Biometric Authentication Using Encrypted ID and Password Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing biometric authentication systems, users are required to input separate ID information, which can lead to lengthy authentication processes and risks exposure of biometric data when decrypting password information for comparison with database entries.
Innovation Solution
An electronic device generates ID and password information from input biometric data using encryption processes, allowing for authentication without separate ID input by comparing encrypted numerical information based on similarity thresholds, thereby reducing the need for decryption and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If separate ID information is required for biometric authentication, then authentication accuracy is improved, but authentication time increases and user convenience deteriorates
Solution Approach 1:
The patent merges ID information and password information into a single biometric authentication process. The server generates both ID and password from the same biometric data through different encryption processes, allowing authentication to be performed using only biometric information without requiring separate ID input, thus reducing authentication time while maintaining accuracy
Solution Approach 2:
The biometric information serves multiple functions simultaneously - it generates both identification data and authentication credentials. The same biometric input is used to create ID information through first encryption and password information through second encryption, eliminating the need for separate ID systems and simplifying the authentication workflow
2Measurement precision
If password information is decrypted for comparison with database entries, then authentication accuracy is improved, but security deteriorates due to risk of biometric information exposure
Solution Approach 1:
The patent changes the parameter state of password information from decrypted to encrypted form throughout the authentication process. The server performs encryption operations on biometric data to generate encrypted password information, which is then compared with stored encrypted credentials without requiring decryption, thus maintaining authentication accuracy while preventing biometric information exposure
Solution Approach 2:
The patent introduces encrypted password information as an intermediary between biometric data and authentication verification. Instead of directly comparing decrypted biometric data with database entries, the system uses encrypted transformations of biometric data as the comparison medium, which maintains security while enabling accurate authentication
3Measurement precision
If all password information is compared with input password information, then authentication accuracy is improved, but processing time increases
Solution Approach 1:
The patent segments the authentication process into two stages: first generating ID information to identify candidate users, then comparing password information only among those candidates. This segmentation reduces the number of comparisons required from all database entries to a small subset, significantly improving processing speed while maintaining authentication accuracy through the two-stage verification process
Data Source
AI summary
An electronic device is provided. The electronic device includes a communication interface including circuitry, a memory, and a processor which, based on receiving ID information generated by performing a first encryption process on biometric information and password information generated by performing a second encryption process on the biometric information from an external electronic device through the communication interface, is configured to control the electronic device to: store the ID information and the password information in the memory. The processor, based on receiving first ID information and first password information from the external electronic device, is configured to control the electronic device to: acquire at least one candidate ID information from the memory based on the first ID information, compare password information corresponding to each of the acquired at least one candidate ID information with the first password information to identify one of the candidate ID information, and perform user authentication based on the identified candidate ID information and corresponding password information.