Blockchain Authentication System for Privacy-Preserving Biometric Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information management systems using biometric authentication lack effective privacy protection and integration of blockchain technology for secure transaction management.
Innovation Solution
An information management system utilizing a blockchain network with nodes that perform authentication processes, generate transaction signatures, and update blocks securely, ensuring individual authentication and resistance to falsification through a private chain and smart contract execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is used for information management, then security is improved, but privacy protection deteriorates
Solution Approach 1:
The system segments the authentication process into two independent parts: biometric feature verification and transaction authorization. The biometric data is stored locally on the user device and never transmitted to the server, while only cryptographic signatures are sent over the network. This segmentation ensures that even if the server is compromised, the biometric data remains protected on the user's device, thus maintaining both security and privacy.
Solution Approach 2:
The patent introduces a cryptographic intermediary layer between biometric authentication and transaction processing. The biometric verification result is used to generate cryptographic keys and signatures, which then mediate the transaction authorization. This intermediary mechanism decouples the direct link between biometric data and transaction records, protecting privacy while maintaining security.
2Loss of information
If blockchain technology is introduced for decentralized information management, then privacy protection is improved, but transaction security and authentication reliability deteriorate
Solution Approach 1:
The system performs preliminary biometric authentication and cryptographic key generation before any transaction is recorded on the blockchain. The user's biometric data is verified locally first, and only after successful verification are cryptographic signatures generated. This preliminary action ensures that only authenticated users can initiate transactions, maintaining security while leveraging blockchain's privacy benefits.
Solution Approach 2:
The system implements self-service authentication where the user's own biometric data serves as the authentication credential. The device itself performs the verification without requiring external authentication services, and automatically generates the cryptographic proofs needed for blockchain transactions. This self-service approach maintains security while enabling decentralized operation.
3Speed
If centralized server-based biometric authentication is used, then authentication speed is improved, but system vulnerability to attacks and falsification increases
Solution Approach 1:
The patent extracts the biometric verification function from the centralized server and places it locally on the user's device. The server only handles cryptographic operations and blockchain transactions, while the sensitive biometric verification is performed locally. This extraction eliminates the single point of failure at the server, maintaining authentication speed while dramatically improving resistance to falsification and attacks.
Data Source
AI summary
Object to be solved is to achieve novel information management.In order to solve the above circumstances, the present invention provides an information management system including: a blockchain stored in first and second nodes, in which the first or second node includes an authenticating means that executes an authentication process on a basis of feature data, the first node includes a first signing means that generates a first transaction signature and adds the first transaction signature to an unfinalized block in the blockchain, the second node includes a second signing means that generates a second transaction signature and adds the second transaction signature to the unfinalized block on a basis of a result of the authentication process and the first transaction signature, and the first node includes a chain updating means that hashes the unfinalized block and generates a block on a basis of the second transaction signature. According to the present invention, management of transaction on a network can be secured on the basis of individual authentication.