Biometric Message Presentation With Selective Disclosure Proofs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing message presentation systems face safety threats when user data is leaked, allowing impersonation and unauthorized access to non-presented message parts.
Innovation Solution
A message presentation system that includes a presentation apparatus storing a user's template, an encrypted message, and an issuance proof, using biometric information to generate a user's secret key, decrypt the message, and create a partial message and presentation proof for secure selective presentation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users store issuance proof and message data to enable selective presentation, then selective presentation capability is improved, but safety deteriorates when data is leaked
Solution Approach 1:
The patent introduces biometric information as an intermediary factor between the user and their private key. The private key is not stored directly by the user but is instead derived through a cryptographic function that requires both the stored template and the biometric information at the time of use. This intermediary biometric factor prevents direct exposure of the private key even if stored data is leaked.
Solution Approach 2:
The patent changes the parameter of key storage from storing the private key directly to storing a template that can generate the private key when combined with biometric information. This parameter change transforms the security model from static key storage to dynamic key derivation, where the effective private key changes based on the biometric input provided at the time of operation.
2Ease of operation
If users store secret keys, messages, and issuance proofs to enable presentation, then presentation functionality is improved, but security deteriorates due to impersonation risk
Solution Approach 1:
Biometric information serves as a mediator that verifies the user's identity before allowing access to their private key. The system checks whether the provided biometric information matches the stored template, and only if it does, does it derive the private key for use in presentation operations. This prevents impersonation since an attacker without the biometric information cannot derive the private key.
3Quantity of substance
If complete messages are stored and presented, then presentation completeness is improved, but information security deteriorates when messages are leaked
Solution Approach 1:
The patent segments the message into two parts: a public component (the message content itself) and a private component (the private key used for verification). The message can be stored and transmitted in its complete form for presentation purposes, but the private key that would allow unauthorized access or leakage is protected through biometric verification. This segmentation allows complete message presentation while maintaining security through separate protection of the private key.
Data Source
AI summary
A presentation apparatus stores a template generated based on registration biometric information for a user, an encrypted message, and an issuance proof generated based on a user's public key corresponding to the template, a message, and an issuer's secret key corresponding to an issuance entity of the message, restores the message from the encrypted message using a user's secret key generated based on the template and the presentation biometric information for the user, generates a partial message from the message based on a presentation part that is information for identifying a part presented in the message, generates a presentation proof based on the presentation part, the issuance proof, and the user's secret key, and outputs the partial message and the presentation proof.