Biometric Smart Card With Session-Based Blockchain Key Regeneration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication systems in smart cards and devices rely on static cryptographic keys, which are susceptible to loss, theft, or unauthorized duplication, and do not address secure authentication for distributed ledger or blockchain networks, nor provide session-based key regeneration or advanced error correction.
Innovation Solution
A biometric blockchain card that regenerates a cryptographic private key from a fresh biometric sample for each session through feature extraction, salting, hashing, and error correction, using a pipeline that does not store static keys or raw biometric templates, enabling secure authentication and transaction verification via a communication interface to a private blockchain ledger.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static cryptographic keys are used in traditional smart cards, then device complexity is reduced and ease of operation is improved, but security and reliability deteriorate due to susceptibility to loss, theft, or unauthorized duplication
Solution Approach 1:
The patent implements dynamic key generation where cryptographic keys are not static but are regenerated based on fresh biometric samples for each authentication session. The key derivation function processes new biometric data to produce unique keys, making the authentication system adaptive and resistant to replay attacks. This dynamic approach transforms the static key model into a living, evolving security mechanism.
Solution Approach 2:
The patent introduces a key derivation function as an intermediary between the biometric sample and the cryptographic key. This intermediary component processes the biometric data through hashing and salting mechanisms to generate cryptographic keys, separating the biometric storage from the cryptographic operations. The intermediary protects raw biometric templates while enabling secure key generation without storing sensitive data.
2Reliability
If biometric templates are stored on the device for authentication, then authentication speed is improved, but security deteriorates due to risk of template theft or unauthorized access
Solution Approach 1:
The patent extracts and separates the sensitive biometric template storage from the authentication process. Instead of storing raw biometric templates on the device, the system stores only non-sensitive helper data and salt values. The actual biometric matching and key generation occur dynamically during authentication, removing the security risk associated with stored templates while maintaining authentication functionality.
Solution Approach 2:
The patent performs preliminary actions by storing salt values and helper data in advance during device initialization or enrollment. These pre-stored elements enable rapid key derivation during authentication without requiring storage of the actual biometric templates. The preliminary preparation of non-sensitive data allows fast authentication while maintaining security, as the critical biometric information is never persisted.
3Reliability
If multiple biometric samples are stored for error correction, then authentication reliability is improved, but device complexity and data management burden increase
Solution Approach 1:
The patent changes the parameters of biometric data management by transitioning from storing multiple raw biometric samples to storing processed helper data and salt values. The system maintains error correction capability through the inclusion of salt values that are combined with fresh biometric samples during authentication. This parameter transformation reduces data management complexity while preserving reliability, as the system works with smaller, more manageable data structures.
Data Source
AI summary
A biometric blockchain system is provided with a card body dimensioned to approximate a standard credit card, a biometric sensor module embedded in the card body and configured to capture fingerprint or facial data, embedded electronics including at least one microcontroller unit, a cryptographic processor, and non-volatile memory, communication interfaces including at least one of near field communication or bluetooth low energy or ultra-wide band, and a power source. The biometric sensor module captures biometric data, the embedded electronics generate a cryptographic key from the biometric data using a biometric key derivation function, and the cryptographic key enables access to a private blockchain ledger for secure interactions among users with compatible cards. The card body comprises a core layer comprising a substrate film, a core sheet comprising a component section with an antenna structure and a system-in-package, and a crosslinked polymer composition disposed on both sides of the substrate film.