Smart Card Reader Biometric Data Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric authentication systems face security vulnerabilities when biometric templates and candidates are transmitted between devices, as this exposure can lead to potential interception and unauthorized access.
Innovation Solution
Implementing a method where the smart card reader filters response messages to prevent the transmission of biometric template data to the primary device, maintaining secrecy by storing and processing the data locally, and using filtered response APDUs that do not contain actual template data, ensuring that only a fingerprint template index is used for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric template data is transmitted from smart card reader to primary device, then authentication function can be performed, but security is compromised due to exposure of sensitive data
Solution Approach 1:
The patent extracts only the necessary authentication index from the biometric template data and transmits it to the primary device, while leaving the complete sensitive template data on the smart card. This extraction approach allows the authentication function to proceed without transmitting the full biometric template, thus resolving the contradiction between maintaining authentication capability and preventing data exposure.
Solution Approach 2:
The patent introduces an intermediary authentication index as a mediator between the smart card and primary device. This index serves as a reference key that enables authentication without revealing the actual biometric template data. The intermediary element allows the system to maintain security while still achieving the authentication function.
2Reliability
If biometric template data is stored on primary device, then authentication can be performed locally, but security vulnerability increases due to storage exposure
Solution Approach 1:
The patent extracts only the authentication index from the biometric template and stores this minimal data on the primary device, while retaining the complete template data on the smart card. This extraction prevents the primary device from storing sensitive biometric data, thus eliminating storage exposure vulnerabilities while maintaining authentication capability.
Solution Approach 2:
The patent creates a simplified copy (authentication index) of the biometric template for use on the primary device, rather than storing the original complete template. This copy contains only the necessary authentication information and lacks the sensitive biometric data, thereby enabling local authentication without compromising security.
3Measurement precision
If complete biometric template data is transmitted, then authentication accuracy is maintained, but data security is compromised
Solution Approach 1:
The patent extracts only the essential authentication index from the complete biometric template data and transmits this minimal information to the primary device. This extraction maintains authentication accuracy by preserving the necessary reference key while significantly reducing the amount of data transmitted, thereby preventing data exposure during transmission.
Solution Approach 2:
The patent applies partial action by transmitting only the necessary portion (authentication index) of the biometric data rather than the complete template. This partial transmission provides sufficient information for accurate authentication while avoiding the transmission of excessive sensitive data, thus balancing accuracy with security.
Data Source
AI summary
A smart card reader is adapted to extract and store authentication data from a response APDU received from a smart card before generating a filtered response APDU, wherein the filtered response APDU does not include the authentication data. Beneficially, when the smart card reader transmits the filtered response APDU toward a destination, the biometric template data is less susceptible to interception, thereby providing a more secure solution.