Biometric Identity Identifier for Cross-Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity authentication methods are limited as they are unique only within specific applications, dependent on third-party issuers, not anonymizable for client developers, and not traversable across multiple applications, lacking a unified and user-controlled visual representation of identity across the internet.
Innovation Solution
A system and method that utilizes biometric samples to generate unique identifiers, encrypting them for secure storage and access, allowing seamless role-based access to digital artifacts across applications, ensuring uniqueness, user control, and anonymization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional identifier systems (UIDs, usernames, email addresses) are used for user authentication, then user registration and authentication can be implemented within specific applications, but the identifiers are unique only within that application and cannot be traversed across multiple applications
Solution Approach 1:
The patent implements a universal identifier system where a single cryptographic identifier (derived from biometric data) can be used across multiple applications and services. The identifier is generated once from the user's biometric data and can be presented to any application that recognizes it, eliminating the need for separate identifiers for each application while maintaining security and privacy.
Solution Approach 2:
The patent introduces a cryptographic intermediary layer that mediates between the user's biometric data and the applications. The biometric data is converted into a cryptographic identifier through a one-way function, and this identifier serves as the intermediary that applications can verify without accessing the actual biometric data, enabling cross-application recognition while preserving privacy.
2Reliability
If government-issued identifiers (social security number, driver's license number) are used to uniquely represent a person, then the identifier is unique and verifiable, but the identifier may be issued by an agency using questionable standards and may not be anonymized for client application developers
Solution Approach 1:
The patent creates a cryptographic copy or representation of the user's identity that can be used instead of the actual biometric data or government-issued identifiers. This cryptographic identifier replicates the uniqueness and verification properties of traditional identifiers while being anonymized and privacy-preserving, as it cannot be reverse-engineered to reveal the original biometric data.
Solution Approach 2:
The patent extracts the essential property of identity (uniqueness and verifiability) from the biometric data through a one-way cryptographic function, separating the identification capability from the sensitive personal information. This extraction process creates an identifier that maintains reliability for authentication purposes while removing the privacy risks associated with storing or transmitting actual biometric data.
3Adaptability or versatility
If user biometric data is processed to generate unique identifiers, then the identifier is self-issued by the user and unique across the internet, but the system complexity increases due to biometric processing and cryptographic operations
Solution Approach 1:
The patent performs the complex biometric processing and cryptographic identifier generation as a preliminary action during the initial user registration phase. Once the cryptographic identifier is generated from the biometric data, it can be stored and reused across multiple applications without requiring repeated biometric processing, thereby reducing the complexity burden to a one-time event rather than a continuous requirement.
Data Source
AI summary
A system and method for immutably affixing one or more Unique-Numbers (N1-Nn) associated with one or more users and one or more roles (R1-Rn) associated with each user from the one or more users to a digital artifact (A1), rendering the digital artifact (A1) in a client application (C1), and provisioning the one or more users with role-based access to the digital artifact (A1). The method includes steps for registering a set of users by capturing biometric samples associated with each user from the set of users. Further, the method includes steps for immutably affixing one or more Unique-Numbers (N1-Nn) associated with one or more users and one or more roles (R1-Rn) associated with each user from the one or more users to a digital artifact (A1). Further, the method includes steps for provisioning a target user (U1t) with role-based access to the digital artifact (A1).