Smartcard Multifactor Authentication Using PUF and Biometrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smartcards face challenges in size constraints, limited power resources, and required functionality, particularly in implementing biometric authentication and encryption, which can compromise security and performance.
Innovation Solution
A smartcard employing a multifactor authentication process that combines a physically unclonable characteristic of the card with biometric authentication, using a processor to weight and normalize these factors for enhanced security, allowing for secure access to features while reducing complexity and power consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is implemented in smartcards, then user identification capability is improved, but power consumption and processing complexity increase
Solution Approach 1:
The authentication system is segmented into two independent components: physically unclonable characteristics (PUF) for card identification and biometric authentication for user verification. This segmentation allows each component to operate with optimized power consumption, avoiding the need for a single complex authentication mechanism
Solution Approach 2:
The patent applies partial action by using only specific, lightweight biometric features rather than complete fingerprint or facial recognition algorithms. The PUF provides partial authentication through physical card characteristics, reducing the burden on biometric processing and overall power consumption
2Reliability
If encryption is implemented for data transfer, then security level is improved, but processing capabilities and power consumption increase
Solution Approach 1:
Encryption keys and security parameters are established in advance during card initialization and user enrollment. The PUF characteristics are measured and stored beforehand, allowing rapid authentication without real-time complex calculations, thus reducing processing power requirements during actual transactions
Solution Approach 2:
Instead of performing complex real-time encryption of all data transfers, the system uses pre-computed cryptographic hashes and digital signatures based on PUF characteristics. This copying approach replaces heavy encryption operations with lighter verification operations that consume less power
3Reliability
If multifactor authentication is implemented, then security against fraud is improved, but system complexity increases
Solution Approach 1:
The patent merges the card identification function (via PUF) and user authentication function (via biometrics) into a unified authentication framework. The processor integrates both verification processes and makes a single authentication decision, reducing overall system complexity compared to separate independent systems
4Area of moving object
If card size is reduced to meet ISO standards, then portability is improved, but component integration difficulty increases
Solution Approach 1:
The processor is designed as a multi-functional component that handles PUF measurement, biometric authentication, encryption, and communication protocols within a single integrated chip. This universality reduces the number of separate components needed, facilitating easier integration into the constrained smartcard form factor
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A smart card (102) comprises: a processor (114) for controlling operation of the smartcard; and a biometric sensor (130) for identification of an authorised user; wherein the processor (114) is arranged to permit access to one or more secure feature(s) of the smartcard (102) in response to a multifactor authentication process requiring both: (i) confirmation of the identity of the smartcard (102) based on a physically unclonable characteristic of the smartcard (102), and (ii) authentication of the user's identity via the biometric sensor (130).