Biometric Token Countersigning for Secure Online Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional password security methods are limited by character restrictions, difficulty in remembering randomly generated passwords, and vulnerability to guessing or discovery, while biometric data offers enhanced security but requires effective integration in online commerce systems.

Innovation Solution

Implementing biometric sensing devices that capture unique physical or behavioral traits, such as fingerprints, to authenticate users and countersign online account tokens for secure purchases in online stores, allowing users to make purchases using biometric images or data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If passwords are used for authentication, then users can access online stores, but security is compromised due to character limits, ease of guessing, and difficulty in remembering complex passwords

Engineering Contradiction:
Improveauthentication securityVSAvoidpassword memory and entry
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/password-based authentication system with a biometric authentication system. Instead of relying on characters that users must remember and type, the system uses biometric sensing devices to detect unique physical or behavioral traits (such as fingerprints, facial recognition, or voice patterns) and converts them into biometric data for authentication. This substitution eliminates the need for users to remember complex passwords while maintaining or improving security through unique biological identifiers.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates a digital copy of the user's biometric data (such as a fingerprint template or facial feature set) and stores it as reference data. During authentication, the system compares the captured biometric data against this stored reference copy to verify identity. This copying approach allows for secure authentication without requiring users to remember any information, as the system uses the unique biometric template as the authentication credential.

Inventive Principle:
Principle #26Copying

2Reliability

If biometric sensing devices are integrated into online commerce systems, then authentication security is enhanced, but device complexity and integration requirements increase

Engineering Contradiction:
Improveuser authentication securityVSAvoidsystem integration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal authentication framework where biometric sensing devices can be integrated into existing online commerce systems without requiring complete system replacement. The system uses standardized biometric data formats and protocols that allow different sensing devices (fingerprint scanners, facial recognition cameras, voice microphones) to work within the same authentication architecture. This multi-functionality approach enables security enhancement while managing integration complexity through common interfaces and data handling mechanisms.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces a biometric data processing layer that acts as an intermediary between the biometric sensing device and the online commerce system. This intermediary component handles the complexity of biometric data capture, processing, and comparison, while presenting a simplified interface to the rest of the system. The intermediary manages the reference data storage, encryption, and comparison algorithms, thereby reducing the integration burden on the main commerce system while maintaining high security standards.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11676188B2Methods of authenticating a user
Publication Date: 2023.06.13 APPLE INC
  • US11676188B2 patent drawing
  • US11676188B2 patent drawing
  • US11676188B2 patent drawing

AI summary

An online store can transmit an online account token to an electronic device or to a biometric sensing device after a user successfully enters his or her account password. The electronic device or the biometric sensing device can countersign the online account token when the one or more biometric images match reference biometric images and the account password matches user identifier data stored in the electronic device or in the biometric sensing device. The countersigned online account token can then be transmitted to the online store. The user can then make one or more purchases after the online store receives the countersigned online account token.