Portable Storage Fingerprint Authentication and Read-Only Data Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Portable storage devices face security vulnerabilities due to the risk of password exposure and the inefficiency of public key cryptographic algorithms, necessitating a more robust authentication method.
Innovation Solution
Incorporating a fingerprint recognition system with a fingerprint sensor, data repository, processing unit, and encryption/decryption engine into the portable storage device to authenticate users and secure data access, allowing only authorized access through fingerprint matching and enabling secure data storage and retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a password-based authentication method is used, then the device is easy to operate, but the security is weak because passwords can be lost or exposed
Solution Approach 1:
The patent replaces the mechanical/password-based authentication system with a biometric fingerprint recognition system. The fingerprint sensor captures unique physiological characteristics of the user, and the processing unit compares these characteristics against stored templates to authenticate users. This substitution eliminates the weaknesses of password-based systems (loss, exposure, forgetting) while maintaining ease of operation through simple finger placement.
Solution Approach 2:
The patent changes the authentication parameter from a user-created password (which can be weak or compromised) to a unique biometric fingerprint pattern (which is inherently secure and difficult to replicate). The system stores and processes fingerprint minutiae points and ridge patterns as the authentication parameter, providing stronger security while maintaining user convenience.
2Reliability
If public key cryptographic algorithm is used for security process, then the security is strengthened, but the processing time is long and implementation is complicated
Solution Approach 1:
The patent segments the security system into two distinct parts: authentication (fingerprint recognition) and encryption (data protection). The fingerprint authentication uses rapid biometric comparison for user verification, while separate encryption/decryption operations are performed only when data is stored or retrieved. This segmentation allows the system to use faster symmetric key encryption for data protection rather than computationally intensive public key algorithms for all operations.
Solution Approach 2:
The patent performs preliminary authentication through fingerprint recognition before any data operations. The authentication fingerprint information is pre-stored in the device, allowing rapid comparison against captured fingerprints. This preliminary authentication step prevents the need for repeated complex cryptographic handshakes, improving overall processing speed while maintaining security.
3Reliability
If the data repository is always accessible, then the ease of operation is improved, but the security is compromised
Solution Approach 1:
The patent implements dynamic access control where the data repository transitions between locked and unlocked states based on authentication status. The communication control unit dynamically enables or disables data access pathways based on whether valid fingerprint authentication has occurred. This dynamic approach maintains security by default (locked state) while providing ease of operation when authenticated (unlocked state), eliminating the need for users to manually manage security settings.
Data Source
AI summary
Disclosed is a portable storage device including a fingerprint sensor, a fingerprint data processing unit, a data repository, a data processing unit and the like. The fingerprint data processing unit outputs a fingerprint matching signal when fingerprint information received from the fingerprint sensor matches authentication fingerprint information of the fingerprint data repository. If the fingerprint matching signal is received from the fingerprint data processing unit, the data processing unit retrieves a data requested by the user terminal from the data repository, converts the retrieved data into a read-only data and transmits the read-only data to the user terminal.