Biometric Identity Verification With User-Controlled Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification and management systems fail to meet privacy regulations, particularly GDPR, and rely on third parties to hold or disseminate personal data, leading to privacy concerns and data misuse.
Innovation Solution
A secure identification verification system, PIMS™, that allows users to manage and encrypt their own identity data using biometric encryption, ensuring privacy and compliance with regulations by storing data on personal devices rather than third-party servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If third parties are used to hold or disseminate personal data, then identity verification can be performed, but privacy concerns and data misuse risks increase
Solution Approach 1:
The patent extracts personal data from third-party servers and places it directly on the user's personal device. The system allows users to store and control their own identity data locally, eliminating the need for third parties to hold or disseminate this sensitive information, thereby resolving the contradiction between verification reliability and privacy protection
Solution Approach 2:
The system enables users to perform identity verification themselves using their own devices and stored biometric data. Users can generate cryptographic keys and encrypt/decrypt their own data without relying on third-party services, making the verification process self-contained and privacy-preserving while maintaining reliability
2Object-affected harmful factors
If biometric data is encrypted and stored on personal devices, then privacy protection is improved, but system complexity increases
Solution Approach 1:
The patent introduces cryptographic keys as an intermediary mechanism between biometric data and storage. Biometric data is converted into cryptographic keys through one-way functions, and these keys are used to encrypt/decrypt personal data. This intermediary layer enables privacy protection through local storage while managing complexity through standardized cryptographic operations
Solution Approach 2:
The system performs preliminary actions by pre-generating cryptographic keys from biometric data during the initial setup phase. These pre-computed keys are stored securely on the user's device, allowing subsequent verification operations to proceed without real-time biometric processing, thereby reducing operational complexity while maintaining strong privacy protection
Data Source
AI summary
This disclosure describes embodiments of a closed, permission-only based system that provides a highly secure, identity verification platform that enables users or consumers to protect and manage their own identity related data without relying on a third party source. In general, the system includes a server having a processor, an input interface in communication with the processor, a network interface in communication with the processor, and a processor readable medium in communication with the processor. The processor readable medium stores processor executable instructions. The processor executable instructions, when executed, cause the processor to take the steps of: receiving user data including an image of at least one document; receiving biometric data of the user from a user device of the user; performing validation of said at least one document using said biometric data; and encrypting the user data with an encryption key obtained from the biometric data.