Biometric Identifier Processing with Centralized Consent Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication systems require explicit user consent for each use of biometric identifiers, which is burdensome, especially in casual photography scenarios where multiple individuals are involved.
Innovation Solution
A biometric identifier management system that includes a camera device and a consent management server, where the camera device captures images, detects faces, and extracts biometric features only if consent is pre-obtained and managed centrally, reducing the need for repeated user consent by using a consent management server to store and verify user consent information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit consent is obtained each time biometric authentication is performed, then compliance with privacy regulations is ensured, but user burden increases significantly
Solution Approach 1:
The system performs preliminary action by obtaining and storing user consent in advance before biometric authentication is needed. The consent management server stores consent information associated with user identifiers, allowing the camera device to verify consent status without requiring real-time consent requests during authentication operations.
Solution Approach 2:
The consent management server acts as an intermediary between users and the biometric authentication system. It stores and manages consent information centrally, receiving verification requests from camera devices and returning consent status without requiring direct user interaction at the time of authentication.
2Reliability
If consent is obtained for each photo taken, then individual privacy rights are protected, but the authentication process becomes inefficient
Solution Approach 1:
Consent is obtained and stored in advance before authentication operations. The consent management server maintains a database of consent information that can be quickly verified during authentication without requiring real-time user interaction, thus protecting privacy rights while maintaining authentication efficiency.
Solution Approach 2:
The system enables self-service by allowing users to provide consent once, which then automatically applies to future authentication operations. The consent management server autonomously verifies consent status without requiring repeated user actions, making the system both privacy-compliant and efficient.
3Measurement precision
If biometric identifiers are extracted from all images, then authentication accuracy is maintained, but privacy violations occur without consent
Solution Approach 1:
The system implements feedback by checking consent status before extracting biometric identifiers. The camera device receives consent verification results from the consent management server and uses this feedback to determine whether to proceed with biometric feature extraction, ensuring authentication accuracy is maintained only when consent is present.
Solution Approach 2:
The system applies local quality by treating each individual's consent status differently. Biometric identifier extraction is performed only for individuals who have provided consent, while images of individuals without consent are processed differently, thus maintaining authentication accuracy for authorized subjects while preventing privacy violations.
Data Source
Figure 1
Figure 2
Figure 3A~4A
AI summary
An information processing apparatus comprises an obtaining means that obtains person information that is identification information assigned to each person in a group of people included in a captured image; a communication means that communicates with a server storing information identifying a consenting person that consents to use of a biometric identifier; a determination means that determines whether the person included in the captured that corresponds to the obtained person information is a person who consents to the use of the biometric identifier, based on the received consenting person information from the server; and a processing means that executes processing which uses the biometric identifier of the person in accordance with a consent determination by the determination means.