Biometric Digital Content Exchange via Smartphone Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital content exchange solutions are complex, lack security guarantees, and require specific, difficult-to-update devices, making them non-compliant with privacy regulations and prone to hardware obsolescence.
Innovation Solution
A computer-implemented method using biometric traits and asymmetric cryptography to securely encrypt and decrypt digital content, allowing only authorized recipients to access it, with the encryption process managed locally by the sender and receiver, and optionally using a smartphone as an encryption aid.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If proprietary and specialised devices with biometric data are used for secure content exchange, then security of communications is improved, but device complexity increases and hardware obsolescence becomes a problem
Solution Approach 1:
The patent introduces a smartphone as an intermediary device that performs biometric authentication and generates encryption keys. The smartphone acts as a mediator between the user's biometric data and the secure content exchange system, eliminating the need for specialised proprietary devices. The smartphone's camera captures biometric traits, processes them through cryptographic algorithms, and manages the encryption/decryption operations, thereby simplifying the overall system architecture while maintaining security.
2Reliability
If specialised devices are used for secure content exchange, then security is improved, but ease of operation deteriorates due to difficulty in updates and hardware obsolescence
Solution Approach 1:
The patent leverages the smartphone's multi-functional capabilities to perform multiple security operations: biometric authentication via camera, cryptographic key generation, encryption/decryption processing, and content management. The smartphone serves as a universal device that replaces multiple specialised components, enabling easy software updates through standard app stores and operating system updates, thereby eliminating hardware obsolescence issues while maintaining security.
3Ease of operation
If centralised storage environments are used for digital content, then accessibility is improved, but security deteriorates because system administrators can decode content
Solution Approach 1:
The patent segments the encryption process into two distinct parts: symmetric encryption using a personal univocal code for efficient content encryption, and asymmetric encryption using public-private key pairs for secure key exchange. The encrypted content is stored in centralised environments, but the decryption capability remains segmented and controlled exclusively by the original sender through their private key, preventing system administrators from accessing the content while maintaining accessibility for authorised users.
4Reliability
If complex prior art solutions are implemented, then security features are improved, but manufacturing precision and compliance with privacy regulations worsen
Solution Approach 1:
The patent implements self-service mechanisms where the smartphone automatically performs biometric authentication, generates cryptographic keys, and manages encryption/decryption operations without requiring complex manual configuration or specialised hardware setup. The system automatically handles key storage, content encryption, and decryption processes, reducing the complexity of implementation while maintaining security features and enabling easier compliance with privacy regulations through standardized procedures.
Data Source
AI summary
Computer implemented method of exchanging digital contents among a plurality of users registered in a sharing association comprising the following steps: A. on at least one device of each user of said sharing association, generate, associate and store: a personal univocal code of the user under consideration dependent on one or more biometric features; B. on said at least one device of a sender user M, selecting at least one digital content that forms a transmission payload and further selecting one or more recipient users Di of said sharing association with whom said transmission payload is to be sent; C. encrypting said at least one digital content using said personal univocal code of the sender user M, obtaining an encrypted payload; D. for each one of said one or more recipient users Di, encoding said personal univocal code of the sender user M by means of a public key of the recipient user Di, obtaining a respective encoded personal univocal code of the sender user M; E. building an encrypted file comprising the encrypted payload and a matrix binary file, that includes said encoded personal univocal code of the sender user M for each one of said one or more recipient users Di; F. sending the encrypted file to a device of each one of said one or more recipient users Di; and G. on said at least one device of each one of said one or more recipient users Di who receive the encrypted file, decoding said encoded personal univocal code of the sender user M by means of the private key of the recipient user Di and decrypting the encrypted payload.