QR-Based Information Handover for Cross-Device Biometric Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for information access, particularly via the Internet, are insecure due to reliance on username/password combinations, and passwordless authentication with biometric capabilities is not feasible on devices lacking such features, necessitating a secure handover mechanism between devices with and without biometric capabilities.
Innovation Solution
A method and system for information access handover between a first device without biometric capabilities and a second device with biometric capabilities, utilizing a QR code to initiate a web authentication registration flow, generating a unique user identifier, and securing access through biometric identification, enabling secure access without creating a user account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password authentication is used, then information access is enabled, but security is compromised due to hacking risks and brute force attacks
Solution Approach 1:
The patent replaces the traditional mechanical username/password authentication system with a biometric-based authentication system. Instead of relying on knowledge-based secrets that can be hacked or guessed, the system uses biometric data (fingerprint, face, iris, voice) stored securely in a biometric reference data structure on the server, which cannot be reverse-engineered or brute-forced in the traditional sense.
Solution Approach 2:
The patent introduces a biometric reference data structure as an intermediary between the user and the authentication system. This structure stores transformed biometric templates rather than raw biometric data or traditional credentials, serving as a secure mediator that enables authentication without exposing sensitive information that could be hacked.
2Reliability
If two-factor authentication with additional credentials is implemented, then security is enhanced, but the complexity of account creation and management increases
Solution Approach 1:
The patent extracts the biometric authentication capability from the traditional account creation process. Instead of requiring users to manually create accounts with multiple credentials, the system allows users to authenticate directly using their biometric data, which is then used to create a unique identifier for future access without requiring traditional account setup.
Solution Approach 2:
The patent enables self-service authentication where the user's biometric data automatically serves as both the identification and authentication mechanism. The system automatically creates user profiles and access credentials based on the biometric verification, eliminating the need for manual account creation and management of multiple credentials.
3Reliability
If passwordless authentication with biometric identification is used, then security is improved, but it requires the user's device to have biometric identification capabilities which not all devices possess
Solution Approach 1:
The patent creates a universal authentication system that works across devices with and without biometric capabilities. The server-side biometric reference data structure serves all authentication requests, allowing users to authenticate from any device by transmitting their biometric data to the server for verification against the stored reference templates, rather than requiring biometric hardware in every client device.
4Ease of operation
If a first device without biometric capabilities needs to access secured information, then accessibility is maintained, but security is compromised without biometric verification
Solution Approach 1:
The patent uses the server's biometric reference data structure as an intermediary that mediates authentication between devices without biometric capabilities and the security requirements. The first device can transmit biometric data captured by any means to the server, which verifies it against the secure reference template, thereby maintaining security while allowing access from diverse devices.
Data Source
AI summary
A computerized method of information access handover between a first device and a second device of a user is presented. The method comprises displaying, on the first device, a QR code generated by a synchronizer. The method further comprises capturing the QR code with the second device for displaying the data record and providing a registration option for associating the data record with the user at a relying party. The method further comprises performing a web authentication registration and, in response to that the web authentication registration flow has been performed successfully, performing an information access handover and securing process. The information access handover and securing process comprises sharing, by the second device, the unique user identifier and the device identifier with the first device, storing them at the first device, and securing access to the data record. A corresponding system and computer program are provided, too.