Biometric Authentication via Mobile Device Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional biometric systems for accessing resources at devices like ATMs are insecure due to unauthorized access risks and inefficiencies in comparing biometric templates, leading to longer processing times and potential breaches.
Innovation Solution
A system where biometric templates are stored on user devices and compared with templates from nearby devices using proximity detection, employing techniques like homomorphic encryption and secure multi-party computation to ensure secure and efficient authentication without decrypting the templates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric templates are stored at the ATM for comparison, then authentication can be performed, but security is compromised and processing time increases due to storing thousands of templates
Solution Approach 1:
The patent extracts the biometric template storage function from the ATM to the user's mobile device. The mobile device stores the user's biometric template locally and provides it to the ATM during authentication, eliminating the need for the ATM to store multiple biometric templates while maintaining authentication capability.
Solution Approach 2:
The mobile device acts as an intermediary between the user and the ATM. It securely holds the biometric template and transmits it to the ATM when needed, serving as a trusted mediator that resolves the conflict between security requirements and processing efficiency.
2Ease of operation
If biometric templates are stored at the ATM, then authentication is possible, but data security is compromised due to potential unauthorized access
Solution Approach 1:
The sensitive biometric template data is extracted from the ATM's storage and relocated to the user's mobile device. This extraction removes the security vulnerability of storing multiple biometric templates at the ATM while preserving the ability to perform authentication through secure transmission of the template from the mobile device.
Solution Approach 2:
The biometric template is preliminarily prepared and stored in a secure environment (the user's mobile device) before the authentication transaction occurs. This preliminary action ensures the template is readily available for authentication without requiring the ATM to store it, thereby eliminating the security risk of storage at the ATM.
3Reliability
If the ATM stores and compares thousands of biometric templates, then user authentication can be performed, but the process becomes slower and less efficient
Solution Approach 1:
The biometric template storage function is extracted from the ATM system and assigned to the user's mobile device. This extraction reduces the ATM's workload from storing and comparing thousands of templates to simply receiving and comparing a single template provided by the mobile device, dramatically improving transaction speed while maintaining authentication accuracy.
Solution Approach 2:
The biometric template is preliminarily prepared and made available on the user's mobile device before the authentication process begins. This preliminary preparation eliminates the need for the ATM to search through multiple stored templates, enabling immediate comparison and significantly accelerating the authentication process.
Data Source
AI summary
A first biometric sample of a user is received by an access device from a user device. First biometric information is generated in an obscured format, based on the first biometric sample. A plurality of biometric information is received in an obscured format. The plurality of biometric information corresponds to a plurality of users, and was obtained from biometric samples of the plurality of users. The first biometric information in the obscured format is compared to the plurality of biometric information in the obscured format, and a match result is generated based on the comparing. The match result is provided to a server computer. Based on the match result, information indicating that one of the plurality of users that is associated with one of the plurality of biometric information is the user associated with the first biometric information is received.