Biometric Authentication via Remote Identity-Decoupled Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Companies are reluctant to implement biometric security systems due to the need to collect and store biometric information, which poses challenges in maintaining and securing this data, and complying with regulations such as GDPR, leading to a reluctance to use biometric authentication services.
Innovation Solution
A biometric service provider handles the storage and maintenance of biometric information, allowing entities to use biometric services without storing the data themselves, using identifier numbers generated by the server, and ensuring compliance with regulations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If companies implement biometric security systems to enhance authentication capability, then security reliability is improved, but the complexity of data storage and regulatory compliance increases
Solution Approach 1:
The patent introduces a third-party biometric service provider as an intermediary that handles all biometric data storage and management. This mediator absorbs the complexity of maintaining secure databases and regulatory compliance, allowing client companies to use biometric authentication without building their own infrastructure. The service provider acts as a specialized intermediary that manages the technical and regulatory burdens while clients focus on their core business functions.
2Ease of operation
If companies collect and store biometric information to enable authentication, then authentication capability is improved, but the risk of data breaches and regulatory liabilities increases
Solution Approach 1:
The patent extracts the biometric data storage function from client companies and relocates it to a dedicated third-party service provider. By taking out the data storage responsibility, client companies no longer hold biometric information in their own systems, thereby eliminating the data breach risks and regulatory liabilities that would otherwise attach to their infrastructure. The extraction separates the authentication service capability from the data storage burden.
3Reliability
If companies maintain physical infrastructure for biometric data storage to ensure compliance, then regulatory compliance is improved, but the cost and resource requirements increase
Solution Approach 1:
The patent employs a universal biometric service provider that serves multiple client companies through a single centralized infrastructure. Rather than each company building and maintaining its own compliant storage system, the service provider's multi-functional platform handles biometric data for numerous clients, achieving regulatory compliance through one shared system. This universality eliminates redundant physical infrastructure resources across the industry.
Data Source
AI summary
Methods and apparatus are described which allow different companies, individuals and/or government entities to use biometric security and/or access systems or services without having to store biometric information for individuals on a ongoing basis and/or to perform a comparison between recently captured biometric information corresponding to an individual seeking access to a location or a service. In various embodiments a biometric server is used to control access to stored biometric information where the server and/or database storing the biometric server are located remotely, e.g., at a central location, physically remote from the sites where access to locations and/or services are provided. The storage and use of the biometric information can be and often is implemented and controlled by a separate company from the company using the server to determine whether access or a service should be provided to an individual.