Biometric Usage Right Verification Against Secret Key Impersonation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing digital content transaction systems face issues with unauthorized use of usage rights due to the risk of impersonation when secret keys are compromised.

Innovation Solution

A usage right verification system that utilizes biometric information to generate digital signature information, which is verified using a public key, ensuring that only the legitimate user can access the content, thereby preventing impersonation and unauthorized use.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a public key and private key system is used for usage right verification, then digital content security is improved, but the risk of impersonation increases when the secret key is compromised

Engineering Contradiction:

Improvedigital content securityVSAvoidimpersonation risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces the traditional mechanical key-based authentication system with a biometric authentication system. Instead of relying on secret keys that can be stolen or compromised, the system uses biological characteristics (fingerprint, face recognition, iris, voice, etc.) to verify user identity. This substitution eliminates the risk of impersonation through key theft while maintaining strong security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent changes the fundamental parameter of authentication from cryptographic keys to biometric data. By using biometric information as the basis for generating digital signatures, the system transforms the authentication mechanism from something that can be copied or stolen (keys) to something that is inherently tied to the user's physical identity, which cannot be impersonated.

Inventive Principle:

Principle #35Parameter changes

2Object-affected harmful factors

If biometric information is used to generate digital signature information, then impersonation prevention is improved, but system complexity increases

Engineering Contradiction:

Improveimpersonation preventionVSAvoidsystem complexity

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent introduces a biometric information management unit as an intermediary component that handles the complex tasks of biometric data collection, processing, and key parameter generation. This intermediary absorbs the complexity of biometric authentication while presenting a simplified interface to the rest of the system, allowing digital signatures to be generated using biometric data without requiring other components to understand the underlying complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250373441A1Usage right verification system, usage right verification method thereof, and non-transitory computer readable medium

Publication Date: 2025.12.04 NEC CORP

AI summary

A usage right verification system includes a content use means for using a content; a usage right presentation proxy means for storing a key parameter in association with a biometric information; and a content management means for storing a public key for digital signature information based on a biometric information. The content use means transmits the biometric information and a usage right information of the content to the usage right presentation proxy means. The usage right presentation proxy means generates digital signature information of the user based on the biometric information and the key parameter corresponding to the biometric information, and transmits signed usage right information in which the digital signature information has been added to the usage right information to the content management means. The content management means verifies the digital signature information of the user by using the corresponding public key based on the signed usage right information.