Biometric Authentication Using Concatenated Unique User Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional biometric authentication methods face challenges in managing user biometric information across multiple devices without server involvement and risk security breaches when using servers, leading to false negatives due to variations in biometric data.
Innovation Solution
An electronic device generates device-independent biometric information by concatenating user biometric data with unique user information, which is then transformed and transmitted to an authentication server for secure authentication, reducing the likelihood of false negatives.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If biometric information is transmitted to a server for authentication, then centralized authentication management is achieved, but security risk increases due to potential interception by hackers
Solution Approach 1:
The patent extracts the raw biometric information from the transmission data and keeps it locally in the electronic device. Only transformed authentication data (hash values or encrypted forms) are transmitted to the server, while the original biometric templates remain secured in the device's local storage. This separation reduces security risks associated with transmitting sensitive biometric data.
Solution Approach 2:
The patent introduces a transformation process (hashing or encryption) as an intermediary between the biometric information and the transmitted data. This intermediary layer ensures that even if transmission is intercepted, the original biometric information cannot be reconstructed from the transmitted authentication data.
2Object-affected harmful factors
If biometric information is encrypted or transformed before transmission, then security is improved, but false negatives increase due to variations in biometric data
Solution Approach 1:
The patent performs preliminary normalization and feature extraction on the biometric information before transformation. By preprocessing the biometric data to remove device-specific variations and standardize the representation, the system ensures that subsequent hashing or encryption operates on consistent data, reducing false negatives caused by minor biometric variations.
Solution Approach 2:
The patent changes the parameters of the biometric information by extracting specific features and normalizing them before transformation. This parameter transformation converts raw biometric data into a standardized format that is less sensitive to minor variations, thereby improving authentication reliability while maintaining security through subsequent hashing or encryption.
3Adaptability or versatility
If each electronic device individually manages biometric information, then device independence is achieved, but complexity increases when managing multiple devices
Solution Approach 1:
The patent segments the authentication system into two parts: local biometric template storage in each device and centralized authentication server. Each device independently manages its own biometric templates locally, while the server handles the authentication logic. This segmentation allows device independence to be maintained while reducing management complexity through centralized coordination.
Solution Approach 2:
The patent creates a universal authentication mechanism that works across multiple devices. By using standardized transformation methods (hashing or encryption) and a common authentication server, the system provides multi-device functionality without requiring complex device-specific management. The same authentication process can be used across different devices, simplifying the overall management.
Data Source
AI summary
Certain embodiments of the disclosure relate to an electronic device for authenticating a user by using user's biometric information, and an operating method thereof. For example, an electronic device according to an embodiment may include: a communication circuit; a biometric sensor; and a processor operatively connected with the communication circuit and the biometric sensor, and the processor is configured to: obtain first biometric information of a user by using the biometric sensor; generate second biometric information for authenticating the user, based on concatenation of the first biometric information and unique information corresponding to the user; and transmit the second biometric information to an authentication server through the communication circuit, where the authentication server authenticates fourth biometric information by comparing the fourth biometric information to the second biometric information, and where the fourth biometric information is generated based on concatenation of third biometric information of the user and the unique information.