Biometric Authentication Architecture Without Central Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity authentication systems using biometric information face security risks due to potential hacking and require manual input of identification codes, which is inconvenient.
Innovation Solution
An identity authentication system that stores biometric information on a user's device, utilizing machine learning to compare sensed biometric data with pre-stored information, allowing non-face-to-face and contactless authentication without manual code input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric information is stored on a server, then authentication can be performed, but security risks increase due to potential hacking and data leakage
Solution Approach 1:
The authentication system is divided into multiple components: the identity authentication device that stores biometric templates, the request device that captures biometric data, and the server that facilitates authentication without storing sensitive data. This segmentation distributes security responsibilities and reduces the risk concentration.
Solution Approach 2:
The server acts as an intermediary that receives authentication requests and coordinates between the request device and the identity authentication device, but does not store biometric information. This mediator role allows authentication to occur without centralized storage of sensitive data.
2Ease of operation
If manual identification code input is required for authentication, then device identification is possible, but user convenience deteriorates due to troublesome repeated input
Solution Approach 1:
The system enables self-service authentication where the user's biometric data automatically identifies their device without requiring manual code input. The request device captures biometric data, the server processes authentication, and the user's device is automatically identified and authenticated.
Solution Approach 2:
The manual mechanical process of typing identification codes is replaced with an automated biometric recognition system. The system substitutes the mechanical input method with optical/biometric sensing and automated processing, eliminating the need for manual code entry.
3Ease of operation
If face recognition is implemented for authentication, then contactless authentication is achieved, but system complexity increases due to machine learning requirements
Solution Approach 1:
The system merges the biometric recognition functionality into the server's existing machine learning infrastructure. The server combines face recognition algorithms with its authentication logic, allowing the authentication device to leverage existing computational resources rather than requiring separate complex systems.
Data Source
AI summary
Provided are a method of deleting personal information of a user and an identity authentication system. A method, performed by a server, of deleting personal information may include receiving a first signal for deleting personal information of a user, the personal information being stored in an identity authentication system, deleting identification information of an identity authentication device corresponding to the user, and setting a flag value for deleting registered biometric data, and based on the flag value, transmitting, to the identity authentication device, a second signal for deleting the registered biometric data. A method, performed by an identity authentication device, of deleting personal information may include receiving, from a server, a second signal for deleting registered biometric data, and deleting the registered biometric data based on the second signal, wherein the second signal may include a flag value for deleting the registered biometric data.