Biometric Template Storage Segmentation for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile device biometric authentication systems face limitations due to outdated software architectures that lack application control over biometric template management, leading to inefficiencies in template matching and security concerns, especially with multiple applications and users.
Innovation Solution
Implementing a secure biometric application programming interface (API) that allows mobile device applications to partition biometric template storage, enabling exclusive control over enrolled templates and limiting template searches within specific memory domains, thereby enhancing security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If the system uses a single centralized memory area for all biometric templates, then template management is simple, but matching time increases significantly when the number of templates is large
Solution Approach 1:
The patent divides the centralized biometric template storage into multiple separate memory domains, each dedicated to a specific application. This segmentation allows the biometric matching process to search only within the relevant application's memory domain rather than scanning all templates system-wide, significantly reducing matching time while maintaining manageable complexity through structured organization
2Reliability
If the system allows application-level control over biometric templates, then security and efficiency improve, but the software architecture becomes more complex
Solution Approach 1:
The patent segments biometric template management authority by creating application-specific memory domains, where each application has exclusive control over its own templates. This segmentation enhances security by isolating templates to their respective applications while managing complexity through a standardized API interface that handles the underlying architectural complexity
Solution Approach 2:
The patent introduces a biometric API as an intermediary layer between applications and the biometric matching service. This intermediary simplifies the architecture by providing a standardized interface for applications to control their templates without requiring direct access to complex system-level biometric management mechanisms
3Ease of operation
If the system stores passwords on the mobile device for verification, then authentication functionality is achieved, but security is compromised
Solution Approach 1:
The patent extracts the password storage function from the mobile device by implementing application-level authentication that verifies credentials without storing passwords on the device. This extraction eliminates the security vulnerability of stored passwords while maintaining authentication functionality through alternative verification mechanisms
4Adaptability or versatility
If the system uses proprietary manufacturer APIs for biometric access, then device control is centralized, but application flexibility and control are limited
Solution Approach 1:
The patent creates a universal biometric API that enables multiple applications to access and control biometric templates independently. This universal interface provides application flexibility and control while managing complexity through a standardized, multi-functional API design that works across different applications and use cases
Data Source
AI summary
Generation and segregation of mobile device biometric application template storage is described. Applications request a memory domain within mobile device storage for storing enrolled templates in the domain. The application calls a secure API associated with the biometric driver and software of the mobile device. As a result, the biometric driver and software does not search a number of domains to locate the enrolled templates that correspond to the mobile application or search all enrolled templates stored in memory. The mobile device applications maintain control of the storage domain and the template. The enrolled template may only be deleted through the controlling mobile device application.