Biometric E-Signature Token via Password Authenticated Key Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current electronic signature systems face challenges in ensuring the secure authentication of signing parties and protection of biometric data in internet-centric transactions, particularly in cloud-based and blockchain-based systems, where data integrity and confidentiality are at risk due to the vulnerability of digital signatures to fraud and the need for efficient authentication mechanisms.

Innovation Solution

A biometrics-based electronic signature (BBE-Sig) system that generates a biometric-based electronic signature token by encrypting a biometric sample and agreement hash using a password authenticated key exchange protocol, providing pre-authorization for smart contracts and ensuring the identity of the signing party through a cryptographically bound biometric sample and digital signature.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional digital signature schemes are used for electronic authentication, then the authentication process is simple and fast, but the security and confidentiality of biometric data are compromised

Engineering Contradiction:

Improvesecurity and confidentialityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication process into distinct phases: biometric data collection, hash generation, encryption key derivation, and digital signature creation. This segmentation allows each component to be optimized independently, maintaining security while managing complexity through modular design

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces cryptographic hash functions and encryption keys as intermediaries between the biometric data and the digital signature. These intermediaries transform sensitive biometric information into secure cryptographic representations, enhancing security without requiring direct handling of raw biometric data

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If biometric data is encrypted using password authenticated key exchange protocols, then data confidentiality is enhanced, but the authentication process becomes more complex and time-consuming

Engineering Contradiction:

Improvedata confidentialityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary actions by pre-generating cryptographic hash values from biometric data and pre-establishing encryption keys through password authenticated key exchange protocols before the actual authentication transaction. This preparation reduces the computational burden during the authentication moment, minimizing time loss

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent changes the parameter representation of biometric data by transforming it through hash functions into fixed-length cryptographic values. This parameter transformation allows efficient cryptographic operations while maintaining the confidentiality and uniqueness of the original biometric information

Inventive Principle:

Principle #35Parameter changes

3Reliability

If cryptographic hash functions and encryption keys are used to protect biometric samples, then origin authenticity is improved, but the computational overhead and processing time increase

Engineering Contradiction:

Improveorigin authenticityVSAvoidcomputational energy

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent replaces direct mechanical handling and storage of biometric samples with cryptographic substitutions. Instead of protecting raw biometric data through physical or mechanical means, the system uses hash functions and encryption keys to provide origin authenticity, reducing the need for complex physical security infrastructure and associated energy consumption

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12165141B1Biometrics-based e-signatures for pre-authorization and acceptance transfer

Publication Date: 2024.12.10 WELLS FARGO BANK NA

AI summary

A method includes receiving an agreement associated with a signing party by a computing system, receiving a biometric sample captured from the signing party by the computing system, generating a hash of the agreement by the computing system, and receiving a secret knowledge factor by the computing system. The method further includes generating an encryption key using the secret knowledge factor as an input to a password authenticated key exchange protocol by the computing system and generating a biometric-based electronic signature token by encrypting the biometric sample and the hash of the agreement with the encryption key by the computing system. The method further includes generating a smart contract based on the agreement by the computing system. The smart contract includes terms of the agreement and the biometric-based electronic signature token. The biometric-based electronic signature token providing biometric-based pre-authorization to be initiated by the smart contract.