Smart Card Fingerprint Enrollment via Sequence Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart cards with limited user interface resources face challenges in securely performing digital enrollment with fingerprint sensors, as they lack the necessary input means to securely enter secret PIN codes and rely on external terminals, which complicates the enrollment process and poses security risks.
Innovation Solution
A processing method implemented by a smart card with a fingerprint sensor, which acquires and compares sequences of object prints over time with pre-recorded reference data to authenticate users, allowing for secure digital enrollment without requiring a user interface or external terminals, by generating and recording digital enrollment data for subsequent authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a smart card uses a secret PIN code for authentication during enrollment, then security is improved, but the complexity of the enrollment process increases due to limited user interface resources
Solution Approach 1:
The patent introduces a terminal as an intermediary device that handles the secret code input and verification process. The terminal acts as a mediator between the user and the smart card, providing the necessary user interface capabilities (display, keyboard) that the smart card lacks. This resolves the contradiction by offloading the complex authentication interface requirements to an external device while maintaining security through the terminal's verification of the secret code before allowing enrollment.
2Adaptability or versatility
If a smart card relies on an external terminal for secret code entry, then authentication capability is improved, but security risks increase due to terminal vulnerability
Solution Approach 1:
The patent implements preliminary authentication actions where the terminal verifies the secret code and authenticates the user's identity before the smart card performs the actual enrollment. This preliminary verification ensures that only authorized users can initiate enrollment, and the terminal's security measures are applied before any sensitive operations occur on the smart card, reducing overall security risks.
Solution Approach 2:
The system implements feedback mechanisms where the terminal provides verification results and authentication status back to the smart card. The terminal monitors and validates each step of the enrollment process, providing continuous feedback to ensure security compliance. This feedback loop allows the system to detect and prevent unauthorized enrollment attempts while maintaining the benefits of terminal-based authentication.
3Device complexity
If a smart card has no user interface for enrollment, then device simplicity is improved, but the ability to perform secure enrollment independently is worsened
Solution Approach 1:
The patent enables the smart card to perform self-service enrollment by automatically processing enrollment data received from the terminal. Once the terminal validates the user's identity and secret code, the smart card independently completes the enrollment process without requiring additional user interface interactions. This self-service capability maintains device simplicity while achieving independent enrollment functionality through automated processing of authenticated enrollment requests.
Data Source
AI summary
A method carried out by a smart card including a fingerprint sensor, the method including an authentication phase including: acquiring a sequence of object prints from objects detected over time by the fingerprint sensor; comparing the sequence of object prints with reference data defining a reference sequence of object prints according to at least two different print types; and determining that the authentication phase is successful if the sequence of object prints coincides with the reference data. During a digital enrollment phase, the smart card generates, from at least one fingerprint, called enrollment fingerprint, digital enrollment data; and records these digital enrollment data so as to allow subsequent digital authentication from said digital enrollment data.