Biometric Identity Verification Using Zero-Knowledge Proofs in CNP Payments

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In Card-Not-Present (CNP) transactions, the identity of the consumer cannot be verified, leading to increased risks of fraudulent transactions, and existing solutions compromise consumer privacy.

Innovation Solution

A biometric-based identity verification system using zero-knowledge proofs is implemented, where a biometric security device generates a private key from user biometric data, which remains on the device, and a public key is used to verify identity without disclosing personal information, allowing secure transactions through a transaction terminal or issuer system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If biometric data is stored and processed centrally to verify identity, then identity verification capability is improved, but consumer privacy is compromised

Engineering Contradiction:

Improveidentity verification capabilityVSAvoidconsumer privacy

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent extracts only the essential verification capability (proof of identity) from the biometric data itself. Instead of storing or transmitting actual biometric information, the system generates cryptographic proofs that verify identity without exposing the underlying biometric data, thus separating verification functionality from sensitive information

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces cryptographic proofs as an intermediary between the consumer's biometric data and the verification system. These proofs act as a mediator that allows identity verification to occur without direct access to or exposure of the actual biometric information, protecting consumer privacy while maintaining verification reliability

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If traditional authentication methods are used in CNP transactions, then transaction speed is improved, but security against fraud is worsened

Engineering Contradiction:

Improvetransaction speedVSAvoidsecurity against fraud

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent replaces traditional mechanical authentication systems (physical card presentment, signature capture, manual verification) with a cryptographic proof-based system. This substitution maintains the speed of electronic transactions while significantly enhancing security by making fraudulent authentication computationally infeasible through the use of biometric-secured cryptographic keys

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250322398A1Biometric-based identity verificaton using zero-knowledge proofs

Publication Date: 2025.10.16 AMERICAN EXPRESS TRAVEL RELATED SERVICES CO INC

AI summary

Disclosed are various embodiments for verifying a consumer's identity during card-not-present (CNP) transactions using biometric data (e.g., fingerprint, retina scan, iris scan, handprint, voice sample, face scan, etc.) of the consumer obtained using a biometric security device. A zero-knowledge proof algorithm is used to verify the identity of a user initiating a transaction without disclosing personal information (e.g., biometric data) of the user to the issuer, merchant, recipient and/or other party, thereby preserving the privacy of the user.