Biometric Template Provisioning via Mutual Certificate Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for provisioning biometric image templates to payment cards are cumbersome and insecure, requiring users to interact directly with card issuers for fingerprint data storage, which can be inconvenient and vulnerable to security breaches.
Innovation Solution
A system and method where a communication device with a mobile application captures and securely transmits a user's biometric image to a card device, such as a contactless payment card, for storage as a template, enabling authentication through mutual certificate authentication and wireless communication, allowing the card to authenticate users independently of the issuer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users interact directly with card issuers for fingerprint data storage, then security control is maintained, but user convenience deteriorates and security vulnerabilities increase
Solution Approach 1:
The patent introduces a mobile device as an intermediary between the user and the card issuer. The mobile device captures biometric data, performs mutual certificate authentication with the card, and securely transmits the biometric template to the card. This intermediary approach eliminates the need for direct user-issuer interaction while maintaining security through cryptographic authentication, thereby improving user convenience without compromising security.
2Productivity
If biometric data is transmitted through traditional issuer channels, then security protocols are followed, but provisioning time increases and user experience deteriorates
Solution Approach 1:
The patent performs mutual certificate authentication between the mobile device and the card before biometric data transmission. This preliminary authentication establishes a secure channel in advance, ensuring that only authorized devices can provision biometric data to specific cards. By pre-establishing security credentials, the system accelerates the provisioning process while maintaining robust security, eliminating the need for lengthy traditional issuer-mediated procedures.
Data Source
AI summary
Systems and methods are provided for use in provisioning a biometric image template to a card device. One example portable communication device includes a processor, a wireless communication interface coupled to the processor, and an input device coupled to the processor. The processor is configured to transmit to a card device, via the wireless communication interface, a certificate associated with the portable communication device, whereby the portable communication device is authenticated by the card device, receive from the card device, via the wireless communication interface, a certificate associated with the card device, and authenticate the card device based on the received certificate. After the card device is authenticated, the processor is configured to capture, via the at least one input device, a biometric image of the user and provision, via the wireless communication interface, the captured biometric image to the card device.