Variable Biometric Authentication Using Graphical Data Patterns
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric information-based authentication systems are vulnerable to security breaches as the unique, permanent data can be leaked and misused, necessitating a system that can adapt security levels and minimize damage if the information is compromised.
Innovation Solution
A variable biometric information-based authentication system that uses personal biometric data changing with time and environment, where the mobile terminal collects and stores variable biometric information, and a server verifies login requests based on graphical representations or arithmetic values derived from the data, without transmitting real values, allowing for selective security levels and enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional biometric information (fingerprint, iris) is used for authentication, then identification accuracy is improved, but security risk increases due to permanent and unique nature of the data
Solution Approach 1:
The patent transforms static biometric data into dynamic variable biometric information that changes over time. Instead of using fixed fingerprints or iris patterns, the system employs biometric data that varies with time, environment, and user state, making the authentication system adaptable while maintaining accuracy and reducing security risks associated with permanent data leakage
Solution Approach 2:
The system changes the parameters of biometric information from static to variable by introducing time and environmental factors. The biometric data is collected at different times and conditions, creating a sequence of varying parameter values that serve as authentication credentials, thereby improving security without sacrificing identification precision
2Measurement precision
If real biometric data values are transmitted and stored for authentication, then authentication accuracy is improved, but data leakage damage increases
Solution Approach 1:
The patent extracts only the necessary authentication characteristics from real biometric data while leaving out the sensitive personal information. The system processes biometric data to extract variable features that are sufficient for authentication purposes, storing and transmitting only these extracted features rather than the complete original biometric data, thus reducing leakage damage while maintaining authentication accuracy
Solution Approach 2:
Instead of transmitting and storing original biometric data, the system creates and uses copies in the form of variable biometric information. These copies contain the essential authentication patterns but lack the sensitive personal identifiers, providing a safe substitute that maintains authentication functionality while minimizing the harm from potential data breaches
3Device complexity
If fixed security level authentication is used, then system simplicity is maintained, but adaptability to different security requirements decreases
Solution Approach 1:
The patent implements a multi-functional authentication system that can operate at multiple security levels using the same variable biometric information framework. The system universally handles different authentication scenarios by adjusting the number of variables and time sequences required, providing both low-level convenient access and high-level secure access without requiring separate systems for each security level
Data Source
AI summary
An authentication system that uses personal variable biometric information which changes according to times and environments, and an authentication method using the same are disclosed. The variable biometric information-based authentication system includes: a mobile terminal configured to generate information regarding an ID that intends to access a facility or information requiring an access authority, and to collect variable biometric information, such that information regarding the ID and the variable biometric information are stored all together; and a variable biometric information management server configured to, when the mobile terminal requests a login command regarding the ID, verify validity of the login command regarding the ID based on the variable biometric information. Accordingly, a real data value of collected biometric information is not used in the authentication procedure, and the authentication procedure is performed only by using a figure or a form of a graph indicating a variation in a specific section or a data arithmetic value obtained by performing a predetermined arithmetic operation with respect to the real data value. Therefore, even if the biometric information used in the authentication procedure is leaked, a damage resulting therefrom can be inhibited. In addition, since a security level of the authentication procedure can be selectively determined, the security of the authentication procedure can be enhanced by combining different types of variable biometric information or by combining variable biometric information of a plurality of users. In addition, as the security level of the authentication procedure is selectively determined, the authentication procedure can be diversely utilized in an entering authentication to a facility such as an office or school or secure authentication in financial services such as account transfer, payment, etc.