Self-Sovereign Biometric Authentication via Reverse Search
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current internet transactions face significant security and privacy concerns due to the risk of data hijacking during online data transmission, as traditional security measures can be circumvented, necessitating a solution for secure and private information management.
Innovation Solution
The implementation of a self-sovereign information management framework that includes authentication units, cloaked identifiers, and multi-factor authentication to validate and manage secure/private information, minimizing data transmission over networks and ensuring granular access control, thereby reducing the risk of data hijacking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures are used to secure Internet traffic, then security protection is provided, but these measures can be circumvented and data can still be hijacked
Solution Approach 1:
Instead of trying to secure data transmission through traditional security measures that can be breached, the patent inverts the approach by minimizing data transmission altogether. The system performs reverse information search locally on the user's device, obtaining search results without transmitting sensitive personal information over the network, thereby eliminating the transmission vulnerability while achieving the security goal
Solution Approach 2:
The patent extracts only the essential authentication requirement (verifying identity without revealing sensitive data) from the traditional authentication process. By using reverse information search, the system extracts sufficient information to perform security validation while leaving sensitive personal information entirely out of the transmission channel
2Ease of operation
If personal information is transmitted over the network for validation, then authentication can be performed, but the risk of data hijacking increases
Solution Approach 1:
The patent introduces reverse information search as an intermediary mechanism between the user and the authentication system. Instead of directly transmitting sensitive personal information, the system uses reverse search results (obtained through non-sensitive queries) as an intermediary form of verification that maintains authentication capability while avoiding direct exposure of sensitive data
Solution Approach 2:
The patent inverts the traditional authentication flow where sensitive data is sent for verification. Instead, it performs verification by searching for the user through non-sensitive information and comparing results, thereby achieving authentication without the harmful transmission of sensitive personal information
3Adaptability or versatility
If confidential information is transmitted over the Internet for transaction validation, then transaction requirements can be met, but security and privacy concerns arise
Solution Approach 1:
The patent inverts the traditional approach of validating transactions by transmitting confidential information. Instead, it validates transactions by performing reverse information search using non-sensitive data and comparing results, thereby maintaining transaction validation capability while eliminating security and privacy risks associated with transmitting confidential information
Data Source
AI summary
The present teaching relates to method, system, medium, and implementations for authenticating a user. A first request is received to set up authentication information with respect to a user, wherein the first request specifies a type of information to be used for future authentication of the user. It is determined whether the type of information related to the user poses risks based on a reverse information search result. The type of information for being used for future authentication of the user is rejected when the type of information is determined to pose risks.