Biometric Password Generation via Secret-Key and Random-Number
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current password management systems face challenges such as weak password selection, reuse across multiple accounts, organizational data breaches, and phishing attacks, leading to compromised security and user inconvenience.
Innovation Solution
A system and method that utilize biometric authentication to generate and manage secure passwords in real-time, incorporating biometric factors as seed data while maintaining compatibility with existing password-based authentication systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is used to generate passwords, then security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a password manager as an intermediary system that handles the complexity of biometric authentication and password generation. The password manager stores biometric data and generates passwords automatically, shielding users from the technical complexity while maintaining high security through biometric factors.
Solution Approach 2:
The system enables self-service password generation by automatically creating secure passwords using the user's biometric data as a seed. The password manager autonomously handles the cryptographic operations and password distribution, eliminating the need for users to manually create or manage complex passwords.
2Reliability
If users must memorize complex passwords, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The password manager automatically generates and manages complex passwords using biometric data, eliminating the burden of memorization on users. The system self-services the entire password management process including generation, storage, and retrieval, allowing users to access their passwords through simple biometric authentication.
Solution Approach 2:
The password manager acts as an intermediary that holds the complex passwords and presents simplified access methods to users. Instead of users memorizing complex passwords, they simply provide biometric verification to the password manager, which then provides the appropriate credentials for various services.
3Ease of operation
If password managers are used, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The password manager performs self-service operations to automatically generate, store, and retrieve passwords using biometric authentication. This automation handles the complexity internally while presenting a simple user interface, making the system both easy to use and secure without requiring users to manually manage credentials.
Data Source
AI summary
A system for generating passwords in real-time based on biometric factors is disclosed. The system registers users by computing a Secret-Key from biometric samples, generating a Public-Key, and storing them securely. User authentication involves capturing a real-time biometric sample, generating a Secret-Key, and comparing a computed Real-Time-Unique-Number with a stored Unique-Number. For password setting, the system detects application requirements, authenticates the user, generates a password by computing a Unique-Number using a stored Random-Number and the Secret-Key, and submits the password. For login, the system authenticates the user, retrieves the stored Random-Number, computes the Unique-Number, regenerates the password, and submits it. This biometric-based password generation system provides secure, user-friendly access without requiring password memorization. The method offers a novel approach to password management, enhancing security and user experience.