Edge Data Packages with Biometric Encryption and Tamper Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Obtaining authenticating information is an inherently insecure process, making it challenging to ensure secure data processing and access control.
Innovation Solution
Scanning biometric signatures and device identifiers to generate encrypted user data, using digital keys for access control, and verifying the data with a security token to create secure data packages that invalidate upon alteration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authenticating information gathering methods are used, then access control can be implemented, but security is compromised due to inherent insecurity in obtaining authenticating information
Solution Approach 1:
The patent extracts the vulnerable step of obtaining authenticating information from the authentication process. Instead of gathering traditional authenticating information (passwords, credentials) which is inherently insecure, the system uses biometric signatures that are already present on the device and cannot be stolen or phished. The biometric signature serves as the authenticating information without requiring insecure information gathering operations.
Solution Approach 2:
The patent introduces a biometric signature as an intermediary between the user and the authentication process. This intermediary is derived from physical characteristics (fingerprint, facial recognition, voice) that are inherently secure because they cannot be transmitted, copied, or phished. The biometric signature acts as a mediator that eliminates the need for traditional password-based authentication which has inherent security vulnerabilities.
2Ease of operation
If user data is stored in plaintext for easy access, then ease of operation is improved, but security and data integrity are compromised
Solution Approach 1:
The patent segments the user data into encrypted portions that can be selectively accessed. The data is encrypted using keys derived from biometric signatures, allowing the system to maintain security while enabling authorized access. The encryption divides the data into manageable segments that can be accessed without exposing the entire data structure, balancing security with operational ease.
Solution Approach 2:
The patent changes the parameter of data storage from plaintext to encrypted form. By transforming the data representation through encryption, the system maintains ease of operation for authorized users while fundamentally improving security and integrity. The encryption parameter transformation ensures that data cannot be read or modified without the proper biometric-derived key.
3Productivity
If data packages are transmitted without encryption, then transmission speed and efficiency are improved, but security and prevention of tampering are compromised
Solution Approach 1:
The patent applies preliminary encryption action to data packages before transmission. The data is encrypted using biometric-derived keys prior to being placed in the data package for transmission. This preliminary action ensures that even if the transmission is intercepted or modified, the data remains secure and tamper-evident, maintaining both efficiency and security.
Data Source
AI summary
Disclosed are example methods, systems, and devices that allow for secure data processing using data packages generated by edge devices. The techniques include generating a biometric signature using information captured by a computing device, and encrypting user data obtained via the computing device using the biometric signature and a device identifier of the computing device. A security token can be generated and utilized by the computing device to generate a data package, which is configured such that any change to the data package would cause a validation process of the data package using the security token to fail. The data package can be encrypted using various digital keys and provided to secondary computing systems.