Biometric Identification via Double Encryption and Authority Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identifying individuals do not adequately ensure the confidentiality and security of personal biometric data, particularly in compliance with regulations like GDPR, which requires robust protection mechanisms.
Innovation Solution
A system and method employing double encryption of biometric data using certified authority signatures and private keys, where data is first encrypted by an authority and then decrypted using a private key held by the individual, ensuring secure and authorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data is stored and processed for identification purposes, then identification capability is improved, but data confidentiality and security are compromised
Solution Approach 1:
The system segments biometric data into multiple encrypted components stored separately in the distributed ledger, preventing any single point from containing complete identifiable information. The biometric template is divided into feature vectors that are individually encrypted and distributed across multiple nodes.
Solution Approach 2:
A trusted authority acts as an intermediary to issue cryptographic credentials and manage key distribution. The authority signs verification data without directly storing raw biometric information, mediating between the user and the identification system while preserving privacy.
2Object-affected harmful factors
If complex encryption mechanisms are implemented to protect personal data, then data security is improved, but system complexity increases
Solution Approach 1:
The system uses universal cryptographic standards (asymmetric encryption, digital signatures) that serve multiple functions: protecting stored data, securing transmissions, verifying identities, and enabling decentralized trust. These standardized protocols reduce implementation complexity compared to custom security mechanisms.
3Object-affected harmful factors
If biometric data is encrypted and stored in distributed ledgers, then data protection is improved, but access and verification processes become more complex
Solution Approach 1:
Verification data including cryptographic keys and encrypted biometric templates are pre-stored in the distributed ledger during enrollment. When identification is needed, the system simply retrieves and decrypts pre-prepared data rather than processing raw biometric information in real-time, streamlining the verification process.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method and a system for identifying a person while ensuring the confidentiality of their personal data, comprising: the transmission of encrypted data E" to the mobile terminal which uses a private key of the individual to decrypt the data E", (46), the transmission of the decrypted data E' to the authentication server which performs the following steps: - A request to an authority S3 to decrypt the encrypted data E' with a private key of the authority S3, in order to obtain the data E specific to the individual and simultaneously requests verification of the signature of the data E in order to guarantee its authenticity, - The transmission to a biometric server S1 of the data E as well as the identifier of the equipment EQ, - The biometric server S1 retrieves the data acquired by the equipment EQ and compares this data with the doubly decrypted data E in order to authenticate the individual,- The authentication result is transmitted to the S4 server, which notifies the EQ equipment that the information is accurate.