Biometric Smart Card Verified Erasure and Channel Deactivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric smart cards lack effective methods for securely managing and permanently deactivating biometric features when the card is lost, stolen, or its validity expires, posing security and privacy risks.
Innovation Solution
A method and biometric smart card that includes a biometric sensor, secure element, and processing unit to receive specific data, check control data, and execute commands to erase reference biometric data and permanently deactivate communication channels upon successful verification, using hardware machines or user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric smart card stores reference biometric data for authentication, then authentication capability is improved, but security risk increases when card is lost or stolen
Solution Approach 1:
The patent extracts the biometric data management functionality from the traditional smart card by introducing a separate biometric sensor and dedicated processing unit. The reference biometric data is stored in a secure element that is logically separated from the communication interfaces, allowing the biometric data to be securely extracted and deactivated independently when security risks arise.
Solution Approach 2:
The patent implements preliminary action by pre-storing control data in the secure element that enables automatic deactivation of biometric features. When a card is reported lost or stolen, the system can immediately execute the pre-prepared deactivation sequence without requiring complex real-time authentication, thus preventing security risks before they can be exploited.
2Adaptability or versatility
If biometric smart card allows remote deactivation of biometric features, then security management is improved, but device complexity increases
Solution Approach 1:
The patent implements self-service by enabling the biometric smart card to autonomously deactivate its own biometric features through automated processes. The secure element contains control data that allows the card to self-manage its biometric authentication capability, receiving simple deactivation commands from external systems and automatically executing the complex sequence of securing and disabling operations without requiring complex external management infrastructure.
3Object-affected harmful factors
If biometric smart card permanently deactivates communication channel, then privacy protection is improved, but operational flexibility decreases
Solution Approach 1:
The patent applies dynamics by making the communication channel between the secure element and biometric sensor configurable rather than fixed. The channel can dynamically transition between active and deactivated states based on operational requirements and security events. The secure element can selectively enable or disable communication based on control data, allowing the system to adapt between permanent deactivation for security and temporary activation for legitimate operations.
Data Source
AI summary
Provided is a method for managing a biometric sensor configured to collect a captured biometric data and a secure element able to communicate with the biometric sensor through a communication channel. The method comprises receiving a specific data by the biometric smart card, and checking the specific data by using a control data pre-stored in the biometric smart card. Only if said checking is successful, it then executes an erasing command for removing said reference biometric data from the biometric smart card and a disabling command for permanently deactivating the communication channel.