Mobile Device Authentication Protocol Using Biometric Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic protocols for mobile devices fail to effectively authenticate users, as they cannot verify whether the user presenting the device is the legitimate owner, leading to potential misuse or unauthorized access.
Innovation Solution
A cryptographic protocol that utilizes a provisioning key and token system, combined with biometric data and pseudorandom functions, to securely authenticate mobile devices with access points, ensuring only authorized users can establish communication channels and access secure information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic protocols are used for mobile devices, then device communication is enabled, but user authentication reliability is insufficient as the system cannot verify whether the user presenting the device is the legitimate owner
Solution Approach 1:
The authentication system is segmented into multiple independent components: biometric data storage module, pseudorandom function module, token generation module, and verification module. Each component performs a specific function in the authentication process, allowing the system to achieve high reliability through modular design while maintaining manageable complexity.
Solution Approach 2:
A pseudorandom function acts as an intermediary between the biometric data and the authentication token. The PRF takes biometric input and transforms it into a cryptographic token through a deterministic yet unpredictable process, ensuring that the same biometric data always produces the same token while different inputs produce different outputs, thereby enhancing authentication reliability without requiring direct comparison of sensitive biometric data.
2Reliability
If biometric data and pseudorandom functions are integrated into the authentication protocol, then authentication security is enhanced, but the complexity of the cryptographic protocol increases
Solution Approach 1:
Biometric data is processed and transformed into cryptographic tokens in advance during the enrollment phase. The pseudorandom function is applied to the biometric data beforehand to generate a stable, reproducible token that can be stored and later verified without requiring real-time complex computation during authentication, thus enhancing security while managing protocol complexity.
Solution Approach 2:
The system changes the parameter space by transforming raw biometric data (which has high variability) into a standardized cryptographic token through the pseudorandom function. This parameter transformation ensures that minor variations in biometric input do not affect authentication outcomes, while the cryptographic properties of the token provide strong security guarantees.
Data Source
AI summary
Embodiments are directed towards communicating using a mobile device that performs actions including. A mobile device may be provisioned with an access point such that a provisioning key and a provisioning token for each of the provisioned access points may be stored on the mobile device. The mobile device may be determined to be in the presence of a provisioned access point based on the provisioning key and an advertising nonce. The advertising nonce may be encrypted with the provisioning key. A communication channel between the mobile device and the access point may be established based on a session nonce, the advertising nonce, and the provisioning key. A session key may be generated based in part on the advertising nonce and a message counter. And, encrypted message packets that include a message and a message authentication tag may be communicated to the access point.