Biometric PIN Computation for One-Time Passcode Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Previous two-factor authentication systems are inconvenient and error-prone due to the requirement for users to manually enter their PIN each time to generate a one-time passcode, especially on small devices with limited interfaces.
Innovation Solution
The system uses biometric information to compute a PIN, eliminating the need for manual PIN entry by generating a bio-hash value that combines biometric data with the PIN, allowing the computed PIN to be used in conjunction with a token code to create a one-time passcode for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users manually enter their PIN each time to generate a one-time passcode, then authentication security is maintained, but user convenience deteriorates and error rate increases
Solution Approach 1:
The system performs preliminary action by capturing the user's biometric data during setup and generating a bio-hash value in advance. This pre-computed bio-hash is stored securely and later used to automatically compute the PIN during authentication, eliminating the need for manual PIN entry and reducing user errors while maintaining security.
Solution Approach 2:
The system implements self-service by using the user's own biometric characteristics (fingerprint, face, iris, etc.) to automatically compute the PIN. The biometric data uniquely identifies the user and enables automatic PIN generation without external assistance or manual input, improving both convenience and reliability.
2Productivity
If users manually enter their PIN each time, then PIN security is maintained, but authentication time increases
Solution Approach 1:
The system performs preliminary action by pre-capturing biometric data and pre-computing the bio-hash value during setup. During authentication, the system quickly captures the biometric sample again, extracts features, and computes the PIN automatically using the stored bio-hash, significantly reducing authentication time compared to manual PIN entry.
Solution Approach 2:
The system replaces the mechanical action of manual PIN typing with an automated biometric recognition process. Biometric sensors (fingerprint scanner, camera for face recognition, iris scanner) automatically capture and process user characteristics, eliminating the time-consuming manual keyboard entry and improving authentication speed.
3Ease of operation
If biometric information is used to compute PIN, then user convenience is improved, but system complexity increases
Solution Approach 1:
The system introduces a bio-hash value as an intermediary between the biometric data and the PIN computation. The bio-hash is a processed representation of the user's biometric characteristics that can be securely stored and used to compute the PIN without storing sensitive raw biometric data or the actual PIN, managing complexity while enabling automatic authentication.
Solution Approach 2:
The system segments the authentication process into distinct modules: biometric data capture, feature extraction, bio-hash generation and storage, and PIN computation. This modular approach manages system complexity by separating concerns and allowing each component to be independently optimized and maintained.
Data Source
AI summary
Biometric information is used to generate a one-time passcode in a two factor authentication process. A current biometric sample is obtained from a user requesting access to a secure resource, together with a user identifier and a current token code. A bio-hash value that encodes a distinct biometric identifier of the authentic user for the user identifier, combined with the authentic user's PIN, is retrieved. A computed PIN is generated based on biometric information extracted from the current biometric sample and the bio-hash value. The computed PIN is combined with the current token code to generate a one-time passcode. The one-time passcode and the user identifier are conveyed to an external user identity verification process that uses the one-time passcode to validate the computed PIN and current token code contained in the one-time passcode.