Biometric Key Release for Secure Access to Encrypted Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing email encryption systems face challenges with complex passwords that are difficult to remember and vulnerable to cyber attacks, and stored encryption keys can be accessed by system administrators, compromising security.
Innovation Solution
A method and system for secure access to encrypted digital data using a user's public encryption key, where a password is stored on a secure user device and decrypted via a validated biometric test, allowing secure communication with a server to retrieve the encrypted private key for decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users store passwords and encryption keys on a server, then access is simplified, but security is compromised because system administrators can access the data
Solution Approach 1:
The system segments the authentication process into multiple components: biometric data is stored locally on the user's device in a secure element, while the server only stores encrypted private keys. The biometric authentication occurs locally on the device, and only after successful local authentication does the server receive a request to decrypt and provide the private key. This segmentation ensures that even if the server is compromised, administrators cannot access biometric data or directly obtain private keys without the user's biometric verification.
2Reliability
If users use complex passwords for encryption, then security is improved, but usability deteriorates because users find it difficult to remember them
Solution Approach 1:
The system replaces the mechanical system of human memory and password management with biometric authentication. Instead of requiring users to remember complex passwords, the system uses physiological biometric data (such as fingerprints, facial recognition, or iris patterns) that users naturally possess and can easily provide. The biometric data is converted into cryptographic credentials through a secure process, eliminating the need for users to memorize complex strings while maintaining strong security.
3Device complexity
If encryption keys are stored on a server, then key management is simplified, but vulnerability to cyber attacks increases
Solution Approach 1:
The system performs preliminary biometric authentication on the user's device before any key access request is processed by the server. The biometric data is verified locally and converted into a cryptographic credential in advance. Only after this preliminary authentication does the server receive a request, and even then, it only provides the private key after verifying the credential. This preliminary action ensures that even if the server is vulnerable to cyber attacks, attackers cannot obtain private keys without first bypassing the secure local biometric authentication on the user's device.
Data Source
AI summary
The invention relates to a method for secure access to digital data, said digital data being encrypted with a given user's public encryption key and stored on a server. The method comprises the following steps:A. receiving at said server a request from said user to access said digital data;B. transmitting, via said server, via a secure communication interface, a request to a secure user device to release a password stored on said user device;C. obtaining said password via said secure communication interface, from said user device in response to a validated security test issued by said user device to a user; andD. retrieving, via said server, the user's encrypted private key, said user's private key being encrypted with said password, and decrypting said user's encrypted private key with said password to obtain that user's private key, and decrypting said encrypted digital data with said user's private key, and presenting said digital data to said user.