Biometric Template Encryption for Multi-Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods require multiple biometric enrollment steps across multiple user devices, making the process cumbersome and inconvenient for users.
Innovation Solution
A method involving the generation and transmission of public and private keys between user devices and a server, allowing for the encryption and sharing of biometric templates, and enabling secure authentication without the need for repeated biometric enrollment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple biometric enrollment steps are required for each user device, then authentication security is maintained, but user convenience and operational ease deteriorate
Solution Approach 1:
The system performs preliminary biometric enrollment on a first user device, encrypting the biometric template with the device's public key. This pre-enrollment action allows the encrypted template to be securely transferred to subsequent devices, eliminating the need for repeated biometric enrollment steps while maintaining security through cryptographic protection
Solution Approach 2:
The system creates and transfers a copy of the encrypted biometric template from the first user device to the second user device. This copy mechanism allows the same authenticated user identity to be recognized across multiple devices without requiring the user to re-enroll their biometric data on each device
2Ease of operation
If biometric templates are transferred between devices, then enrollment convenience is improved, but data security and privacy may deteriorate
Solution Approach 1:
The biometric template is encrypted with the target device's public key before transfer occurs. This preliminary encryption action ensures that the data is protected during transmission and can only be decrypted by the intended device holding the corresponding private key, preventing unauthorized access or interception
Solution Approach 2:
The patent introduces cryptographic keys as an intermediary layer between the biometric data and the transfer process. The public key encrypts the template during transfer, and the private key decrypts it at the destination, creating a secure channel that protects the biometric data from exposure during the transfer operation
Data Source
AI summary
A method includes generating a second public key and a second private key of a second public-private key pair, and transmitting the second public key to a first user device, which stores an encrypted biometric template. The encrypted biometric template is a biometric template encrypted with a first public key of a first public-private key pair. The first user device encrypts the encrypted biometric template with the second public key to form a double encrypted biometric template. The method includes receiving the double encrypted biometric template from the first user device, decrypting the double encrypted biometric template using the second private key to obtain the encrypted biometric template, determining a test biometric template and encrypting the test biometric template, comparing the encrypt-test biometric template and the encrypted biometric template to obtain an encrypted biometric match score, and transmitting the encrypted biometric match score to a server computer.