Biometric Authentication via Non-Invertible Scrambling on Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods using biometrics data are vulnerable to security breaches, as storing pre-registered biometrics data can lead to unauthorized access and financial losses, and multi-layer client authentication is burdensome and insufficient in preventing attacks.
Innovation Solution
The method involves applying a non-invertible function to biometrics data, storing scrambled data on a blockchain, and combining it with cognitive state data for authentication, using distributed authentication servers to prevent single-point vulnerabilities and enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pre-registered biometrics data is stored for authentication, then user access can be verified, but security breaches and unauthorized access become more vulnerable
Solution Approach 1:
Instead of storing raw biometric data, the system stores scrambled versions of the biometric data. The scrambling function transforms the original biometric data into a scrambled form that can be stored and compared without exposing the actual biometric information. This allows authentication to work while preventing direct storage of sensitive biometric data.
Solution Approach 2:
The system introduces a scrambling function as an intermediary between the biometric data and the storage system. This intermediary layer transforms the biometric data into a scrambled form for storage and comparison, while the original biometric data remains protected. The scrambling function acts as a mediator that enables authentication without direct exposure of sensitive information.
2Reliability
If multi-layer client authentication is implemented, then security against attacks is improved, but user burden and complexity increase
Solution Approach 1:
The system extracts the authentication burden from the user by implementing server-side scrambling and comparison. Instead of requiring users to manage multiple authentication layers, the system performs the complex authentication logic on the server side, where the scrambled biometric data is stored and compared against scrambled input data. This removes the complexity from the user experience while maintaining security.
3Reliability
If additional authentication layers are added, then security is enhanced, but system complexity and vulnerability points increase
Solution Approach 1:
The system merges the authentication function into a single server-based process that handles both security and complexity management. By combining the biometric data processing, scrambling, and comparison operations into a unified server-side system, the patent reduces the number of separate authentication layers and vulnerability points while maintaining strong security through the scrambling mechanism.
Data Source
AI summary
A computer-implemented method comprising: receiving, by a computing device, biometrics data of a user via a user device as part of a request to access a secure device; applying, by the computing device, a non-invertible function to the biometrics data to scramble the biometrics data; determining, by the computing device, whether the scrambled biometrics data matches a pre-registered version of the scrambled biometrics data; and providing, by the computing device, an authentication message to the secure device requesting authentication of the user based on determining that the scrambled biometrics data matches the pre-registered version of the scrambled biometrics data, wherein the providing the authentication message provides a user of the user device with access to the secure device.