Biometric Template Encryption Without Stored Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric authentication systems face challenges such as registration complexity, storage security, and inefficiencies due to minor variations in biometric data, as well as vulnerabilities to quantum computing attacks, particularly with existing encryption methods like McEliece.
Innovation Solution
A biometric authentication system that uses a selection biometric template to determine encryption parameters for encrypting a second biometric template, allowing direct comparison of encrypted templates without decryption, and employs secure enclaves for sensitive data handling, ensuring secure storage and efficient authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username and password authentication is used, then users can easily remember their credentials, but the authentication security is vulnerable to dictionary attacks and credential theft
Solution Approach 1:
The patent replaces traditional mechanical authentication mechanisms (username/password entry and verification) with a biometric-based authentication system. The biometric template is processed through cryptographic functions to generate authentication credentials, substituting the manual credential management system with an automated biometric verification system that eliminates the need for users to memorize complex passwords while maintaining high security standards.
2Reliability
If biometric templates are stored in encrypted form using traditional encryption methods, then storage security is improved, but the system becomes vulnerable to quantum computing attacks
Solution Approach 1:
The patent changes the cryptographic parameters from traditional encryption schemes to post-quantum cryptographic functions. Specifically, it uses a cryptographic function that processes the biometric template to generate authentication credentials in a manner that is resistant to quantum computing attacks, thereby adapting the system to future security threats while maintaining current storage security requirements.
3Measurement precision
If biometric authentication requires exact matching of templates, then authentication precision is improved, but the system fails to accommodate minor variations in biometric data
Solution Approach 1:
The patent introduces cryptographic intermediaries (authentication credentials generated from the biometric template) that mediate between the stored biometric template and the presented biometric data. This intermediary layer allows for flexible comparison methods that can accommodate minor variations in biometric data while maintaining high authentication precision, as the cryptographic function processes both the stored and presented templates to determine authentication without requiring exact binary matching.
4Ease of operation
If encryption keys are stored separately for biometric template encryption, then decryption capability is maintained, but key storage creates additional security vulnerabilities
Solution Approach 1:
The patent extracts the decryption capability from separate key storage and integrates it directly into the authentication process. Instead of storing encryption keys separately that could be compromised, the system uses the cryptographic function to process the biometric template during authentication, eliminating the need for separate key storage while maintaining the ability to verify authentication credentials.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed in some examples are methods, systems, devices, and machine-readable mediums for securing biometric data using an encryption technique that does not require key storage or distribution. In some examples, a first biometric template of a user is input into a function that selects or determines parameters (such as an encryption key) of an encryption function that is then used to encrypt a second biometric template of the user.