Biometric Authentication for Mobile Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile application authentication methods require users to manually enter complex usernames and passwords, which is cumbersome and insecure, especially on devices with small screens, and do not leverage biometric technology for application-level authentication.
Innovation Solution
A mobile application biometric authentication system that uses device-level biometric recognition, such as fingerprint scanning, to authenticate users for application access, generating an authentication key and storing it securely, allowing users to unlock applications without manual input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual password authentication is used for mobile applications, then application security can be maintained, but user convenience deteriorates due to complex password entry requirements
Solution Approach 1:
The patent replaces the mechanical manual password entry system with a biometric authentication system using fingerprint sensors. The fingerprint-based authentication automatically verifies user identity without requiring manual input of complex passwords, thereby maintaining security while significantly improving user convenience.
Solution Approach 2:
The biometric authentication system enables self-service by using the user's own fingerprint characteristics for automatic identification. The system independently verifies authentication status without requiring external assistance or complex user interaction, resolving the contradiction between security and ease of operation.
2Loss of time
If device-level biometric authentication is used, then user authentication speed is improved, but application-level security assurance deteriorates
Solution Approach 1:
The patent segments the authentication process into two distinct levels: device-level biometric authentication for rapid access, and application-level cryptographic verification for security assurance. The authentication key is separately generated and verified for each application, ensuring that fast biometric authentication does not compromise application-specific security requirements.
Solution Approach 2:
The patent introduces an authentication key as an intermediary element between biometric authentication and application access. The authentication key serves as a secure bridge that translates biometric verification results into application-specific authentication, maintaining both speed and security assurance.
3Reliability
If graphical passwords are used for mobile applications, then authentication security can be maintained, but device compatibility deteriorates due to screen size and resolution requirements
Solution Approach 1:
The patent adopts fingerprint biometric authentication, which is universally supported across different mobile device types and screen configurations. This single authentication method works consistently across various device form factors, resolutions, and sizes, providing both security and broad device compatibility without the limitations of graphical password systems.
Data Source
AI summary
The method, system and device examples provide for a mobile device biometric authentication that authenticates an application user via a biometric input, and thereby reduce the need to enter complex user credentials into a mobile device to gain access to a mobile application. The examples leverage the biometric recognition operations managed by the operating system of the mobile device to allow a mobile application to authenticate the user as a valid user of the mobile application. In an example, a successfully unlocking of a mobile device via a biometric input from a user is used by the mobile application to perform an authentication operation with assistance from an authentication server to authenticate the user of the mobile device as a valid user of the mobile application. As a result, the mobile application grants access to the mobile application based on the user's biometric input.