Authentication Token Generation via Biometric Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In network environments, controlling data leakage and preventing unauthorized access are challenging due to vulnerabilities in data storage devices, which can lead to malicious activities when unauthorized access to user passwords or biometric signals occurs.
Innovation Solution
An authentication system that generates an authentication token by encrypting a user's input with their biometric signal, using a biometric device to capture and match physical characteristics, and sending the encrypted token to an authentication device for verification, thereby enhancing security by making it impossible for unauthorized actors to access credentials without knowing the components and encryption method.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication using passwords or biometric signals alone is used, then ease of operation is maintained, but security reliability is compromised due to vulnerabilities to unauthorized access and malicious activities
Solution Approach 1:
The patent combines multiple authentication components (password, biometric signal, and encrypted authentication token) into a unified authentication system. The device integrates biometric signal capture, encryption processing, and token generation within a single authentication flow, merging previously separate authentication methods into a cohesive multi-factor system that enhances security while maintaining operational simplicity for the user
Solution Approach 2:
The system performs preliminary encryption of the authentication token using the biometric signal before transmission or storage. By pre-encrypting the token with the user's biometric data, the system ensures that even if the token is intercepted or stored, it cannot be used without the corresponding biometric credential, thus preventing unauthorized access and malicious activities in advance
2Measurement precision
If biometric signals are stored and compared for authentication, then authentication accuracy is improved, but vulnerability to data leakage and unauthorized access increases
Solution Approach 1:
The patent extracts the biometric signal from its traditional storage form and transforms it into an encrypted authentication token. Instead of storing raw biometric data that could be leaked, the system extracts the essential authentication function and implements it through encrypted tokens generated by combining the biometric signal with other authentication components, thereby separating the authentication capability from the vulnerable stored data
Solution Approach 2:
The authentication token serves as an intermediary between the stored biometric data and the authentication verification process. The token is generated by encrypting authentication data with the biometric signal, acting as a secure mediator that allows verification without exposing the actual biometric data stored in the system, thus preventing data leakage while maintaining authentication accuracy
Data Source
AI summary
A device that includes a biometric device that is configured to capture a biometric signal for a user. The biometric signal is a signal that is linked to the user based on the physical characteristics of the user. The device further includes a memory operable to store a plurality of biometric signals. The device further includes a processor configured to obtain a user password from a user and obtain a first biometric signal for the user. The processor is further configured to identify a stored biometric signal from among the plurality of biometric signals in the memory that closest matches the first biometric signal. The processor is further configured to generate an authentication token by encrypting the user password with the stored biometric signal and to send the authentication token to an authentication device.