Smartcard Multifactor Authentication Using PUF and Biometrics

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Smartcards face challenges in size constraints, limited power resources, and required functionality, particularly in implementing biometric authentication and encryption, which can compromise security and performance.

Innovation Solution

A smartcard employing a multifactor authentication process that combines a physically unclonable characteristic of the card with biometric authentication, using a processor to weight and normalize these factors for enhanced security, allowing for secure access to features while reducing complexity and power consumption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If biometric authentication is implemented in smartcards, then user identification capability is improved, but power consumption and processing complexity increase

Engineering Contradiction:
Improveuser identification capabilityVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The authentication system is segmented into two independent components: physically unclonable characteristics (PUF) for card identification and biometric authentication for user verification. This segmentation allows each component to operate with optimized power consumption, avoiding the need for a single complex authentication mechanism

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies partial action by using only specific, lightweight biometric features rather than complete fingerprint or facial recognition algorithms. The PUF provides partial authentication through physical card characteristics, reducing the burden on biometric processing and overall power consumption

Inventive Principle:
Principle #16Partial or excessive action

2Reliability

If encryption is implemented for data transfer, then security level is improved, but processing capabilities and power consumption increase

Engineering Contradiction:
Improvesecurity levelVSAvoidprocessing capabilities
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

Encryption keys and security parameters are established in advance during card initialization and user enrollment. The PUF characteristics are measured and stored beforehand, allowing rapid authentication without real-time complex calculations, thus reducing processing power requirements during actual transactions

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Instead of performing complex real-time encryption of all data transfers, the system uses pre-computed cryptographic hashes and digital signatures based on PUF characteristics. This copying approach replaces heavy encryption operations with lighter verification operations that consume less power

Inventive Principle:
Principle #26Copying

3Reliability

If multifactor authentication is implemented, then security against fraud is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity against fraudVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the card identification function (via PUF) and user authentication function (via biometrics) into a unified authentication framework. The processor integrates both verification processes and makes a single authentication decision, reducing overall system complexity compared to separate independent systems

Inventive Principle:
Principle #5Merging (Combining)

4Area of moving object

If card size is reduced to meet ISO standards, then portability is improved, but component integration difficulty increases

Engineering Contradiction:
Improvecard sizeVSAvoidcomponent integration difficulty
Core Design Contradiction:
Area of moving objectVSEase of manufacture

Solution Approach 1:

The processor is designed as a multi-functional component that handles PUF measurement, biometric authentication, encryption, and communication protocols within a single integrated chip. This universality reduces the number of separate components needed, facilitating easier integration into the constrained smartcard form factor

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3631663B1Smartcard and method for controlling a smartcard
Publication Date: 2021.06.23 ZWIPE
  • EP3631663B1 patent drawingFigure 1
  • EP3631663B1 patent drawingFigure 2
  • EP3631663B1 patent drawingFigure 3

AI summary

A smart card (102) comprises: a processor (114) for controlling operation of the smartcard; and a biometric sensor (130) for identification of an authorised user; wherein the processor (114) is arranged to permit access to one or more secure feature(s) of the smartcard (102) in response to a multifactor authentication process requiring both: (i) confirmation of the identity of the smartcard (102) based on a physically unclonable characteristic of the smartcard (102), and (ii) authentication of the user's identity via the biometric sensor (130).