Biometric Authentication via Multi-Server Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for providing services using biometric information face challenges in protecting user biometric data, particularly due to its uniqueness and vulnerability to external attacks, which limits service access for users without cash or credit cards and poses risks of data exposure.
Innovation Solution
A system comprising an electronic device, a first server, and a second server that encrypts biometric information using encryption keys, transmits encrypted data, and authenticates user identification, allowing secure service provision without exposing raw biometric data, using multiple servers for registration and validation processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If biometric information is stored and processed in plain text, then service provision is simplified and fast, but security is compromised and biometric data may be exposed to external attacks
Solution Approach 1:
The patent introduces an intermediary encryption process where biometric information is transformed into encrypted form before storage and transmission. The encryption module acts as a mediator between the biometric sensor and the service processing system, converting sensitive data into secure encrypted representations that can be processed without exposing the original biometric information.
Solution Approach 2:
The patent creates encrypted copies of biometric information instead of storing or processing the original data. The service system operates on these encrypted copies, which contain the necessary authentication information but cannot be reverse-engineered to reveal the original biometric data, thus protecting security while enabling service functionality.
2Reliability
If biometric information is encrypted using multiple encryption layers, then security is improved, but system complexity increases
Solution Approach 1:
The patent segments the encryption process into distinct functional modules: an encryption module that handles the transformation of biometric data, a storage module that manages encrypted data, and a processing module that operates on encrypted data. This segmentation allows each component to be optimized independently and simplifies the overall system architecture by clearly defining boundaries and responsibilities.
Solution Approach 2:
The patent extracts the encryption functionality as a separate, independent module that can be developed, tested, and maintained independently from the rest of the service system. This extraction reduces complexity by isolating the cryptographic operations from the service logic, allowing the service layer to work with encrypted data without needing to understand the encryption mechanisms.
3Reliability
If multi-server authentication process is implemented, then data integrity is ensured, but processing time increases
Solution Approach 1:
The patent performs preliminary authentication and encryption operations before the main service processing begins. The biometric data is encrypted and authenticated in advance, creating a verified encrypted representation that can be quickly processed by subsequent service modules without requiring time-consuming verification during the actual service delivery.
Solution Approach 2:
The encrypted biometric data structure is designed to be self-verifying, containing embedded authentication information that allows service systems to verify data integrity without requiring complex multi-server validation processes. The encrypted data itself carries the necessary proof of authenticity, enabling faster processing while maintaining security guarantees.
Data Source
AI summary
A system for performing a service by using biometric information is disclosed. A system according to the present disclosure comprises an electronic device, a first server and a second server, and a control method of the system comprises the steps of: allowing the electronic device to acquire first biometric information; allowing the electronic device to acquire first encrypted data, in which the first biometric information is encrypted, by using the acquired first biometric information and a first encryption key, and to transmit same to the first server, allowing the first server to acquire second encrypted data, in which the first encrypted data is encrypted, by using the first encrypted data received from the electronic device and a second encrypted key, and first user identification information corresponding to the first biometric information, and to transmit same to the second server; allowing the second server to match the second encrypted data and the first user identification information corresponding to the biometric information, which are received from the first server, and to store same; allowing the second server to acquire authentication information on the basis of the matched second encrypted data and first user identification information, and to transmit same to the first server, and allowing the first server to register the authentication information on the biometric information.