Biometric Content Unlocking Without Server-Stored Raw Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in managing and securing biometric data for data protection due to its critical nature and the difficulty in remembering random data like passwords, while existing methods require storing biometric data on servers, which poses privacy risks.
Innovation Solution
A device and method that uses biometric information to encrypt and decrypt data locally without a server, utilizing sensors to capture user biometric features, calculate crypto keys, and decrypt content based on these features, ensuring secure and private data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If biometric data is stored on a server to enable data encryption/decryption across various devices, then data accessibility is improved, but user privacy security deteriorates due to potential biometric data leakage
Solution Approach 1:
The patent extracts and processes only the essential feature information from biometric data, storing only this processed feature information and corresponding hint information on the server, while keeping the original biometric data local on user devices. This extraction approach enables data accessibility across devices while minimizing privacy risks by not storing complete biometric data centrally.
Solution Approach 2:
The patent introduces feature information as an intermediary between original biometric data and encryption keys. The server stores and processes this intermediate feature information rather than the sensitive original biometric data, acting as a mediator that enables cryptographic operations without direct access to or storage of raw biometric information, thus reducing privacy risks.
2Reliability
If random data such as passwords are used for data protection, then security is improved, but user convenience deteriorates due to difficulty in remembering and managing passwords
Solution Approach 1:
The patent enables the system to automatically generate encryption keys using the user's own biometric feature information without requiring manual password creation or management. The user's biometric data serves itself as the basis for cryptographic protection, eliminating the need for users to remember complex passwords while maintaining strong security.
Solution Approach 2:
The patent transforms the security parameter from user-managed random data (passwords) to biologically-derived feature information. By changing the fundamental parameter basis from arbitrary random strings to unique biometric features, the system achieves both high security and user convenience, as biometric features are naturally memorable and unique to each user.
3Ease of operation
If biometric feature information is extracted and used for encryption, then user convenience is improved by eliminating password management, but security risk increases if feature information is stored on a server
Solution Approach 1:
The patent performs preliminary processing of biometric data by extracting feature information and generating hint information before any potential security risks arise. This advance preparation creates a secure foundation where only processed feature data (not raw biometric data) is stored on the server, enabling passwordless authentication while pre-mitigating storage risks through careful data preparation.
Solution Approach 2:
The patent converts the potential harm of storing biometric-related information on a server into a benefit by transforming raw biometric data into processed feature information and hint information. This transformation process actually reduces the security risk while enabling server-based storage, as the processed information is less sensitive and can be safely stored and shared across devices without exposing users to the same level of privacy risk.
Data Source
AI summary
A method performed by a device for protecting content by using biometric information is provided. The content protection method includes displaying, by the device, identification information of encrypted content, receiving, by the device, a user input of selecting the encrypted content, controlling, by the device, according to the reception of the user input of selecting the encrypted content, a sensor to obtain image information of a user's body part, calculating, by the device, feature information of the user's body part from the obtained image information, reproducing, by the device, a crypto key based on the calculated feature information of the user's body part and hint information stored in correspondence to the encrypted content, decrypting, by the device, the encrypted content based on the reproduced crypto key, and displaying, by the device, the encrypted content according to the decryption of the encrypted content.