Privacy-Preserving User Data Authentication Using Cryptograms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods, such as those using mobile driver's licenses, expose personal user data, violating privacy by displaying user portraits to verification devices.
Innovation Solution
A method involving a user device, verifier device, and server that uses cryptograms and random numbers to authenticate user data without disclosing personal information, where the user device decrypts a cryptogram and provides a random number only upon successful authentication, ensuring privacy is preserved.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user data is transmitted to verifier device for authentication, then authentication reliability is improved, but user privacy is compromised due to disclosure of personal data
Solution Approach 1:
The patent extracts only the essential authentication element (random number) from the user data while leaving personal information behind. The verifier receives and validates the random number without ever accessing the user's personal data, thus achieving authentication without privacy loss.
Solution Approach 2:
The patent introduces cryptograms as an intermediary mechanism. The first cryptogram is sent to the verifier, which forwards it to the server. The server responds with a second cryptogram that the user device decrypts to obtain the random number. This multi-step intermediary process prevents direct exposure of personal data while maintaining authentication integrity.
2Measurement precision
If personal user data is disclosed to verifier device, then verification accuracy is improved, but secure storage requirements increase
Solution Approach 1:
The patent employs a disposable random number that is generated, used once for authentication, and then discarded. The verifier stores only this temporary random number in volatile memory without requiring persistent secure storage. This approach achieves verification accuracy while minimizing secure storage requirements.
3Reliability
If user portrait is displayed on verifier device, then authentication completeness is improved, but user privacy is violated
Solution Approach 1:
The patent extracts the random number from the encrypted second cryptogram without displaying or transmitting the user portrait. The verifier validates the random number against the stored reference random number, achieving authentication completeness while completely avoiding privacy violation by never showing personal data.
Data Source
AI summary
A method comprises:receiving, by a user device, from a verifier device, a request for user data;retrieving a first cryptogram and a decryption key;sending and, to a server, the first cryptogram;retrieving a random and a second cryptogram generated using reference user authentication data concatenated with the random;sending, to the verifier device, the second cryptogram and the random;storing the reference random;sending, to the user device, the second cryptogram;decrypting the second cryptogram using the decryption key;extracting the reference user authentication data and the random;providing, the user device, with user authentication data;verifying that it matches the reference user authentication data;providing, the verifier device, with the random;verifying that it matches the reference random; andauthenticating the user data.