Biometric Authentication Data Integrity via Embedded Secret Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric authentication systems in mobile payment processes are vulnerable to cybersecurity threats, particularly due to data transmission links that can be compromised by spoofing and replay attacks, where intercepted data segments can be reused to gain unauthorized access.
Innovation Solution
A method that involves generating and verifying unique secrets for each image frame in a biometric data stream, ensuring that only authentic data segments are processed by comparing modified and unmodified frames using a secret generator and comparator module, thereby preventing unauthorized data insertion and minimizing replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data transmission links are used for mobile authentication, then authentication convenience is improved, but vulnerability to replay attacks and spoofing increases
Solution Approach 1:
The system embeds a secret code into selected image frames before transmission. This preliminary action ensures that when frames are received, their authenticity can be verified by regenerating the secret code independently and comparing it with the embedded code, preventing replay attacks while maintaining transmission convenience
Solution Approach 2:
A secret code acts as an intermediary verification mechanism between the transmitted image frames and the authentication system. The secret code is embedded in frames as a mediator that proves frame authenticity without interfering with the normal image transmission and authentication process
2Reliability
If encryption is applied to data segments, then data security is improved, but processing complexity and key management overhead increase
Solution Approach 1:
Instead of using complex, long-term encryption keys, the system uses simple secret codes that are regenerated independently at both ends for each verification. These short-living secret codes are much simpler than encryption keys and require no complex key management infrastructure
Solution Approach 2:
The verification function is extracted from complex encryption/decryption operations. By separating the verification mechanism (secret code comparison) from the main authentication process, the system achieves security without the overhead of cryptographic key management and processing
3Reliability
If intermittent verification is performed on image data, then detection of imposter frames is improved, but processing time and computational overhead increase
Solution Approach 1:
Instead of verifying every single image frame (excessive action), the system performs intermittent verification on selected frames (partial action). This reduces processing time and computational overhead while still providing effective detection of replay attacks and imposter frames
Solution Approach 2:
The system skips verification for frames that are not selected for intermittent checking, allowing rapid processing of these frames. This skipping approach maintains security through periodic verification while significantly reducing overall processing time and computational burden
Data Source
AI summary
Systems and methods of detecting an unauthorized data insertion into a stream of data segments extending between electronic modules or between electronic components within a module, wherein a Secret embedded into the data stream is compared to a Replica Secret upon receipt to confirm data transmission integrity.