Biometric Account Number Encoding Against Brute-Force Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional account number generation methods are vulnerable to brute force attacks and lack integration of biometric data as a secure authentication layer, relying on predefined sequences and separate association with biometric data.
Innovation Solution
Generate a unique portion of an account number based on a user's biometric data using an encoding process, integrating biometric scanning devices with certification mechanisms to authenticate interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If conventional predefined sequences or formulas are used to generate account numbers, then the generation process is simple and efficient, but the account numbers become vulnerable to brute force attacks
Solution Approach 1:
The patent changes the fundamental parameter used for account number generation from conventional predictable sequences or formulas to biometric data. This transformation converts the generation basis from something that can be guessed through brute force attacks to something that is unique and difficult to replicate, thereby resolving the contradiction between generation simplicity and security reliability
Solution Approach 2:
The patent introduces biometric data as an intermediary element between the user and the account number generation process. This intermediary provides a secure bridge that maintains ease of generation while dramatically improving security, as biometric data serves as a reliable mediator that is both easy to capture and extremely difficult to compromise through traditional attack vectors
2Device complexity
If biometric data is merely associated with conventionally generated account numbers, then the authentication system is simple to implement, but the security integration is insufficient
Solution Approach 1:
The patent merges the biometric authentication system with the account number generation process itself, rather than keeping them as separate systems. By combining these functions, the patent achieves both simplicity in implementation and enhanced security, as the biometric data becomes an intrinsic part of the account identification mechanism rather than just an additional authentication layer
Solution Approach 2:
The patent makes biometric data serve multiple functions simultaneously: it acts as both the unique identifier for account number generation and the authentication credential for verifying user identity. This multi-functionality reduces overall system complexity while improving security, as a single biometric capture serves dual purposes rather than requiring separate systems for identification and authentication
Data Source
AI summary
Disclosed are methods and systems for generating and using biometric-based account numbers. A binary representation of biometric data of a first user may be received and reduced using an encoding process to generate a unique portion of an account number for the first user that is stored in a data store. The first user may be provided a certification mechanism that includes a chip storing the encoding process and a biometric scanning device. In response to an attempt by an unknown user to perform an interaction using the certification mechanism, a value generated by the certification mechanism may be received, and a match may be determined between the value and the unique portion of the account number stored in the data store, the match indicating the unknown user is the first user. Based on the match, the interaction may be authorized and the value is used to perform the interaction.