Biometric Authentication Using Segmented Control Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication systems face security risks due to the division of computational resources between high-performance and high-security processing units, as seen in prior art, which can lead to vulnerabilities in mobile and smartcard devices.
Innovation Solution
A method involving three control units with distinct security levels is introduced, where the first unit determines and protects features from a biometric representation, the second unit performs a secondary feature extraction with higher computational power, and the third unit performs a double matching with a biometric template, ensuring high security and reduced computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If computational processing for biometric authentication is divided between high-performance and high-security processing units, then security is improved, but device complexity increases
Solution Approach 1:
The patent divides the biometric authentication process into three distinct processing stages handled by different control units: feature extraction (first control unit), secondary feature determination (second control unit), and final authentication (third control unit). This segmentation distributes computational tasks across multiple specialized units, improving security through isolation while managing device complexity through clear functional separation.
Solution Approach 2:
The patent introduces protected representations as intermediary data structures that transmit biometric information between control units without exposing raw biometric data. These protected representations act as mediators that maintain security boundaries while enabling necessary computational processing across the distributed system.
2Reliability
If multiple control units with different security levels are used for biometric processing, then security is enhanced, but processing time increases
Solution Approach 1:
The patent performs feature extraction in advance during the first control unit stage, creating protected representations that contain pre-processed biometric information. This preliminary action reduces the computational burden on subsequent control units, allowing the multi-unit security architecture to operate with minimal time penalty since the heavy lifting is already done.
Solution Approach 2:
The patent implements a dynamic processing pipeline where different control units operate at different security levels appropriate to their specific tasks. The system adapts the security level and processing depth at each stage, allowing faster processing where full security is not required while maintaining high security where necessary.
3Measurement precision
If feature extraction is performed multiple times by different control units, then authentication accuracy is improved, but computational load increases
Solution Approach 1:
The patent assigns different extraction qualities to different control units based on their security levels and computational capabilities. The first control unit performs initial feature extraction with moderate precision, while the second control unit performs secondary extraction with higher precision on the protected representation. This local quality differentiation achieves high overall authentication accuracy without requiring every unit to perform maximum-computation extraction.
Solution Approach 2:
The patent creates protected representations that are copies of the extracted features, transformed into a format suitable for transmission and further processing. Instead of repeatedly processing the original biometric data, the system works with these copied protected representations, reducing computational load while maintaining authentication accuracy through the secondary feature determination process.
Data Source
AI summary
The present disclosure generally relates to a method for authenticating a user using an electronic device, where the electronic device comprises a biometric sensing system as well as a first, a second and a third control unit. The present disclosure also relates to a corresponding electronic device and to a computer program product.