Decoupling User Verification from Security Element Authorization

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing mobile devices used for digital transactions face challenges in user verification due to limitations in modifying applications installed on security elements, requiring costly and time-consuming certification processes when different biometric checks and third-party providers are involved.

Innovation Solution

A method and device that utilize a user verification element to capture and derive a user verification status, which is then transmitted to a security element to authorize applications without modifying the existing applications or their source code, decoupling user verification from authorization and allowing secure, modularized verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If applications on security elements are modified to support user verification, then user verification functionality is improved, but certification costs and time increase significantly

Engineering Contradiction:

Improveuser verification functionalityVSAvoidcertification time

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system separates user verification functionality from the security element applications by introducing a dedicated user verification element. This segmentation allows the security element to remain unchanged and certified, while the verification element handles all biometric verification operations independently.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A user verification element acts as an intermediary between the user and the security element applications. This mediator captures biometric data, performs verification, and communicates results to the applications without requiring the applications themselves to be modified for verification functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple third party providers are involved for different biometric checks, then verification versatility is improved, but device complexity and costs increase

Engineering Contradiction:

Improvebiometric check varietyVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The user verification element is designed as a universal platform that can support multiple types of biometric verification (fingerprint, facial recognition, iris scanning, etc.) through a single integrated component. This multi-functionality eliminates the need for separate verification mechanisms for different biometric types.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

Multiple biometric verification capabilities are merged into a single user verification element rather than being distributed across multiple separate components or providers. This consolidation simplifies the overall system architecture while maintaining versatility.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS20240427865A1Authorizing an application on a security element

Publication Date: 2024.12.26 GIESECKE & DEVRIENT EPAYMENTS GMBH

AI summary

A method for authorizing an application installed on a security element includes the steps of capturing a user feature by a sensor of a user verification element and generating sensor data that characterize the user feature; deriving a user verification status from the sensor data by the user verification element; and transmitting the user verification status from the user verification element to the security element for the purpose of authorizing the application by way of the security element.