Contactless Authentication Using Decentralized Identifiers and Biometric Depth Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication technologies require direct contact, leading to hygiene issues and are inadequate in ensuring the sovereignty and security of personal information, particularly in contactless financial transactions, due to centralized identification systems and vulnerabilities in public certificates.
Innovation Solution
A method for contactless user authentication using decentralized identifiers (DID) and verifiable credentials (VC) on a blockchain network, which involves biometric information verification through a certification authority and digital signatures to ensure secure and self-regulated identity management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional contact-type biometric authentication is used, then authentication reliability is improved, but hygiene issues arise due to indirect contact with users
Solution Approach 1:
The patent replaces contact-type mechanical biometric authentication with contactless authentication using depth information from time-of-flight (ToF) sensors. This substitutes the mechanical contact system with an optical field-based system that measures distance and depth without physical contact, thereby maintaining authentication reliability while eliminating hygiene concerns.
Solution Approach 2:
The patent introduces depth information as an intermediary element in the authentication process. By using ToF sensor data that measures the distance between the user's face and the sensor, the system creates an indirect verification mechanism that doesn't require direct contact, thus resolving the contradiction between reliable authentication and hygiene requirements.
2Ease of operation
If centralized identification technology is used, then authentication process is simplified, but personal information sovereignty is compromised
Solution Approach 1:
The patent segments the centralized identification system into distributed components using blockchain technology. Each user's biometric data and authentication records are stored as individual blocks on the blockchain, giving users control over their own data while maintaining system-wide authentication functionality. This segmentation preserves information sovereignty while keeping the authentication process accessible.
Solution Approach 2:
The patent implements self-service authentication where users independently manage their biometric information on the blockchain without requiring a centralized authority. Users can autonomously control access to their data through cryptographic keys, eliminating the need for centralized identification while maintaining operational simplicity through automated verification processes.
3Speed
If conventional public certificates are used, then authentication speed is improved, but security is compromised due to copying and stealing vulnerabilities
Solution Approach 1:
The patent creates a composite authentication system that combines multiple verification elements: traditional biometric data, depth information from ToF sensors, and blockchain-based cryptographic verification. This composite approach maintains fast authentication by using readily available biometric data while enhancing security through the addition of depth verification and immutable blockchain records that prevent copying and stealing.
Solution Approach 2:
The patent applies beforehand cushioning by pre-storing verified biometric templates and depth information on the blockchain before authentication is needed. This allows for rapid authentication since the verification data is already prepared and stored immutably, eliminating the need for real-time complex calculations while maintaining high security through cryptographic protection of the pre-stored data.
Data Source
AI summary
A method for authenticating users contactlessly with decentralized identifiers (DID) using verifiable credentials is provided. The method includes steps of: an authentication supporting server, (a) on condition that a user DID is issued and a user public key is registered in a blockchain network, in response to a contactless authentication request, (i) retrieving the user public key from the blockchain network or from a user DID document sent by a resolving server and (ii) verifying a user signature value; and (b) (i) transmitting real-time feature point information and identity confirmation information to a certification authority (CA) server, (ii) allowing the CA server to transmit authentication result information, (iii) retrieving a CA server public key from the blockchain network or from a CA server DID document sent by the resolving server, (iv) verifying a CA server signature value, (v) registering the authentication result information, and (vi) transmitting a user verifiable credential.


