Personal Digital Key Biometric Authentication Without Central Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional biometric authentication technologies expose personal biometric information to theft and fraudulent use, require time-consuming enrollment processes, and lack efficient, secure transaction processing and access control solutions.
Innovation Solution
A portable Personal Digital Key (PDK) stores biometric profiles in a tamper-proof memory, wirelessly transmitting identification information for secure authentication, and a Reader compares biometric inputs to authorize transactions, with optional remote registry verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional biometric authentication is used, then authentication security is improved, but personal biometric data is exposed to theft and fraudulent use
Solution Approach 1:
The patent extracts the biometric data storage function from centralized servers and transfers it to a distributed peer-to-peer network. Each node stores only minimal identifying information locally, while the actual biometric templates are encrypted and distributed across the network. This extraction eliminates the single point of failure and reduces the impact of data breaches.
Solution Approach 2:
The patent introduces a cryptographic hash function and salt as intermediaries between the biometric data and the storage system. The biometric template is combined with a random salt and hashed to create a unique identifier that can be stored and compared without exposing the original biometric data. This intermediary layer provides security while enabling authentication.
2Measurement precision
If traditional biometric enrollment process is used, then authentication accuracy is improved, but the process is time-consuming and intrusive
Solution Approach 1:
The patent performs preliminary action by pre-computing and storing cryptographic hashes of common biometric templates in a distributed database during system initialization. When authentication is needed, the system only needs to compare the new biometric input against these pre-stored hashes, eliminating the need for time-consuming real-time enrollment processes while maintaining high accuracy.
Solution Approach 2:
The patent creates a copy of the biometric template through cryptographic hashing, storing only the hash value rather than the original biometric data. This copy can be rapidly compared and stored without requiring repeated time-consuming enrollment procedures, as the hash can be computed quickly from the biometric input.
3Reliability
If centralized biometric data storage is used, then authentication control is improved, but system complexity and data security risks increase
Solution Approach 1:
The patent segments the centralized authentication system into distributed peer-to-peer nodes. Each node maintains local authentication control for its portion of the network, eliminating the need for a single complex centralized server. The segmentation reduces overall system complexity while maintaining secure authentication control through cryptographic protocols.
Solution Approach 2:
The patent implements self-service authentication where each peer node autonomously performs authentication decisions based on local cryptographic comparisons. The system automatically manages key distribution, hash computation, and authentication without requiring complex centralized administration, reducing operational complexity while maintaining security.
Data Source
AI summary
A system and method provide efficient, secure and highly reliable authentication for transaction processing and/or access control applications in which only biometric input is required from the user. A Personal Digital Key stores a biometric profile that comprises a representation of physical or behavioral characteristics that are uniquely associated with an individual that owns and carries the PDK. The PDK wirelessly transmits the biometric profile over a secure wireless transaction to a Reader for use in a biometric authentication process. The Reader compares the received biometric profile to a biometric input acquired at the point of transaction in order to determine if the transaction should be authorized.