Biometric Authentication via Convolution Hashing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current authentication systems face challenges in securing biometric information, as they often require storing and transmitting sensitive biometric data, which can lead to security risks and lack user control over their authentication methods, especially in cases of compromised biometric data.

Innovation Solution

The system converts biometric information into a numeric representation and combines it with a key file using a convolution operation to create a superimposed numeric representation, which is then converted into a hash value for secure storage and transmission, allowing users to change their biometric authentication methods without exposing the original data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If biometric information is stored and transmitted in original form, then authentication accuracy is improved, but security is worsened due to data exposure risks

Engineering Contradiction:
Improveauthentication accuracyVSAvoidsecurity risk
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent introduces hash functions and encryption algorithms as intermediary elements between biometric data and authentication verification. Instead of transmitting or storing original biometric templates, the system converts them into hashed representations using cryptographic functions (e.g., SHA-256, bcrypt). These hashed forms serve as mediators that preserve authentication capability while eliminating direct exposure of sensitive biometric information.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms biometric data from its original form into different parameter representations through cryptographic hashing and encryption. The biometric template undergoes parameter changes including conversion to numeric arrays, application of salt values, iterative hashing, and encryption with keys. These parameter transformations maintain the unique identifying characteristics necessary for authentication while rendering the data irreversibly obscured.

Inventive Principle:
Principle #35Parameter changes

2Object-affected harmful factors

If biometric data is encrypted using multiple operations, then security is improved, but processing complexity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent performs preliminary cryptographic transformations during the biometric enrollment phase, including hashing, salting, and encryption operations. By pre-processing the biometric data into secure representations before storage or transmission, the system eliminates the need for complex decryption operations during authentication. The preliminary action of converting biometric data to hashed form once during enrollment simplifies subsequent verification processes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent divides the biometric data processing into distinct segmented operations: initial hashing, salt addition, key generation, encryption, and verification. Each operation processes a specific portion or aspect of the data independently. This segmentation allows the system to manage complexity by breaking down the encryption process into manageable, modular steps that can be implemented and verified separately.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If original biometric information is transmitted over network, then authentication functionality is improved, but data exposure risk is worsened

Engineering Contradiction:
Improveauthentication functionalityVSAvoiddata exposure risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent creates cryptographic copies (hashes and encrypted representations) of biometric data instead of transmitting the original biometric templates over networks. During authentication, the system transmits only the hashed and encrypted biometric representations along with authentication requests. These copies contain sufficient information for verification purposes while being mathematically irreversible to the original biometric data, thus enabling network transmission without exposing sensitive information.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent uses hashed and encrypted biometric data as intermediary representations for network transmission. Instead of sending original biometric templates or unencrypted data, the system converts biometric information into cryptographic intermediaries that serve as safe carriers for authentication purposes. These intermediary representations can be transmitted over networks without compromising security, as they cannot be reverse-engineered to reveal the original biometric information.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11038880B2Encrypted biometric authentication
Publication Date: 2021.06.15 BANK OF AMERICA CORP
  • US11038880B2 patent drawing
  • US11038880B2 patent drawing
  • US11038880B2 patent drawing

AI summary

In an embodiment of the present disclosure, an embodiment includes a user device comprises a conversion engine configured to receive a biometric file comprising biometric identification information of a user and convert the biometric file into a first numeric representation. The user device further comprises a hashing engine configured to create a superimposed numeric representation by performing a convolution operation on the first numeric representation and a second numeric representation, wherein the second numeric representation is based on a key file that is different from the biometric file. The hashing engine is further configured to convert the superimposed numeric representation into a hash value, send, over a network connection, the hash value for authentication, and receive a message indicating whether authentication was successful.