Secure Biometric Data Processing via Masking and Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure biometric data processing, such as calculating Euclidean distances, often require costly cryptographic techniques, which can be computationally expensive and compromise confidentiality by potentially revealing sensitive information.
Innovation Solution
A secure data processing method that uses a secure component integrated into an electronic device, performing simple operations like additions and multiplications, to calculate a function between biometric data without revealing information to either the server or client unit, utilizing masking data and unconscious transfer to ensure confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic techniques are used for secure biometric data processing, then data confidentiality is improved, but computational cost and bandwidth consumption increase significantly
Solution Approach 1:
The patent segments the secure computation process into distinct phases: local preprocessing of biometric data at the client device, encrypted transmission of processed features, and server-side matching operations. This segmentation allows each party to perform only necessary computations locally, reducing overall computational burden while maintaining security through cryptographic protocols during the transmission and matching phases.
Solution Approach 2:
The patent introduces cryptographic protocols as an intermediary layer between the client and server. Instead of directly sharing raw biometric data, the system uses encrypted feature representations and secure comparison protocols that act as intermediaries, enabling confidential computation without requiring either party to expose their raw data or perform expensive cryptographic operations continuously.
2Reliability
If secure cryptographic methods are employed to protect biometric data, then privacy protection is improved, but processing speed and efficiency deteriorate
Solution Approach 1:
The patent applies preliminary action by performing biometric feature extraction and preprocessing locally on the client device before transmission. This advance processing reduces the amount of data that needs secure transmission and enables the server to work with pre-processed features, thereby speeding up the overall matching process while maintaining privacy through secure communication channels.
Solution Approach 2:
The system performs partial cryptographic operations only where absolutely necessary - specifically during data transmission and the final matching comparison. The bulk of the processing (feature extraction, normalization, and preliminary filtering) is performed in plaintext locally, applying cryptography only to the extent needed for security, thus optimizing the balance between privacy protection and processing efficiency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a processing method, including the calculation of one function between a datum to be compared and a reference datum. The function can be written in the form of a sum of: a term that depends on the datum to be compared, a term that depends on the reference datum, and a polynomial, such that all the monomials of the polynomial include at least one coordinate of each datum. The method includes an initialization step including: generating masking data; scrambling reference data by means of a server unit on the basis of said masking data; and calculating, by means of a client unit, the term of the function that depends on the datum to be compared. The method also includes steps for executing the calculation of the function between the datum to be compared and the reference datum, indexed by an index c, during which: the client unit sends the coordinates of the datum to be compared to a secure component, which returns said datum, in a masked form, to said component; the client unit retrieves, from the server unit, the reference datum, indexed by the index c and scrambled by the masking data; and on the basis of the data obtained from the secure component and the server unit, the client unit calculates the sum of the term of the function that depends solely on the reference datum and the polynomial term and adds, to said sum, the term that depends on the datum to be compared, such as to obtain the result of the function.