Hand Imaging Biometric Payment System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Security risks in electronic payments are increasing, and existing solutions fail to provide adequate security, user acceptance, and compliance with regulations like PSD2 and GDPR, while also being easily integratable into existing infrastructures.
Innovation Solution
A method and system utilizing a hand imaging device to capture and process biometric data, including palm prints and vein patterns, as a secure inherence element, combined with user device possession, to enable secure electronic payments without physical contact, ensuring explicit user consent and compliance with regulations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional biometric methods like fingerprint scanning are used, then authentication capability is provided, but security risks increase due to potential copying and lack of user consent
Solution Approach 1:
The patent introduces an intermediary consent mechanism where the user must explicitly authorize the biometric scanning process before it occurs. This intermediary step (user consent) acts as a mediator between the authentication system and the user's biometric data, ensuring that scanning only happens when authorized. This resolves the security concern by adding a layer of user control and awareness, preventing unauthorized authentication attempts.
2Measurement precision
If contact-based biometric scanning is used, then authentication accuracy is improved, but hygiene concerns and user acceptance decrease
Solution Approach 1:
The patent replaces the mechanical contact-based fingerprint scanning system with an optical scanning system that captures images of the user's hand or finger from a distance. Instead of requiring physical contact with a sensor surface, the system uses light to capture biometric features. This substitution maintains authentication accuracy while eliminating hygiene concerns and improving user acceptance, as users are more comfortable with non-contact scanning.
3Reliability
If multiple authentication factors are implemented per PSD2, then security is improved, but system complexity and integration difficulty increase
Solution Approach 1:
The patent combines multiple authentication factors (biometric recognition, user consent, and device possession verification) into a single integrated authentication flow. Instead of implementing separate complex systems for each factor, the solution merges them into one unified process where the mobile device's camera captures the biometric image, the app obtains user consent, and all verification steps are completed within a single transaction flow. This merging reduces integration complexity while maintaining the security requirements of PSD2.
4Reliability
If comprehensive biometric data is stored for verification, then authentication reliability is improved, but storage requirements and processing power increase
Solution Approach 1:
The patent extracts only the essential biometric features needed for authentication rather than storing and processing complete high-resolution images. The system captures detailed hand/finger images, extracts key geometric and textural features (such as ridge patterns,指尖 shape, and proportions), and stores only these extracted feature sets. This extraction approach maintains authentication reliability by preserving the unique identifying characteristics while significantly reducing storage requirements and processing power needs compared to storing full-resolution images.
Data Source
Figure 1
Figure 1a
Figure 2
AI summary
A method and a system comprise: at a hand imaging device (1, 1', ...), capturing (S4) image data of a hand (91) of a current person (9), at a federation server (11), comparing (S5) a current feature vector determined from the captured image data with pre-stored feature vectors of enrolled persons, at a user device (92) of the current person (9), processing (S8) second factor information for enabling execution of an electronic payment In some embodiments, the electronic payment is initiated by a payment service server (21) and forwarded to a bank (5, 5', ...) via a banking gateway (4) for adhering to payment protocols of the bank (5, 5', ...).