Biometric Authentication Across Devices Without Server Data Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user biometric systems face security risks due to the potential hacking or exposure of biometric information, limiting their functionality and posing a threat to user privacy.
Innovation Solution
A user authentication system that stores biometric information only on a user's portable electronic device, using wireless communication and ultrasonic signals to authenticate users across different devices without storing raw data on external servers, ensuring secure and efficient authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user biometric information is stored on a server, then authentication can be performed across multiple devices, but security risks increase due to potential hacking and personal information leakage
Solution Approach 1:
The patent divides the authentication system into two parts: biometric template extraction and authentication verification. The extraction is performed locally on the user's device, while only encrypted authentication data is transmitted to the server. This segmentation ensures that sensitive biometric information remains on the user's device, reducing security risks while maintaining cross-device authentication capability.
Solution Approach 2:
The patent introduces an intermediary mechanism where the server stores only encrypted authentication results rather than raw biometric data. The encrypted data acts as a mediator that enables verification without exposing sensitive information, thus maintaining both security and authentication functionality across devices.
2Reliability
If manual manipulation is required for authentication, then security can be verified, but user convenience decreases and authentication time increases
Solution Approach 1:
The patent implements self-service authentication by enabling the user's device to automatically extract biometric templates and perform authentication verification without requiring manual intervention. The device autonomously compares biometric data with stored templates and transmits authentication results, eliminating the need for users to manually input credentials while maintaining secure verification.
Solution Approach 2:
The patent replaces manual authentication operations with automated biometric recognition systems. Instead of requiring users to manually enter passwords or PINs, the system uses automatic biometric data capture, template matching, and verification processes, thereby improving both convenience and speed while maintaining security through automated verification protocols.
3Adaptability or versatility
If biometric information is transmitted to external devices, then authentication can be performed, but the risk of information exposure increases
Solution Approach 1:
The patent extracts only the necessary authentication elements from the biometric information and transmits only encrypted authentication results to external devices. The raw biometric data remains on the user's device, while only verified authentication outcomes are transmitted, thereby reducing information exposure risk while maintaining authentication functionality.
Solution Approach 2:
The patent transforms biometric information into encrypted authentication data before transmission. By changing the parameter state from raw biometric data to encrypted verification results, the system maintains authentication functionality while significantly reducing the risk of information exposure during transmission and storage.
Data Source
AI summary
The present invention relates to an electronic device for performing user authentication on a user by using user biometric information in response to a request made by a user authentication request device, wherein the user authentication request device transmits data obtained by sensing the body of a user adjacent thereto to the electronic device (a user authentication device) of the user to request user authentication, and receives authentication result data from the user authentication device.


