Biometric Authentication System for Identity-Protected Account Creation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current software applications require users to reveal their identity and personal information for registration, leading to issues such as multiple profile management, fake identities, privacy risks, and misuse of personal data for targeted advertising, with no effective control over data visibility or security.
Innovation Solution
A system and method that allows users to create and log into accounts using biometric samples to generate unique keys, enabling authentication without revealing their identity, using a processor to compute Secret-Keys and Public-Keys for secure access without storing personally identifiable information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users provide identity and personal information for registration, then authentication can be performed, but user privacy is compromised and multiple profiles are created
Solution Approach 1:
The patent introduces a third-party authentication service as an intermediary between the user and the application. This service verifies user identity without requiring the application to store or access personal identifiable information. The intermediary handles authentication credentials securely, allowing authentication to occur without direct exposure of user identity to the application server, thus resolving the contradiction between reliable authentication and privacy protection.
Solution Approach 2:
The patent extracts the authentication verification function from the application server and places it in a dedicated authentication service. By separating these functions, the application no longer needs to handle or store personal identifiable information directly. The extraction allows authentication to remain reliable while removing the harmful exposure of user privacy data from the application's operational scope.
2Adaptability or versatility
If applications collect personal information from users, then user profiles can be created, but data security risks increase
Solution Approach 1:
The patent extracts personally identifiable information handling from the application server and relocates it to a dedicated authentication service. The application server no longer stores or processes personal data directly; instead, it uses abstract authentication tokens issued by the authentication service. This extraction enables user profile creation and authentication functionality while eliminating the data breach risk associated with storing personal information in the application server.
Solution Approach 2:
The authentication service acts as an intermediary that handles all personal information processing. It verifies user identities and issues authentication tokens without exposing personal data to the application server. This intermediary approach allows the system to maintain adaptability in creating user profiles while protecting data security by keeping personal information isolated in a dedicated, secure service with specialized security measures.
3Productivity
If platforms store user activity data permanently, then user preferences can be tracked, but user control over data is lost
Solution Approach 1:
The patent implements a feedback mechanism where the authentication service provides authentication tokens to the application server in response to user verification. This feedback loop allows the system to efficiently process authentication requests and maintain user preferences without requiring permanent storage of raw personal data. The feedback mechanism enables the system to adapt to user needs while maintaining user control over their data through the token-based authentication system.
Data Source
AI summary
A system and method for enabling a user to create an account on an application and login into the application, without having the user reveal their identity, is described herein. The system is configured for registering a user by receiving a set of biometric samples of the user, processing the set of biometric samples to compute a Secret-Key (S1) corresponding to the user, generating a Unique-Number (N1) using a random number generation algorithm, applying a Function (F1) to the Secret-Key (S1) and the Unique-Number (N1), to compute a Public-Key (P1). Once the user is registered, the system is configured to receive an account creation request from an application. Further, the system is configured to receive a biometric sample from the user in real-time and compute the Secret-Key (S2) for authenticating the user. Once the user is authenticated, the system may generate an Application User ID based on the authentication and transmit to the application a request to enable the user to create an account on the application or login to the application, wherein the request comprises the Application User ID.