Portable Biometric Sensor with Local Matching and Encrypted Results
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional biometric authentication systems are vulnerable to man-in-the-middle attacks and hacker compromises due to the transmission of biometric templates over networks and storage on remote servers, allowing unauthorized access.
Innovation Solution
A method and system where a portable device captures and compares biometric samples, generates cryptograms with encrypted interaction data and match results, and transmits them securely to a resource provider computer for verification, ensuring secure remote digital interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If biometric templates are transmitted over communication networks to remote servers for storage and verification, then centralized authentication capability is improved, but security against man-in-the-middle attacks and hacker compromises deteriorates
Solution Approach 1:
The patent extracts the biometric template from the communication network transmission path and stores it locally in a secure element within the portable device. Only cryptograms (encrypted verification results) are transmitted over the network, not the actual biometric templates. This eliminates the vulnerability of transmitting sensitive biometric data while maintaining centralized authentication capability through secure local processing.
Solution Approach 2:
The patent introduces a cryptogram as an intermediary between the biometric verification process and network transmission. Instead of transmitting raw biometric templates, the system generates encrypted cryptograms that represent verification results. This intermediary layer protects the underlying biometric data from exposure during network communication while still enabling remote verification.
2Adaptability or versatility
If biometric templates are stored on remote servers, then centralized management is improved, but vulnerability to hacker compromises and data breaches deteriorates
Solution Approach 1:
The patent extracts biometric templates from remote server storage and places them in secure elements within portable devices. The system maintains centralized management capabilities through secure local storage and cryptogram transmission, eliminating the single point of failure that remote server storage creates. Each device becomes a distributed secure storage unit.
Solution Approach 2:
The patent segments the authentication system so that biometric template storage is distributed across multiple portable devices rather than centralized in a single remote server. This segmentation reduces the impact of any single compromise, as hackers would need to breach multiple distributed secure elements rather than one centralized database.
3Productivity
If only match results are transmitted from portable devices to connected devices, then communication efficiency is improved, but security against fake results and compromised templates deteriorates
Solution Approach 1:
The patent uses cryptograms as intermediaries that carry both efficiency and security. A cryptogram is an encrypted data structure that efficiently transmits verification information while incorporating security mechanisms (such as cryptographic signatures and challenge-response elements) that prevent fake results and ensure the authenticity of the match verification.
Solution Approach 2:
The patent transforms the simple match result (yes/no) into a more complex cryptogram structure that includes additional security parameters such as cryptographic proofs, timestamps, and challenge-response data. This parameter enhancement maintains communication efficiency while adding layers of security verification to prevent fraud.
Data Source
AI summary
A method and system for secure remote digital interactions through the use of biometric templates is disclosed. In one example, the method includes an interaction that prompts the use of obtaining a first biometric template and comparing it to a second biometric template to determine if they match. The match process is performed on a portable device.