Identity Document Chip Verification Using Encrypted Biometrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification processes are vulnerable to fake identity documents with manipulated photos, leading to increased identity theft and the need for additional security measures.
Innovation Solution
A method and system that personalizes identity documents by storing encrypted biometric data and a unique identifier on a chip, enabling secure verification through a trusted chip that matches live biometric data with stored data using encrypted communication channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional photo-based identity verification is used, then the verification process is simple and fast, but it is vulnerable to fake photos and manipulated identity documents
Solution Approach 1:
The system performs preliminary actions by extracting biometric features from the original photo and encrypting them with the public key before storing on the ID document. This preparatory encryption ensures that when verification occurs, the system can directly compare encrypted biometric data without needing to access or process the original photo, thereby preventing photo manipulation attacks while maintaining a relatively simple verification process.
Solution Approach 2:
The patent introduces encrypted biometric reference data as an intermediary between the original photo and the verification process. Instead of directly comparing photos (which can be faked), the system uses encrypted biometric features extracted from the original photo as a mediator. This intermediary layer ensures that only the true identity holder can provide matching biometric data, preventing fake photo attacks while adding minimal complexity to the verification system.
2Reliability
If biometric data is stored on the identity document chip, then verification security is improved, but data protection requirements and encryption complexity increase
Solution Approach 1:
The patent changes the parameter of biometric data from plaintext to encrypted form using public key encryption. By transforming the biometric reference data into encrypted form before storage, the system achieves high security for stored biometric data. The verification process remains relatively simple because the system only needs to encrypt the presented biometric data with the same public key and compare it with the stored encrypted version, avoiding complex decryption and authentication protocols.
3Object-affected harmful factors
If encrypted biometric data is stored on the identity document, then resistance to photo manipulation is improved, but the personalization process complexity increases
Solution Approach 1:
The patent replaces the mechanical/photo-based verification system with a cryptographic system. Instead of relying on physical photo security features that can be manipulated, the system uses public key encryption to protect biometric data. The personalization process extracts biometric features from the original photo and encrypts them with the public key, storing the encrypted data on the ID document. This substitution provides strong resistance to photo manipulation while keeping the personalization process relatively simple through automated biometric extraction and encryption.
Data Source
Figure 1~5
Figure 6~7
AI summary
The invention relates to a method of personalizing an identity document (10) and to a method of verifying an identity of a user (2). The invention also relates to a system (1) for verifying an identity of a user (2). A user application configures a user device (20) to capture an image (3) of a user (2) and to obtain biometric data of the user (2), to read a unique identifier from a chip (11) of an identity document (10) and to establish a connection to a server device (30), to request a public encryption key from the server device (30) using the unique identifier and to receive the public encryption key from the server device (30), to use the received public encryption key to encrypt the biometric data, and to transmit the encrypted biometric data to the chip (11). The chip (11) decrypts the encrypted biometric data and determines a match between the decrypted biometric data and the biometric reference data.