Biometric Authentication Baselines Without Storing Raw Identity Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The migration of financial services to the cloud poses security risks due to potential leaks of user authentication data, necessitating a robust authentication system that ensures user identity while protecting privacy.
Innovation Solution
An authentication system comprising a user device, client device, provider authentication device, and storage device, which processes biometric data into tokenized form, concatenates with user identifiers to create authentication baseline data, and erases raw biometric data, ensuring zero-knowledge proof and privacy protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user authentication data is stored in cloud-based authentication system, then authentication functionality is improved and service availability is enhanced, but security risk increases due to potential data leaks and third-party identification
Solution Approach 1:
The patent extracts and removes the raw biometric data from the authentication system after it has been used to generate the authentication baseline. The system only retains the authentication baseline (which is transformed biometric data) and never stores or transmits the original biometric data, thereby eliminating the security vulnerability while maintaining authentication functionality.
Solution Approach 2:
The patent transforms the biometric data through parameter changes - converting raw biometric data into an authentication baseline through irreversible transformation. This parameter change ensures that the authentication baseline cannot be reverse-engineered to reveal the original biometric information, thus reducing security risk while preserving authentication capability.
2Measurement precision
If raw biometric data is stored for authentication verification, then authentication accuracy is improved, but privacy protection deteriorates due to potential data breaches
Solution Approach 1:
The system extracts and removes the raw biometric data immediately after it is used to create the authentication baseline. The authentication baseline retains the essential characteristics needed for accurate verification while the original biometric data is permanently deleted, thus maintaining authentication accuracy without compromising privacy.
Solution Approach 2:
The patent creates a transformed copy of the biometric data (the authentication baseline) that contains the necessary information for authentication verification but does not reveal the original biometric information. This copying approach allows accurate authentication while protecting the privacy of the original biometric data.
3Reliability
If authentication system processes and stores detailed biometric information, then user verification reliability is improved, but system complexity increases due to data protection requirements
Solution Approach 1:
The system automatically extracts and removes the raw biometric data after authentication baseline generation. This automated extraction and deletion process simplifies the system architecture by eliminating the need for complex data protection mechanisms, access controls, and security protocols that would be required to protect stored biometric data.
Solution Approach 2:
The transformation of biometric data into an authentication baseline through irreversible parameter changes simplifies the system by creating a data structure that inherently protects privacy. The authentication baseline cannot be reverse-engineered, eliminating the need for complex encryption and key management systems while maintaining verification reliability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An authentication system has a user device, a client device, a provider verification device, and a storage device. The authentication system operates user authentication operation without preserving of biometric data based on zero-knowledge proof, such that exchange of sensitive or personal data involved in cloud services can be de-identified, achieve simplification for user authentication operation and reduce risk of authentication information required for user authentication operation being leaked to or identified by a third party. An authentication method and computer readable medium may be implemented by the user device, the client device, the provider authentication device, and the storage device of the authentication system.