Biometric IC Card Authentication for Secure Child Card Issuance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing issuing devices for child IC cards require mechanisms to acquire biological information from parent IC cards for authentication, which can be inefficient and may compromise security.
Innovation Solution
An IC card system that includes a sensor for acquiring biological information, a storage unit for templates and data, and a processor for authentication, allowing the issuance of a child IC card without directly using the parent's biological information, thus enhancing security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a mechanism for acquiring biological information from parent IC card is used, then authentication function is achieved, but device complexity increases
Solution Approach 1:
The patent extracts the biological information acquisition function from the issuing device and relocates it to the IC card itself. The IC card now contains a biological information acquisition unit that can capture fingerprints, facial images, or other biometric data directly, eliminating the need for external devices to acquire this information during issuance.
Solution Approach 2:
The patent introduces a biological information management unit as an intermediary between the acquisition unit and the authentication system. This management unit securely stores, processes, and controls access to biological information templates, acting as a mediator that simplifies the overall system architecture while maintaining security.
2Ease of operation
If parent's biological information is directly used for child IC card issuance, then issuance process is simplified, but security is compromised
Solution Approach 1:
The patent creates a cryptographic copy or representation of biological information in the form of templates rather than using actual biological data. These templates are mathematical representations that enable authentication without exposing or transmitting sensitive biological information, thus simplifying the issuance process while maintaining security.
Solution Approach 2:
The patent implements preliminary security measures by encrypting and protecting biological information templates before they are stored or transmitted. The system pre-establishes security protocols and access controls that prevent unauthorized access or misuse of biological data throughout the issuance process.
3Reliability
If biological information is stored and processed externally, then authentication is achieved, but information loss risk increases
Solution Approach 1:
The patent embeds the biological information management unit within the IC card itself, creating a nested structure where the acquisition unit, template storage, and authentication functions are all contained within the card. This self-contained architecture eliminates the need for external storage and processing of sensitive biological data.
Solution Approach 2:
The patent implements local processing and storage of biological information within the IC card's secure environment. Each IC card maintains its own biological information templates and authentication capabilities independently, ensuring that sensitive data remains localized and protected rather than being centralized in external systems.
Data Source
AI summary
According to an embodiment, an IC card associated with a parent IC card includes a sensor, a first storage unit, a second storage unit, a communication unit, and a processor. A sensor is configured to acquire biological information. The first storage unit is configured to store a template with which the biological information is verified. The second storage unit is configured to store second data related to first data stored in the parent IC card. The communication unit is configured to transmit and receive data to and from a host device. The processor is configured to authenticate a user based on a verification result of the biological information and the template in accordance with a command from the host device, and transmit at least some of the second data to the host device if the authentication of the user is successful.