Third-Party Authorization Using Biometric and Secret Value Pairing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing cardless third-party cash withdrawal systems using single-factor authentication, such as One-Time-Password (OTP), lack sufficient security, allowing unauthorized access and potential fraud.

Innovation Solution

A biometric and secret value combination method, where a biometric feature of the third party is combined with a secret value to generate a combined secret value, which is processed to authorize access, enhancing security through two-factor authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If single-factor authentication (OTP) is used for cardless third-party cash withdrawal, then ease of operation is improved, but security is worsened

Engineering Contradiction:

Improveease of operationVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent combines biometric authentication (fingerprint) with OTP verification into a unified two-factor authentication system. The biometric feature and secret value are processed together to generate a combined secret value, merging two different authentication modalities into a single authorization decision that enhances security while maintaining operational ease

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The authentication system uses a composite approach by combining two distinct authentication factors (biometric data and secret value) into a combined secret value. This composite authentication mechanism ensures that both factors must be present and valid for authorization, thereby improving security without significantly complicating the user experience

Inventive Principle:

Principle #40Composite materials

2Reliability

If biometric feature and secret value combination is used for authentication, then security is improved, but device complexity is worsened

Engineering Contradiction:

ImprovesecurityVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces an intermediary processing step where the biometric feature and secret value are combined to generate a combined secret value. This intermediary mechanism facilitates the integration of two authentication factors without requiring complex direct interaction between them, thereby managing device complexity while enhancing security

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication process is segmented into distinct functional components: biometric feature extraction, secret value processing, combined secret value generation, and verification. This segmentation allows each component to be independently implemented and optimized, reducing overall system complexity despite the enhanced security requirements

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS12518281B2Method, apparatuses and system for authorizing a third party

Publication Date: 2026.01.06 INFINEON TECHNOLOGIES AG

AI summary

A method for authorizing a third party includes performing, at a first entity, obtaining a biometric feature of the third party, obtaining a secret value and combining the biometric feature and the secret value so as to obtain a combined secret value. The method further includes performing, at an access controller, receiving the secret value, receiving the combined secret value and processing the combined secret value using the secret value so as to obtain a decoded biometric feature. The method further includes obtaining a biometric feature to be verified, comparing the decoded biometric feature with the biometric feature to be verified so as to obtain a comparison result, and authorizing the third party based on the comparison result.