Biometric Handheld Device for Secure Personal Data Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems for secure personal data access and storage, particularly in healthcare and finance, face challenges such as inadequate security, vulnerability to phishing and 'man-in-the-middle' attacks, and the need for multiple hardware tokens, which can be lost or stolen, leading to breaches and fraud. Additionally, existing solutions do not effectively integrate with modern smartphones and do not provide adequate authentication of the user's physical presence.

Innovation Solution

A handheld device with integrated bio-sensors for multi-level user authentication, a secure encrypted mass memory, and emergency call features, allowing for secure access to sensitive data, including medical and financial records, while ensuring only the authenticated user can access and manage their data, and automatically backing up important information to prevent data loss during device changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional hardware tokens are used for authentication, then user identification is provided, but the tokens can be lost or stolen leading to security breaches and fraud

Engineering Contradiction:
Improveauthentication securityVSAvoidphishing and man-in-the-middle attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces physical hardware tokens with a biometric-based authentication system using optical sensors to capture iris patterns. This substitution eliminates the mechanical/physical token that can be lost or stolen, replacing it with a biological characteristic that is inherently secure and difficult to replicate.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces an intermediary verification process where the system compares the captured iris pattern against stored reference patterns through multiple validation stages. This intermediary biometric verification layer prevents direct access even if other authentication factors are compromised, blocking phishing and man-in-the-middle attacks.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple hardware tokens are required for authentication, then security is enhanced, but device complexity and risk of loss increase

Engineering Contradiction:
Improveauthentication securityVSAvoidnumber of tokens required
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple authentication factors into a single integrated system. Instead of requiring separate physical tokens, the system combines biometric verification (iris scanning) with digital credential validation in one unified authentication process, eliminating the need for multiple discrete devices.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal authentication system where the biometric scanner serves multiple functions: identification, verification, and authorization. This single multi-functional device replaces the need for multiple specialized tokens, reducing complexity while maintaining or enhancing security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If existing authentication systems are used, then user access is enabled, but integration with modern smartphones is inadequate

Engineering Contradiction:
Improveaccess to personal dataVSAvoidintegration with smartphones
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent implements a dynamic authentication system that adapts to different devices and contexts. The biometric authentication mechanism can operate across various platforms including smartphones, tablets, and computers, adjusting its implementation to suit each device's capabilities while maintaining consistent security standards.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent transitions authentication from a two-dimensional interface (keyboard entry, card insertion) to a three-dimensional biometric measurement (optical iris scanning). This dimensional change enables deeper verification capabilities and better integration with modern devices that have advanced sensors and processing capabilities.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

4Ease of operation

If physical tokens are used for data access, then portability is achieved, but vulnerability to theft and loss remains

Engineering Contradiction:
Improveportability of access deviceVSAvoidsecurity against loss and theft
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces the mechanical physical token (USB drive, smart card) with a biometric-based digital access system. The authentication is tied to the user's biological characteristics rather than a physical object, maintaining portability through software implementation while eliminating the security vulnerabilities of physical tokens.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS8401875B2Secured personal data handling and management system
Publication Date: 2013.03.19 OS - NEW HORIZON PERSONAL COMPUTING SOLUTIONS
  • US8401875B2 patent drawing
  • US8401875B2 patent drawing
  • US8401875B2 patent drawing

AI summary

A system, method and personal apparatus for managing highly secured personal data is provided. The system and the personal apparatus are complementary, both providing highly secured personal data, mass, safe and secured data access, storage and management solutions, while serving the needs for managing and exchanging secured personal data with external services and data providers and with other such highly secured personal data users. The apparatus may be used independently of the system by securely connecting the apparatus to service providers. The apparatus, which is uniquely identified with a unique user, includes a sensor module comprising a plurality of biometric sensors for reading a plurality of personal biological identification parameters of the user and an authentication unit for positive authentication of the user's personal biological identification parameters stored in the authentication unit. The system is designed to securely serve the needs of conducting and maintaining multiple users' personal data access, storage, updating and retrieval capabilities. The method supports the safe and secured operation of the apparatus by its owner, in order to get access to the system and to exchange highly secured personal data with external pre-registered service providers and with other registered system users.