Biometric Authentication via Segmented Biohash Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods face challenges in providing robust security and usability, particularly when relying on biometric information, as they often require direct user input or incur high costs for implementation.
Innovation Solution
An electronic device and method that generates a user's identity and password based on hashed biometric information, using a biohash algorithm to create secure authentication values without the need for separate identity and password storage, enabling secure and convenient authentication across multiple services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric information is used for user authentication, then security is improved, but implementation cost increases
Solution Approach 1:
The biometric authentication system is segmented into multiple independent components: biometric information acquisition module, feature extraction module, hash value generation module, and authentication module. This segmentation allows each component to be implemented with appropriate complexity level, reducing overall implementation cost while maintaining security.
Solution Approach 2:
A hash value is introduced as an intermediary between biometric information and authentication decision. The hash value transforms complex biometric data into a standardized format that can be efficiently stored and compared, reducing implementation complexity and cost while preserving authentication security.
2Reliability
If biometric information is used for user authentication, then security is improved, but user convenience deteriorates due to direct user input requirements
Solution Approach 1:
The system performs automatic biometric information acquisition and processing without requiring direct user input. The device automatically captures biometric data, extracts features, generates hash values, and completes authentication, allowing the system to serve itself and eliminating the need for user interaction during the authentication process.
Solution Approach 2:
Biometric information is acquired and processed in advance before authentication is needed. The system pre-extracts features and generates hash values from biometric data, so that when authentication is required, the process can be completed quickly without requiring user input or time-consuming processing.
3Reliability
If multiple authentication values are generated from biometric information, then security against spoofing is improved, but system complexity increases
Solution Approach 1:
The generation of multiple authentication values is achieved by segmenting the biometric information into different feature sets. Each feature set is independently processed to generate separate hash values, allowing the system to maintain multiple authentication credentials without significantly increasing overall system complexity.
Solution Approach 2:
Multiple authentication values are generated by changing parameters in the hash generation process, such as using different feature extraction algorithms or different portions of the biometric data. This allows the system to create multiple unique authentication credentials from a single biometric sample without requiring multiple biometric sensors or complex processing systems.
Data Source
AI summary
An electronic device is provided. The electronic device includes memory storing instructions, a camera, a communication circuit, and a processor. The instructions, when executed by the processor, cause the electronic device to obtain an image including a body portion of a user through the camera based on execution of a software application, obtain a plurality of feature values for the body portion identified based on the image, generate a first value hashed based on first feature values representing at least one part of the body portion from among the plurality of feature values, generate a second value hashed based on second feature values representing at least another part of the body portion from among the plurality of feature values, and transmit, through the communication circuit, the first value and the second value to an external electronic device providing the software application.