Fingerprint Credential Cards With Split Biometric Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing transaction cards with fingerprint authentication lack additional security layers and flexibility, as they store authentication data solely on the card, making them vulnerable to fingerprint lifting and replication, and offer limited user authorization options.
Innovation Solution
A system comprising a physical medium with a fingerprint scanner and a separate processing system that stores fingerprint data and biometric credentials, allowing for multiple users, enabling selective authentication feature enablement/disabling and user-specific conditions, and providing an extra layer of security through the processing system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If fingerprint data is stored solely on the physical medium (transaction card), then the device complexity is reduced and ease of operation is improved, but security reliability deteriorates due to vulnerability of fingerprint lifting and replication
Solution Approach 1:
The system divides the authentication data storage into two segments: the physical medium stores the fingerprint image data, while the processing system stores the extracted feature data and authentication credentials. This segmentation prevents complete compromise if one storage location is breached, as an attacker would need both the fingerprint image and the processed feature data to successfully authenticate.
Solution Approach 2:
The processing system acts as an intermediary between the physical medium and the authentication decision. It receives fingerprint data from the physical medium, processes it through feature extraction and matching algorithms, and makes the authentication decision. This intermediary layer adds security by ensuring that raw fingerprint data never leaves the physical medium, while still enabling secure authentication.
2Adaptability or versatility
If a single user has fingerprint authentication on the card, then the ease of operation is improved, but adaptability deteriorates due to limited user authorization options
Solution Approach 1:
The physical medium is designed to support multiple users through a universal authentication system. The processing system can store and recognize fingerprints from multiple users, and the physical medium can authenticate any of these users. This multi-functionality allows a single card to serve multiple people while maintaining secure individual authentication for each user.
Solution Approach 2:
The system dynamically manages user access rights and authentication features. The processing system can enable or disable authentication for specific users, set different authentication requirements for different users, and update user credentials as needed. This dynamic capability provides flexibility in user management while maintaining a consistent and simple authentication process for each individual user.
3Reliability
If the physical medium contains all authentication data, then the ease of manufacture is improved, but security deteriorates due to lack of additional security layers
Solution Approach 1:
The system extracts critical authentication processing functions from the physical medium and places them in the processing system. Specifically, the feature extraction, fingerprint matching, and authentication decision-making are extracted from the card and performed remotely. This extraction maintains manufacturing simplicity for the card itself while significantly enhancing security through additional processing layers.
Solution Approach 2:
The system adds a new dimension to authentication by introducing a remote processing dimension. Instead of all authentication happening locally on the card, the system creates a distributed architecture where the physical medium handles fingerprint capture and the processing system handles authentication logic. This dimensional shift enables enhanced security without complicating the physical card manufacturing.
Data Source
AI summary
In some implementations, a physical medium for fingerprint-based PIN entry may include a fingerprint scanner, one or more memories that store fingerprint data and a PIN, and one or more processors. The physical medium may receive power from a terminal that is in communication with the physical medium. The physical medium may scan a fingerprint using the fingerprint scanner and the power received from the terminal. The physical medium may compare scanned fingerprint data, determined based on scanning the fingerprint, and the stored fingerprint data using the power received from the terminal. The physical medium may determine that the scanned fingerprint data sufficiently matches the stored fingerprint data based on comparing the scanned fingerprint data and the stored fingerprint data. The physical medium may transmit the PIN to the terminal based on determining that the scanned fingerprint data sufficiently matches the stored fingerprint data.