Biometric Device Authentication for Low-Overhead Multi-Device Sync
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The synchronization of user information across multiple electronic devices is complex and resource-intensive, particularly when individual devices are used by both single users and multiple users, often requiring cloud-based solutions that consume significant network resources.
Innovation Solution
A biometric authentication method using biometric signature information and distributed ledger-based blockchain nodes to authenticate and synchronize electronic devices, where biometric hash information is generated and verified across devices without storing sensitive user biometric information centrally.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud-based synchronization is used to synchronize user information across multiple electronic devices, then user information can be synchronized across devices, but network resources are consumed significantly and system complexity increases
Solution Approach 1:
The system segments the centralized cloud synchronization process into distributed peer-to-peer authentication interactions. Each electronic device independently performs biometric authentication with other devices using distributed ledger technology, eliminating the need for continuous cloud-based synchronization and reducing network resource consumption.
Solution Approach 2:
Electronic devices perform self-authentication using stored biometric information and cryptographic keys. The devices autonomously verify each other's identities through biometric hash comparison without requiring external cloud service intervention, enabling devices to serve themselves in the authentication process.
2Reliability
If cloud-based authentication is used for each device service, then device security is maintained, but the authentication process becomes complex and resource-intensive
Solution Approach 1:
The system merges multiple separate authentication processes into a single unified biometric authentication. Instead of requiring separate logins for each device service, the user's biometric information serves as a universal key that authenticates the user across all connected devices simultaneously, simplifying the overall authentication process while maintaining security.
Solution Approach 2:
The biometric authentication system provides universal access across multiple device types and services. A single biometric credential (fingerprint, face, or iris) can authenticate the user on smartphones, tablets, wearables, and other electronic devices, eliminating the need for device-specific authentication methods.
3Reliability
If biometric information is stored centrally on a server for authentication, then authentication can be performed, but user privacy and security are compromised
Solution Approach 1:
The system extracts and processes only the essential authentication elements (biometric hash values and cryptographic keys) while leaving the sensitive raw biometric information stored locally on individual devices. The server stores only the hashed versions and public keys, not the actual biometric data, thereby maintaining authentication functionality while protecting user privacy.
Solution Approach 2:
Different parts of the authentication system have different data storage characteristics. Sensitive biometric templates are stored locally on devices with strict access controls, while only non-sensitive hashed versions and public keys are stored centrally on servers. This local differentiation ensures that even if the server is compromised, raw biometric information remains protected on user devices.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided are an electronic device and a control method for a system for authenticating the electronic device by using biometric information. The control method includes the operation in which: generating, by a first electronic apparatus , biometric signature information based on first biometric information for authentication of an electronic apparatus and identification information of the first electronic apparatus; transmitting, by the first electronic apparatus, the generated biometric signature information to a server, and broadcasting, by the first electronic apparatus, identification information of the first electronic apparatus; receiving, by a second electronic apparatus, the broadcast identification information, and transmitting, by the second electronic apparatus, the received identification information to the server; transmitting, by the server, the biometric signature information corresponding to the identification information to the second electronic apparatus; generating, by the second electronic apparatus, biometric hash information based on second biometric information acquired by the second electronic apparatus and the biometric signature information, and transmitting, by the second electronic apparatus, the generated biometric hash information and the identification information to the server; and authenticating, by the server, the second electronic apparatus based on the biometric hash information and the identification information.