Digital Wallet Data Provision via Biometric QR Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods face challenges such as password management complexity, increased fraud risk, and high costs associated with hardware keys, leading to reliance on single-factor authentication, which compromises security and user convenience.
Innovation Solution
A method involving digital wallets and biometric authentication using machine-readable optical labels, where biometric data is transformed into a mathematical representation and encoded as a QR code for secure, on-site verification, reducing the need for permanent data storage and minimizing security risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users store access credentials in sheets or documents, then ease of operation is improved, but security is worsened due to compromise risk
Solution Approach 1:
The patent extracts authentication credentials from vulnerable storage locations (sheets, documents, password managers) and places them in a secure element within the user's mobile device. This extraction removes the security vulnerability while maintaining ease of access through the device's built-in security features.
Solution Approach 2:
The patent introduces an intermediary authentication system that uses biometric data and secure elements as a mediator between the user and the authentication service. This intermediary layer prevents direct exposure of credentials while enabling secure authentication through multiple factors.
2Ease of operation
If users synchronize all passwords across devices, then ease of operation is improved, but security is worsened due to increased fraud risk
Solution Approach 1:
The patent implements local quality by storing different authentication credentials in different locations (secure element in user device, service provider database). Each location has specific security properties tailored to its function, preventing universal compromise while maintaining synchronized access.
Solution Approach 2:
The authentication system is segmented into multiple independent components: biometric authentication on the user device, secure element storage, and service provider verification. This segmentation ensures that compromise of one component does not affect the entire system.
3Reliability
If one-time passwords on hardware keys are used, then security is improved, but device complexity and cost are worsened
Solution Approach 1:
The patent merges biometric authentication, secure element storage, and one-time password generation into a single integrated system within the user's mobile device. This combination eliminates the need for separate hardware keys while maintaining high security through multiple authenticated factors.
Solution Approach 2:
The user's mobile device is given universal functionality to perform biometric authentication, store secure credentials, generate one-time passwords, and communicate with service providers. This multi-functional approach replaces multiple specialized security devices with a single versatile platform.
4Ease of operation
If one-time passwords via SMS are used, then ease of operation is improved, but security is worsened due to network compromise
Solution Approach 1:
The patent creates a secure copy of the authentication credential that never leaves the user's device in plaintext form. Instead of transmitting passwords via vulnerable SMS channels, the system transmits encrypted authentication tokens that are verified by the service provider without exposing the actual credentials.
Data Source
AI summary
A method for providing data from a first computer equipment to a computer equipment adapted to manage the data is provided. The method includes providing one or more digital wallets, wherein each digital wallet comprises data related to a subject to be authorized to access the computer equipment adapted to manage the data, selecting a digital wallet among the provided digital wallets, selecting data related to the subject, from the selected digital wallet, based on a service provider associated to the computer equipment adapted to manage the data and providing the selected data related to the subject to the computer equipment adapted to manage the data. Computer equipment and computer programs suitable for performing such methods are also provided. Methods for managing data sent from a first computer equipment are also provided.