Biometric Authentication System for Trusted Web Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for cloud-based services and websites, such as username and password combinations or two-factor authentication, are vulnerable to password theft and do not prevent the creation of fake identities, and users often manage multiple unrelated identities, leading to security and privacy issues.
Innovation Solution
A method and system that utilize biometric data to securely authenticate users by storing user data, including biometric features and associated usernames and passwords in a database, with encryption mechanisms ensuring only the intended website can decrypt the passwords, allowing for decentralized and distributed ledger technology to enhance security and flexibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password authentication is used, then implementation is simple and widely compatible, but security is compromised due to password theft and fake identity creation
Solution Approach 1:
A centralized authentication server acts as an intermediary between users and websites. The server stores encrypted passwords and biometric data, and provides authentication services to multiple websites. This mediator approach enhances security by centralizing password management while maintaining simplicity for end users who only need to authenticate once.
Solution Approach 2:
The system creates encrypted copies of user passwords and stores them in a centralized database. Instead of storing plain text passwords across multiple websites, the system generates and stores encrypted versions that can be securely transmitted and verified, reducing the risk of password theft while maintaining authentication functionality.
2Reliability
If two-factor authentication with physical devices is implemented, then security is improved, but user convenience deteriorates due to device portability requirements
Solution Approach 1:
The system replaces mechanical physical devices (tokens, smartphones) with biometric authentication (fingerprint, facial recognition). This substitution eliminates the need for users to carry physical devices while maintaining strong security, as biometric data is stored and verified by the centralized authentication server.
3Adaptability or versatility
If multiple identities are allowed for different purposes, then versatility is improved, but security risks increase due to fake identity creation
Solution Approach 1:
The system performs preliminary verification of user identities during the registration process by comparing biometric data with government-issued identification documents. This preliminary action ensures that each user identity is authentic before being added to the system, preventing fake identity creation while allowing users to create multiple legitimate identities for different purposes.
Solution Approach 2:
The centralized authentication server maintains a database of verified user identities and provides feedback to websites about identity authenticity. When a user attempts to create or use an identity, the system verifies it against the centralized database, providing immediate feedback on whether the identity is legitimate, thus preventing abuse while maintaining versatility.
Data Source
AI summary
An identification method which comprises providing at least one database storing, for each of a plurality of users, user data comprising biometric data representative of biometric features of the user, user identification data comprising at least one or more usernames and passwords, each username and password being associated with a website, the method comprising, by at least one processing unit, obtaining biometric data representative of biometric features of a candidate user attempting to be identified by a given website, searching, in the database, biometric data matching the biometric data of the candidate user according to a matching criterion, and sending to the given web site at least a password stored for the candidate user in the database and associated with the given website, wherein the password is encrypted using an encryption mechanism which allows decryption of the password only by the given website.