Secure Data Access via Biometric Password Release
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing email encryption systems are cumbersome due to the complexity of exchanging encryption keys and passwords, which are often compromised by cyber attacks and difficult to remember, and they store sensitive information on servers accessible by administrators.
Innovation Solution
A method and system that uses a user's public encryption key to encrypt digital data, with password retrieval via a secure communication interface and biometric verification on a user device, ensuring secure access without storing passwords on servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users exchange encryption keys and use complex passwords for email encryption, then security is improved, but ease of operation deteriorates and device complexity increases
Solution Approach 1:
The patent extracts the password management function from the server to the user's mobile device. The mobile device generates, stores, and manages passwords locally without requiring server storage or exchange, eliminating the complexity of key exchange while maintaining security. The server only stores encrypted data, not passwords or keys.
Solution Approach 2:
The mobile device acts as an intermediary between the user and the server. It generates passwords, encrypts them locally, and transmits only encrypted data to the server. The mobile device also retrieves and decrypts data, serving as a secure intermediary that eliminates the need for complex key exchange protocols.
2Ease of operation
If passwords are stored on a server for access by administrators, then ease of operation is improved, but reliability deteriorates due to potential unauthorized access
Solution Approach 1:
The patent removes password storage from the server entirely and places it exclusively on the user's mobile device. The server never stores passwords, encryption keys, or unencrypted data. Only encrypted data stored in the database is accessible, and even then, it cannot be decrypted without the mobile device's local password.
3Ease of operation
If simple passwords are used, then ease of operation is improved, but reliability deteriorates due to susceptibility to cyber attacks
Solution Approach 1:
The mobile device autonomously generates strong passwords using its secure random number generator and manages them locally without user intervention. The user simply interacts with the application interface, while the device handles password generation, storage, and encryption automatically, eliminating the need for users to create or remember complex passwords.
4Reliability
If encryption key exchange is implemented, then reliability is improved, but device complexity increases
Solution Approach 1:
The patent extracts the encryption key generation and management functions from the server and places them entirely on the mobile device. The device generates its own encryption keys, stores them securely in its keychain, and uses them for encryption and decryption. The server only handles encrypted data, eliminating the need for key exchange protocols.
Data Source
AI summary
The invention relates to a method for secure access to digital data, said digital data being encrypted with a given user's public encryption key and stored on a server. The method comprises the following steps:A. receiving at said server a request from said user to access said digital data;B. transmitting, via said server, via a secure communication interface, a request to a secure user device to release a password stored on said user device;C. obtaining said password via said secure communication interface, from said user device in response to a validated security test issued by said user device to a user; andD. retrieving, via said server, the user's encrypted private key, said user's private key being encrypted with said password, and decrypting said user's encrypted private key with said password to obtain that user's private key, and decrypting said encrypted digital data with said user's private key, and presenting said digital data to said user.Another method is provided for new users who do not yet have encryption keys, where the sender temporarily encrypts the digital data and, upon user enrollment, the server re-encrypts the data to the user's public encryption key before proceeding with the server-assisted decryption process.