Biometric Identity Tokens for Secure Offline Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tokenized networks are inefficient and insecure due to the large size of conventional biometric templates, which hinders secure offline transactions and flexible data storage configurations.
Innovation Solution
The biometric tokenized network employs smaller biometric identity tokens, which are ten to twenty-five times smaller than conventional templates, enabling secure offline transactions and flexible data storage configurations by using these tokens for remunerations and digital identity transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional biometric templates are used for tokenized networks, then biometric authentication can be performed, but the database size and message size become excessively large
Solution Approach 1:
The patent extracts only the essential identifying features from complete biometric templates to create condensed biometric identity tokens. These tokens contain sufficient information for authentication while being ten to twenty-five times smaller than conventional templates, directly resolving the contradiction between authentication capability and data size
Solution Approach 2:
The patent transforms biometric templates into a different parameter representation (biometric identity tokens) that maintains authentication functionality while dramatically reducing size. This parameter transformation enables the same authentication purpose to be achieved with minimal data storage requirements
2Ease of operation
If conventional biometric templates are stored on edge devices, then offline biometric transactions can be processed, but security and privacy risks increase due to large data storage requirements
Solution Approach 1:
By extracting only the essential identification elements into compact biometric identity tokens, the system enables secure local storage on edge devices. The reduced token size minimizes the security risk associated with storing biometric data locally while maintaining offline transaction capability
Solution Approach 2:
The biometric identity tokens function as secure, disposable credentials that can be stored locally on edge devices. Their small size and cryptographic design allow them to be securely stored and used for offline transactions without creating significant security or privacy risks
3Quantity of substance
If smaller biometric identity tokens are used instead of conventional templates, then database and message size are reduced, but system complexity increases due to tokenization requirements
Solution Approach 1:
The biometric identity token serves multiple functions: it acts as a unique identifier, an authentication credential, and a link to remuneration accounts. This multi-functionality reduces the need for separate systems and data structures, offsetting the tokenization complexity with operational simplicity
Solution Approach 2:
The biometric identity token acts as an intermediary between the biometric template and the remuneration account system. This intermediary simplifies the overall architecture by providing a standardized, compact interface that reduces complexity in data management and transaction processing
Data Source
AI summary
Biometric tokenized networks. In one embodiment, a system includes a network and a server. The server includes a memory storing a biometric token vault, a communication interface, and an electronic processor. The electronic processor is configured to: receive a biometric token (i.e., identity token), a merchant identifier, and transaction details via the network, confirm a uniqueness of the biometric token with a second biometric token stored in the biometric token vault, generate a relationship identifier based on the merchant identifier and a global unique identifier linked to the second biometric token, and determine whether the relationship identifier is associated with a payment account reference, and output the merchant identifier, the transaction details, and a personal account number associated with the payment account reference to an issuer via the network in response to determining that the relationship identifier is associated with the payment account reference.