Property Access Authentication Using Cloud Biometric Templates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Property management services face challenges such as insufficient access control management, increased manpower costs, and vulnerabilities in identity authentication due to theft or copying of passwords or recognition devices, necessitating a more secure and efficient authentication system.
Innovation Solution
A multi-factor authentication system comprising a user device, property management station system, and a multi-factor authentication service platform, which processes biometric data through a cloud biometric server apparatus that extracts features without storing the data, ensuring enhanced security and reduced costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional access control systems with passwords or recognition devices are used, then ease of operation is improved, but reliability deteriorates due to theft or copying of authentication credentials
Solution Approach 1:
The authentication system is segmented into multiple independent factors (biometric data, device identifiers, location information) that work together to provide comprehensive security. Each factor serves as a separate layer of authentication, making it difficult for attackers to compromise the entire system by obtaining a single credential.
Solution Approach 2:
The server acts as an intermediary that processes and verifies authentication factors without storing sensitive biometric data. The server receives encrypted biometric templates from the user device, compares them with stored profiles, and makes authentication decisions, thereby preventing direct exposure of sensitive data while maintaining security.
2Reliability
If biometric data is stored for authentication purposes, then reliability is improved, but security deteriorates due to potential data breaches and unauthorized access
Solution Approach 1:
The system extracts only the essential authentication information (encrypted biometric templates and device identifiers) from the user device and stores these processed forms on the server, while keeping the original sensitive biometric data and private keys securely stored locally on the user device. This extraction approach minimizes the security risk associated with data storage.
Solution Approach 2:
Different parts of the authentication data have different storage locations and security requirements. Sensitive biometric data and cryptographic keys are stored locally on the user device with high security protection, while only processed and encrypted authentication templates are stored on the server, creating a distributed security architecture that optimizes both reliability and security.
3Measurement precision
If comprehensive biometric data is collected and stored, then measurement precision is improved, but loss of information increases due to storage costs and data management complexity
Solution Approach 1:
The system creates and uses encrypted copies of biometric data in the form of authentication templates rather than storing the original comprehensive biometric information. These templates contain sufficient information for accurate authentication while being significantly smaller in size and less costly to store and manage, thereby reducing information loss while maintaining measurement precision.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A multi-factor authentication system for property management may provide user a convenient and safe property management service via enrolling with service for multi-factor authentication via an application. The user may log in the multi-factor authentication service platform during the enrollment phase via the application to acquire an account and obtain authority for use, thereby to access the service provided by the multi-factor authentication service platform via a property management station system. In addition, during the property management service, the user may acquire the property management service in fewer steps and a more secure manner during an authentication phase with the multi-factor authentication service platform, thereby to enforce security for identity authentication. The multi-factor authentication system for property management may address concerns for the user property security and identify authentication during exit/entry of personnel for property management.