Biometric Processor Secure Mode Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices face security vulnerabilities as biometric information can be hacked and disclosed, necessitating enhanced protection methods for biometric data during authentication processes.
Innovation Solution
An electronic device with a processor operating in both normal and secure modes, where biometric data is processed and secured by creating biometric data from sensed data, encrypting it, and using it for authentication, thereby preventing unauthorized access and disclosure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric data is processed in normal mode for ease of operation, then user authentication convenience is improved, but security vulnerability increases due to potential hacking and disclosure
Solution Approach 1:
The processor is divided into two independent execution environments: a normal mode for user-friendly operations and a secure mode for security-critical processing. This segmentation allows biometric data to be processed securely in the secure mode while maintaining ease of use in the normal mode, resolving the contradiction between convenience and security.
Solution Approach 2:
A mode switch acts as an intermediary between the normal mode and secure mode. The mode switch enables controlled transitions between execution environments, allowing the system to maintain security while preserving user convenience by mediating between the conflicting requirements of security processing and ease of operation.
2Reliability
If biometric data is processed in secure mode to enhance security, then protection against unauthorized access is improved, but system complexity increases due to dual mode operation
Solution Approach 1:
The processor execution environment is segmented into distinct normal mode and secure mode with dedicated execution paths. This segmentation isolates security-critical operations from general-purpose operations, enhancing security while managing complexity through clear separation of functions rather than monolithic design.
Solution Approach 2:
The secure mode is pre-configured with security protocols and processing capabilities before actual biometric authentication occurs. This preliminary preparation ensures that when security processing is needed, the system can transition to secure mode without adding operational complexity during the authentication process itself.
3Adaptability or versatility
If biometric information is stored and processed to enable authentication functions, then system functionality is improved, but vulnerability to hacking and disclosure increases
Solution Approach 1:
Security-critical biometric processing operations are extracted from the normal execution environment and placed in a dedicated secure mode. This extraction isolates sensitive data processing from potential hacking vectors in the normal mode, enabling authentication functionality while reducing vulnerability to disclosure.
Solution Approach 2:
The system converts the potential harm of data vulnerability into a benefit by implementing selective processing modes. The secure mode transforms what would be a vulnerability (separate processing paths) into a security feature, where biometric data is only processed in the secure environment, turning the structural complexity into protective measure.
Data Source
AI summary
A method and apparatus for processing biometric information in an electronic device including a processor that operates at a normal mode or at a secure mode, the method comprising, detecting a biometric input event from a biometric sensor module at normal mode, creating biometric data based on sensed data from the biometric sensor module at the secure mode, performing biometric registration or biometric authentication based on the created biometric data at the secure mode, and providing result information of biometric registration or biometric authentication at the normal mode.