Biometric Authentication Terminal with Local Matching and Server Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional server-based biometric authentication methods require re-acquisition and re-transmission of biometric information when matching fails, leading to inefficiencies and potential security vulnerabilities.
Innovation Solution
An apparatus and method for biometric registration and authentication that generates a registration or authentication target biometric template, encrypts it using user identification information, and transmits it to a server, where it is verified using public-key encryption, reducing the need for re-transmission and enhancing security by ensuring only registered terminals can access biometric data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric information is transmitted to server for each authentication, then authentication can be performed, but communication overhead and time consumption increase when re-transmission is needed
Solution Approach 1:
The patent performs biometric matching locally at the terminal device before transmitting results to the server. This preliminary action allows the system to determine authentication outcomes without requiring server-side processing for failed cases, thereby reducing communication overhead and authentication time while maintaining reliability through subsequent server verification when needed.
Solution Approach 2:
The patent extracts the biometric matching function from the server and implements it at the terminal device. This separation allows the terminal to independently perform initial authentication attempts, reducing the need for repeated server communications and minimizing time loss when authentication fails.
2Speed
If biometric information is stored in terminal, then access speed improves, but security risks increase from unauthorized access
Solution Approach 1:
The patent introduces an intermediary verification mechanism where the server validates the terminal's authentication results. The server acts as a mediator that verifies the authenticity of locally-stored biometric templates through cryptographic verification, enabling fast local access while preventing unauthorized access through server-side validation.
Solution Approach 2:
The patent transforms biometric information into cryptographic parameters (hash values, encrypted templates) that can be rapidly processed locally while maintaining security. By changing the representation of biometric data into mathematical forms suitable for cryptographic operations, the system achieves both fast local access and secure verification through parameter-based authentication.
3Reliability
If encryption is applied to biometric data, then security improves, but computation complexity increases
Solution Approach 1:
The patent extracts the computationally intensive encryption and decryption operations from the terminal and relocates them to the server. The terminal only performs lighter operations such as hashing biometric data and verifying server-provided cryptographic challenges, significantly reducing computation complexity at the terminal while maintaining strong encryption-based security through server-side processing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An apparatus and method for registering biometric information and an apparatus and method for biometric authentication are provided. The method of registering biometric information according to one embodiment includes generating a registration target biometric template based on biometric information of a user, transmitting a biometric information registration request including the registration target biometric template to a server, acquiring transaction information based on the biometric information registration request from the server through one or more communication interfaces, generating an electronic signature for the transaction information using a private key, transmitting the electronic signature for the transaction information to the server through the one or more communication interfaces, and acquiring a registration result for the registration target biometric template based on a verification result for the electronic signature from the server through the one or more communication interface.