Mobile Biometric Verification for Privacy-Preserving Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Individuals are reluctant to share biometric data with third parties due to privacy concerns, yet desire seamless access through multiple checkpoints.
Innovation Solution
A method and system where biometric data is stored and processed solely on a mobile device, with the mobile device comparing the data internally to verify identity, and sending a confirmation signal to an authorization device without sharing raw biometric data with external entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data is stored and processed on external servers or third parties, then access verification can be centralized and managed, but user privacy and data security are compromised
Solution Approach 1:
The patent extracts the biometric data processing function from external servers and relocates it to the user's mobile device. The biometric template is stored locally in the secure element of the mobile device, and all matching operations are performed locally, eliminating the need to transmit or store biometric data on external servers. This resolves the contradiction by maintaining reliable access verification while removing the privacy hazard of centralized data storage.
Solution Approach 2:
The patent introduces an intermediary approach where the mobile device acts as a secure local repository and processing unit for biometric data. Instead of direct communication between the access control system and centralized databases, the mobile device mediates the authentication process by performing local template matching and providing verification results to the access control system without exposing raw biometric data. This intermediary structure maintains system reliability while protecting user privacy.
2Ease of operation
If biometric data is transmitted to external devices for verification, then access control can be implemented, but data security is compromised due to potential storage and sharing with third parties
Solution Approach 1:
The patent extracts the sensitive biometric data transmission function from the access control system and relocates the verification capability to the user's mobile device. The biometric template remains stored locally in the secure element, and only verification results (not the data itself) are transmitted to the access control system. This extraction resolves the contradiction by enabling ease of operation through automated local verification while maintaining data security by eliminating transmission and external storage of biometric data.
3Reliability
If multiple checkpoints require separate verification processes, then comprehensive access control is achieved, but user convenience is reduced due to repeated data sharing
Solution Approach 1:
The patent implements universality by creating a portable biometric template stored in the mobile device's secure element that can be used across multiple checkpoints and access control systems. The template is universally compatible with any checkpoint equipped with the corresponding verification algorithm, eliminating the need for repeated data sharing or re-verification at each checkpoint. This multi-functionality resolves the contradiction by enabling comprehensive access control across multiple locations while providing seamless user experience through local template reuse.
Data Source
AI summary
The invention refers to a method for identifying a person (16), comprising the steps of storing information on the identity of the person (16) and/or access authorization data on the mobile device (16) as well as storing biometric data (37) of the person (16) on a mobile device (14) of the person (16); sending the identity information of the person (16) and/or the access authorization data from the mobile device (14) to an authorization device (18); obtaining biometric data (37) of the person (16) by an identification device (20); sending the biometric data (37) from the identification device (20) to the mobile device (14); comparing, only on the mobile device (14), the biometric data (37) from the identification device (20) with the stored biometric data (37) for verifying the identity of the person (16); and sending a confirmation signal from the mobile device (14) to the authorization device (18) if the comparison of step e) verifies the identity of the person (16).