Biometric Authentication Using Homomorphic Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional online transaction authentication systems are vulnerable as they either rely on susceptible passwords or transmit biometric data, which cannot be changed, posing risks of exposure and unauthorized access.
Innovation Solution
A method for securely performing biometric authentication using cryptographic comparison protocols like Homomorphic Encryption (HE) and Secure Multi-Party Computation (SMPC) to encrypt and compare biometric templates, ensuring that only encrypted data is transmitted and processed, thereby protecting user privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data is transmitted for authentication, then authentication capability is improved, but security is worsened due to risk of exposure and inability to change biometric information
Solution Approach 1:
The patent introduces an intermediary mechanism where biometric data is transformed into a biometric template through feature extraction, and then encrypted using homomorphic encryption before transmission. The server receives only encrypted data and performs comparisons without decrypting, acting as a mediator that never handles plain biometric information. This resolves the contradiction by enabling authentication while maintaining security through multiple layers of abstraction and encryption.
Solution Approach 2:
The patent transforms biometric data through parameter changes: first converting raw biometric information into extracted features (changing data representation), then applying homomorphic encryption (changing cryptographic state), and finally performing operations on encrypted data. These parameter transformations ensure that biometric information never exists in a vulnerable plain state during transmission or processing, resolving the security risk while maintaining authentication functionality.
2Object-affected harmful factors
If encrypted biometric templates are transmitted, then security is improved, but computational complexity increases due to encryption and decryption operations
Solution Approach 1:
The patent applies preliminary action by performing feature extraction and template generation on the client device before transmission. The biometric data is pre-processed and encrypted locally, so that only compact encrypted templates are transmitted to the server. This reduces the computational burden on the server and network transmission requirements, while maintaining strong security through advance encryption.
Solution Approach 2:
The patent replaces traditional mechanical authentication systems with cryptographic operations. Instead of transmitting and storing plain biometric data, the system uses homomorphic encryption to enable mathematical operations on encrypted data. This substitution eliminates the need for secure key management and physical security measures, reducing overall system complexity while enhancing security.
3Loss of information
If homomorphic encryption is used to compare biometric templates, then privacy is improved, but processing time increases due to cryptographic operations
Solution Approach 1:
The patent extracts only the essential authentication functionality from the biometric data by generating compact templates that contain sufficient information for comparison. These extracted templates are then encrypted and transmitted, leaving out unnecessary biometric details. This extraction reduces data size and processing requirements while maintaining privacy through selective information retention and cryptographic protection.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments are directed to a method for securely performing biometric authentication online. The method described can be used to securely perform biometric authentication on a mobile device. For protecting the privacy of the users biometric data, a cryptographic comparison protocol can be used to perform matching of encrypted templates. For example, the cryptographic comparison protocol may involve Fuzzy Extractors (FE), Homomorphic Encryption (HE), and/or Secure Multi-Party Computation (SMPC).