Digital File Authentication via Biometric Hash Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating public keys and digital files rely on central authorities, which are vulnerable to tampering and require constant availability, and do not provide strong binding between the key and its originator, allowing forgers to replace documents if they obtain the PIN.
Innovation Solution
A method where biometric information is integrated into the digital file, using cryptographic hash functions like SHA, and biometric authentication files are generated to securely bind the originator's identity to the file, allowing recipients to verify the authenticity of the originator through video, audio, or gesture recordings, ensuring the integrity of the digital file.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central Certification Authority (CA) is used to authenticate public keys, then authentication can be performed, but the system requires constant server availability and is vulnerable to tampering and hacking
Solution Approach 1:
The patent extracts the authentication verification function from the central CA server and places it in the recipient's device. The recipient can independently verify the originator's identity by computing the same biometric hash locally and comparing it with the hash embedded in the digital file, eliminating the need for constant server availability and reducing infrastructure complexity.
Solution Approach 2:
The originator performs preliminary authentication by embedding their biometric hash directly into the digital file during file creation. This preliminary action allows the recipient to verify authenticity without needing to contact a central authority, as all verification data is already present in the file itself.
2Reliability
If a PIN is used to encrypt the hash in biometric authentication, then the originator's identity is bound to the document, but the binding to the document is weak allowing forgery if the PIN is compromised
Solution Approach 1:
The patent merges the biometric authentication data directly with the document content by computing a hash over both the document and the biometric identifier. This creates a combined authentication mechanism where the biometric hash is inextricably linked to the specific document content, making forgery impossible even if the PIN is compromised, as the hash would not match the forged document.
3Reliability
If traditional CA certificates are used, then public key authentication is provided, but users cannot directly verify the associated ID of a public key
Solution Approach 1:
The patent enables self-service verification where the recipient can independently verify the originator's ID without relying on a central CA. The recipient computes the biometric hash using the same algorithm as the originator and compares it directly with the hash embedded in the file, providing transparent and direct verification capability.
Data Source
AI summary
This invention provides a means of authenticating digital files without the need for a central trusted authority. A message digest of one or more digital files is calculated, preferably using a cryptographic hash function and all or part of the digest value is implanted into one or more biometric information files produced by the originator of the digital files or a trusted third party. The recipient of the digital files and biometric information files is able to determine all or part of the digest value from the biometric information files, check that this corresponds to the calculated message digest of one or more digital files as well as check the identity of the originator or trusted third party. In further embodiments the biometric information files contain all or part of a digital signature generated by the originator of the digital files or a trusted third party. The invention may be used in many applications including the distribution of public encryption keys.