Biometric Authentication Verification via Sumcheck Protocol

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing biometric authentication and identification systems face reliability issues when performed by personal devices, as they lack trusted processing units, leading to potential fraud or errors in comparison results between biometric candidate and reference data.

Innovation Solution

A method utilizing a Sumcheck protocol to verify the result of biometric data comparison by converting biometric data into multivariate polynomials, allowing verification entities to confirm the correctness of distance calculations between biometric candidate and reference data using personal electronic devices with limited calculation capacity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If biometric authentication is performed by a personal electronic device, then processing time is reduced and wait files are avoided, but reliability of the authentication result deteriorates due to lack of trusted processing unit

Engineering Contradiction:
Improveauthentication timeVSAvoidauthentication result reliability
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

A verification entity acts as an intermediary between the personal electronic device and the authentication system. The device performs authentication locally and sends results to the verification entity, which then verifies the correctness of the distance calculation using polynomial-based verification protocols. This intermediary approach allows fast local processing while maintaining reliability through independent verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the traditional mechanical trust model (relying on a centralized trusted processing unit) with a mathematical verification system. Instead of trusting the device's computation, the system uses polynomial representations of biometric data and verification protocols to mathematically confirm the correctness of authentication results, substituting physical trust with cryptographic verification.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If a trusted processing unit is used for biometric authentication, then reliability of the authentication result is improved, but processing time increases and wait files are created

Engineering Contradiction:
Improveauthentication result reliabilityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The authentication process is segmented into two independent parts: (1) local authentication computation performed by the personal device, and (2) verification of the computation result performed by the verification entity. This segmentation allows the time-consuming verification to occur in parallel after the fast local authentication, rather than sequentially in a centralized system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The personal electronic device performs the authentication computation in advance and sends the result to the verification entity. The verification entity then verifies the result without needing to reperform the entire authentication process. This preliminary action by the device eliminates wait files while maintaining reliability through subsequent verification.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If polynomial-based verification is implemented, then verification capability is improved, but device complexity increases

Engineering Contradiction:
Improveverification capabilityVSAvoidprocessing unit complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent uses polynomial representations as mathematical copies of the biometric data. Instead of verifying the original complex biometric matching process, the verification entity works with simplified polynomial representations that capture the essential computational structure. This copying approach simplifies the verification task while maintaining mathematical equivalence to the original authentication.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10461935B2Verification process of authentication or biometric identification
Publication Date: 2019.10.29 IDEMIA PUBLIC SECURITY FRANCE
  • US10461935B2 patent drawing
  • US10461935B2 patent drawing

AI summary

The invention proposes a method for processing biometric data, comprising verification of the result of a calculation of distance between a biometric candidate datum and at least one biometric reference datum, each comprising a number n of indexed components (ai, bi), said calculation of distance comprising that of a polynomial of the components of the biometric data,the method being executed by a proving entity and a verification entity, the method comprising steps during which:the proving entity communicates to the verification entity the result of calculation of the distance between the candidate and reference biometric data, and said data,the proving entity generates from each datum a function of a number d of variables fa(i1, . . . , id), fb(i1, . . . , id) where d=log2 n, defined for each variable on the set {0,1}, by reformulation of the index i of each component (ai, bi) in binary format,the proving entity generates from each function a polynomial of d variables ã(x1, . . . xd), {circumflex over (b)} (x1, . . . xd) defined on d where is a finite field, such that each polynomial ã, {circumflex over (b)} coincides with the corresponding function fa,fb on the set {0,1}d, and generates from the polynomials ã, {circumflex over (b)} a polynomial p(x1, . . . , xd) of d variables of the same expression as that of the distance between the data, andthe proving entity and the verification entity engage in a Sumcheck protocol applied to the polynomial p to verify the result of calculation of the distance between the data.