Biometric Authentication System Using One-Time Parameter Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication systems require users to manage and securely store conversion parameters, which can be costly and vulnerable to leakage, especially in shared terminal environments, reducing the availability and security of cancellable biometric authentication.
Innovation Solution
A biometric authentication system where a client and two servers are connected through a network, with the client converting feature quantities using one-time parameters generated by the parameter server, and the authentication server managing templates, eliminating the need for users to possess or memorize secret information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manage and securely store conversion parameters, then security is improved, but device complexity and operational cost increase
Solution Approach 1:
A parameter server is introduced as an intermediary component that centrally manages conversion parameters. The server generates and distributes one-time parameters to clients, eliminating the need for users to securely store and manage conversion parameters themselves. This mediator approach resolves the contradiction by centralizing security management while reducing user-side complexity.
Solution Approach 2:
The system enables automatic parameter generation and distribution where the parameter server autonomously creates one-time parameters and transmits them to clients. The client automatically uses these parameters for conversion without requiring user intervention in the security management process, thus reducing operational complexity while maintaining security.
2Reliability
If conversion parameters are stored in tokens issued to users, then security is improved, but loss of information increases
Solution Approach 1:
The system employs one-time parameters that are valid only for a single authentication session. After use, the parameter is discarded and a new one is generated. This periodic regeneration of parameters ensures that even if a parameter is leaked, it cannot be reused for subsequent authentications, thereby minimizing information loss impact while maintaining security.
3Adaptability or versatility
If the same biometric information is registered to different systems, then adaptability is improved, but object-generated harmful factors increase
Solution Approach 1:
The system converts biometric templates using different one-time parameters for different authentication systems. Even though the same biometric information is processed, the resulting converted templates differ due to the unique parameters used in each system. This parameter transformation approach enables adaptability across systems while preventing template replication and cross-system security breaches.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In the client, a feature quantity extraction unit extracts a feature quantity from biometric information of a user. A feature quantity conversion unit converts the feature quantity by a one-time parameter. In the first server, a parameter DB stores a parameter in association with the ID. A data generation unit generates data based on the parameter corresponding to the ID transmitted from the client. In the second server, a template DB stores a template to which the feature quantity of the biometric information of the user is converted by the parameter, in association with the ID. A template conversion unit generates a one-time template by converting the template corresponding to the ID transmitted from the first server. Then, a match determination unit compares the converted feature quantity transmitted from the client or the data transmitted from the first server with the one-time template to determine whether they match or not.