Contactless Authentication With Distributed Biometric Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face security limitations due to centrally located biometric data, leading to high costs and potential vulnerabilities.
Innovation Solution
A contactless authentication system where biometric data is stored on user devices, utilizing short-range and long-range wireless communication to authenticate users, with a mobile terminal generating and signing an authentication request, and an authentication server verifying user access rights and generating an authorization token.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data is stored centrally in authentication devices, then authentication security is improved, but system cost and vulnerability increase
Solution Approach 1:
The patent divides the centralized biometric data storage into distributed storage across multiple personal authentication devices. Each device holds a portion of the biometric data, eliminating the single point of failure while reducing the computational burden on any single device. This segmentation approach maintains security through distribution while lowering system cost.
Solution Approach 2:
The patent extracts the biometric data comparison function from centralized servers and embeds it within personal authentication devices. By taking out the comparison capability and placing it in user devices, the system reduces server infrastructure costs while maintaining security through local processing.
2Device complexity
If biometric data is stored on user devices, then system cost is reduced, but authentication reliability may deteriorate
Solution Approach 1:
The patent merges multiple personal authentication devices into a unified authentication system where each device contributes to the overall security. By combining the biometric data from multiple distributed devices, the system achieves both cost reduction through decentralization and enhanced security through aggregation of authentication factors.
Solution Approach 2:
The patent introduces a communication interface as an intermediary between personal authentication devices and the authentication server. This intermediary enables secure data exchange and coordination between distributed devices, ensuring that decentralized storage does not compromise authentication reliability.
3Reliability
If continuous server connection is required for authentication, then authentication reliability is improved, but system responsiveness and cost increase
Solution Approach 1:
The patent performs preliminary authentication actions by storing verified biometric data and authentication tokens in personal devices before the actual authentication event. When authentication is needed, the device can immediately use pre-stored data, eliminating the need for continuous server connection and significantly improving responsiveness.
Solution Approach 2:
The patent creates a dynamic authentication system that adapts between offline mode (using pre-stored data for rapid authentication) and online mode (connecting to server for token refresh or reauthentication). This dynamic approach allows the system to respond quickly when possible while maintaining reliability through server connection when needed.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a system and a method for authenticating one or more users: A user equipped with a device comprising: A wireless communication means (19a) for exchanging information with the access control device and a wireless communication means (19b) for exchanging information with the server, a processor (18) configured to generate an authentication request Rq to the server, an authentication server (10) comprising: A database (12) containing an identifier and access rights for a given user, a long-distance wireless communication means (13), a processor (11) configured to generate an authentication token, an access control device (2) comprising: An acquisition device (3) for acquiring biometric data, short-range communication means (6), a processor (4) configured to compare a captured biometric datum with a biometric datum contained in an authentication token and to generate a signal authorizing access or refusing access.