Multi-User Biometric Template Authentication via Distributed Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional biometric authentication systems face challenges in securely managing biometric templates across multiple mobile devices, particularly in large enterprises where devices are shared among workforce members, due to limitations in storage capacity and strict device access parameters, and the need to comply with privacy regulations like GDPR and CCPA.
Innovation Solution
A computer-implemented method and system for secure multi-user biometric template authentication (MBTA) that generates, updates, and removes biometric templates and PINs across multiple mobile devices, using a centralized database and symmetric shared secrets for encryption, and notifies devices of changes through an MQTT broker, allowing secure authentication and encryption of biometric data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If biometric templates are stored locally on each mobile device, then authentication speed is improved, but device storage capacity is exceeded and device access parameters are violated
Solution Approach 1:
The system segments biometric template management by distributing encrypted template portions across multiple devices rather than storing complete templates on a single device. Each mobile device holds a segment of the biometric authentication data, and authentication requires combining segments from multiple devices, thus reducing storage burden on individual devices while maintaining authentication capability
Solution Approach 2:
The system introduces a centralized server as an intermediary that manages the biometric template database and coordinates authentication across multiple devices. The server acts as a mediator that receives authentication requests, retrieves necessary template segments, performs matching operations, and returns results, enabling distributed authentication without requiring each device to store complete templates
2Adaptability or versatility
If biometric templates are distributed across multiple mobile devices, then device access parameter compliance is improved, but system complexity increases
Solution Approach 1:
The system creates a universal biometric authentication framework that works across multiple device types and platforms. The MBTA application implements standardized interfaces and protocols that enable the same biometric template to be distributed and authenticated across diverse mobile devices, making the system adaptable to different device specifications while maintaining consistent security policies
Solution Approach 2:
The system implements feedback mechanisms where the centralized server monitors authentication attempts, template distribution status, and device compliance. Based on this feedback, the server dynamically adjusts template distribution strategies, manages key rotation, and coordinates updates across devices, reducing the complexity of managing distributed biometric data through centralized control loops
3Reliability
If biometric data is encrypted using symmetric shared secrets, then data security is improved, but computational resources increase
Solution Approach 1:
The system applies different encryption strategies to different portions of biometric data based on their security requirements and access patterns. Critical template segments use strong symmetric encryption with shared secrets, while less sensitive metadata uses lighter encryption or hashing. This localized approach ensures high security for essential data while reducing overall computational overhead
Solution Approach 2:
The system performs preliminary encryption of biometric templates during the initial enrollment phase, storing pre-encrypted template segments across devices. During authentication, the system retrieves and decrypts these pre-prepared segments rather than encrypting data in real-time, significantly reducing computational resources required during authentication operations while maintaining strong security
Data Source
AI summary
Embodiments relate to secure multi-user biometric template authentication (MBTA) for mobile computing devices. In an embodiment, a request to generate a biometric template (BT) associated with an end user is generated via a first mobile computing device associated with an MBTA system. In response to the request, biometric data associated with the end user is collected and a BT associated with the end user is generated based on the biometric data. In embodiments, a personal identification number (PIN) is generated and associated with the BT related to the end user. The BT and/or the PIN associated with the end user are stored in an active BT database and/or an active PIN database respectively. MBTA data associated with the active BT database and/or the active PIN database is transmitted for storage on a plurality of mobile computing devices that are different than the first mobile computing device.