Biometric Access Control Using Secure Sketch and PUF Obfuscation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional biometric access control systems are vulnerable to physical attacks, leading to template theft and unauthorized access, as they often store raw biometric templates or rely on insecure methods like passwords, which can be compromised through various attacks.
Innovation Solution
The implementation of a biometric access control system that uses secure sketch generators and physical unclonable functions (PUFs) to generate and store protected biometric templates, ensuring irreversibility, unlinkability, and revocability, by hashing biometric data and using PUFs to create unique obfuscation keys for hardware obfuscation, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional biometric systems store raw biometric templates, then authentication convenience is improved, but security against physical attacks deteriorates
Solution Approach 1:
The patent extracts the biometric template from its raw form and separates it into two components: a protected template (hash output) and helper data. The protected template is stored securely while the helper data is made public, allowing authentication without storing the original biometric template. This extraction resolves the contradiction by removing the security vulnerability while preserving authentication functionality.
Solution Approach 2:
The patent introduces a cryptographic hash function as an intermediary between the biometric template and its storage form. The hash function transforms the raw biometric template into a protected template, acting as a mediator that protects the original data while enabling authentication. This intermediary layer resolves the contradiction by providing security without compromising ease of operation.
2Device complexity
If passwords or dongles are used for access control, then implementation simplicity is improved, but vulnerability to theft and misuse deteriorates
Solution Approach 1:
The patent replaces mechanical access control methods (passwords, dongles, smart cards) with a cryptographic system based on hash functions and helper data. This substitution eliminates physical carriers that can be stolen or lost, resolving the contradiction by maintaining simplicity while removing vulnerability to theft and misuse.
3Reliability
If biometric templates are protected using cryptographic hashing, then security against template theft is improved, but ability to revoke and reissue templates deteriorates
Solution Approach 1:
The patent makes the system dynamic by allowing the helper data to be changed while keeping the protected template structure intact. When revocation is needed, new helper data is generated and paired with the same protected template, enabling reissuance without compromising security. This dynamic approach resolves the contradiction between security and adaptability.
Data Source
AI summary
In general, embodiments of the present disclosure provide methods, apparatus, systems, computer program products, computing devices, computing entities, and/or the like for setting up biometric access for a legitimate user to a design. In accordance with various embodiments, a biometric template is received originating from the user and is inputted to a first secure sketch generator configured to use first transformation parameters comprising a hash function to generate a protected biometric template by hashing the biometric template. The protected biometric template is inputted to a second secure sketch generator configured to use second transformation parameters comprising a physical unclonable function serving as a fingerprint of the design to generate an original obfuscation key from the protected biometric template. The original obfuscation key is then used to obfuscate the design to generate an original bitstream, wherein the first and second transformation parameters and the original bitstream are stored on the design.