Biometric Authentication Registration for Mobile Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems, such as FIDO, require time-consuming registration processes for each device and do not efficiently integrate biometric authentication, leading to user inconvenience and potential information leakage risks.
Innovation Solution
An information processing apparatus and method that registers biometric authentication information, including a private key and public key, on a user's device, allowing secure authentication without transmitting biometric data over the network, and simplifies the registration process by using biometric authentication for device login to automate authenticator registration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication information is registered for each device using conventional methods, then authentication security is improved, but registration time and user operation complexity increase
Solution Approach 1:
The system performs preliminary registration of biometric authentication information between the mobile terminal and server before actual device usage. The server stores authentication identification information, public keys, and other authentication data linked to the user's biometric authentication in advance, so that when the user later uses any device, the authentication is already configured and ready to use immediately without time-consuming registration.
Solution Approach 2:
The mobile terminal automatically performs the registration process using the user's biometric authentication without requiring manual intervention. The system uses the biometric information already stored in the mobile terminal to automatically generate and transmit authentication credentials to the server, eliminating the need for users to manually register biometric information for each device.
2Reliability
If biometric authentication is performed in addition to terminal authentication at each device, then authentication security is improved, but operation complexity and time consumption increase
Solution Approach 1:
The system merges terminal authentication and biometric authentication into a unified authentication process. The mobile terminal uses its existing biometric authentication mechanism (fingerprint, face recognition, etc.) to simultaneously authenticate the user and generate device-specific authentication credentials, eliminating the need for separate biometric registration at each device while maintaining both levels of security.
Solution Approach 2:
The mobile terminal's biometric authentication system serves multiple functions: it authenticates the user for terminal access, generates authentication credentials for the server, and enables automatic device-specific authentication. This multi-functional approach eliminates the need for separate authentication systems at each device, simplifying the overall operation while maintaining security.
3Adaptability or versatility
If authentication information is transmitted over the network, then service accessibility is improved, but information leakage risk increases
Solution Approach 1:
The system extracts and transmits only the necessary authentication data (authentication identification information, public keys, and signed authentication results) over the network, while keeping the sensitive biometric information and private keys securely stored locally in the mobile terminal and on the server. This selective transmission approach enables service accessibility while minimizing information leakage risk by never transmitting the actual biometric data.
Solution Approach 2:
The system uses cryptographic intermediaries (public key infrastructure) to enable secure communication. The mobile terminal signs authentication results with its private key, and the server verifies these signatures using the public key. This intermediary mechanism allows the server to authenticate the user without directly receiving or storing the user's biometric information, thus maintaining service accessibility while preventing information leakage.
Data Source
Figure 1
Figure 2A~2B
Figure 3A~3B
AI summary
A mobile terminal performs a user's log-in processing using biometric information read by a biometric information sensor, creates a private key required for authentication processing performed when a service on a network is used and a public key corresponding to the private key, stores the created private key with being associated with the biometric information read at the time of the log-in processing in a storage, and issues a request for registering an authentication information ID corresponding to the biometric information and a public key corresponding to the private key stored in the storage with being associated with the biometric information in the service.