Biometric Template Segmentation for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Even when biometric templates are stored on the client, there is a risk of leakage of registered user information, leading to potential identity theft, and existing systems incur high calculation costs for authentication.
Innovation Solution
A collation system that includes a client terminal and a server apparatus, where the client terminal performs secret sharing of registered information into first and second components, with the second component sent to the server. The system involves multiple steps of similarity calculation distributed between the client and server to enhance security and reduce computational costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If templates are stored on the client terminal, then authentication speed is improved and server security costs are reduced, but the risk of leakage of registered user information increases
Solution Approach 1:
The patent divides the biometric template into two separate parts: the first part is stored on the client terminal while the second part is stored on the server. This segmentation allows the client to perform initial authentication locally (maintaining speed) while preventing complete template exposure (reducing leakage risk). The authentication process requires both parts to be combined and verified, ensuring security without sacrificing performance.
2Object-affected harmful factors
If templates are stored on the server, then information leakage protection is improved, but server security costs and system complexity increase
Solution Approach 1:
By segmenting the template storage between client and server, the system achieves information leakage protection without requiring comprehensive server security measures for the entire template. Only the second part of the template is stored on the server, reducing the security burden and system complexity compared to storing complete templates on the server.
3Measurement precision
If complete similarity calculation is performed on the client, then authentication accuracy is improved, but calculation costs and processing time increase
Solution Approach 1:
The patent segments the similarity calculation process into two stages: the client terminal performs initial similarity calculation between the first part of the template and the input biometric data, then the server completes the calculation using the second part of the template. This segmentation maintains authentication accuracy by performing comprehensive comparison while reducing the computational burden on any single device.
Solution Approach 2:
The patent uses an intermediary approach where the client and server cooperate through a defined protocol. The client sends the first part of the template and input data to the server, which then performs the complete similarity calculation. This intermediary interaction allows accurate authentication without requiring the client to perform computationally intensive operations alone.
Data Source
AI summary
A collation system 10 includes divide registered information to first information and second information, and to provide the second information to a server apparatus 200, perform a first step for similarity calculation between the registered information and collation information inputted for collation with the registered information, based on the collation information and the first information, send a calculation result of the first step to the server apparatus 200, perform a second step for the similarity calculation based on the calculation result of the first step received from a client terminal 100, and the second information, send a calculation result of the second step to the client terminal 100, and perform a third step for the similarity calculation based on the calculation result of the second step received from the server apparatus 200, and the first information to calculate similarity between the registered information and the collation information.