online banking and fintech apps. As the methods can principally be deployed in any industry, we are still evaluating other markets, too. more