Biometric Data Obfuscation via Nonce Permutation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometrics are static and vulnerable to compromise, lacking the ability to change or adapt, which diminishes their security and allows unauthorized access from non-approved devices.
Innovation Solution
A system that sends a nonce to a user communication device, where obfuscated biometric data is generated using the nonce and first biometric data, and then reversed to authenticate the user, enhancing security by requiring both valid biometric data and the specific permutation algorithm to reverse the obfuscation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data is stored and used for authentication, then authentication capability is provided, but security is weakened because biometrics are static and vulnerable to compromise
Solution Approach 1:
The patent applies dynamics by transforming static biometric data into dynamic obfuscated biometric data that changes with each authentication attempt through the application of different nonces. The biometric template is continuously transformed using cryptographic obfuscation, making it adaptable and resistant to compromise while maintaining authentication reliability.
Solution Approach 2:
The patent changes the parameter state of biometric data by applying cryptographic obfuscation functions that transform the original biometric template into obfuscated form. The nonce parameter is introduced to create variable transformations, and the obfuscation strength parameter can be adjusted to balance security and recognition accuracy.
2Reliability
If obfuscation process is applied to biometric data, then security is enhanced, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary obfuscation module that sits between the biometric capture device and the authentication database. This module applies cryptographic transformations using nonces and obfuscation functions, acting as a mediator that enhances security without requiring fundamental changes to the existing biometric system architecture.
Solution Approach 2:
The authentication system is segmented into distinct functional modules: biometric capture, nonce generation, obfuscation application, database storage, and verification. This segmentation allows each component to be optimized independently and simplifies the overall system complexity by distributing the obfuscation workload across multiple specialized components.
3Reliability
If nonce-based obfuscation is used, then unauthorized access is prevented, but processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing multiple nonces in the authentication database alongside the obfuscated biometric templates. During verification, the system can quickly test multiple nonce combinations without performing complex real-time obfuscation, significantly reducing authentication processing time while maintaining security.
Solution Approach 2:
The system uses periodic action by implementing time-based nonce rotation where nonces are updated at predetermined intervals or after a certain number of authentication attempts. This periodic refresh of obfuscation parameters maintains security without requiring continuous complex processing, balancing security and performance.
Data Source
AI summary
A nonce is sent to a user communication device. Obfuscated biometric data is received from the user communication device. The obfuscated biometric data is generated by an obfuscation process that uses the nonce and first biometric data. The first biometric data is generated from a biometric of a user at the user communication device. For example, the first biometric data may be biometric data from a fingerprint scan. The obfuscation process is reversed by using the first nonce to produce the first biometric data. The first biometric data is compared to known biometric data of the user. In response to the first biometric data being within a threshold of the known biometric data, the user is authenticated.