Biometric Template Synchronization via Encrypted Server Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing biometric authentication protocols face challenges in securely synchronizing and restoring biometric templates across multiple devices, leading to inconsistent templates and poor user experience, especially when users have multiple devices with different or no biometric sensors.
Innovation Solution
A system that utilizes a synchronization server to securely register, synchronize, and restore biometric templates among client devices by using protected environments for encryption and key management, allowing devices to exchange and store sync wrapping keys for secure template sharing and synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If biometric templates are stored on multiple client devices, then user access convenience is improved, but template consistency and security are worsened
Solution Approach 1:
The system segments the biometric template management into two parts: the actual biometric template data is segmented and distributed to multiple client devices for local storage and access, while a separate synchronization server maintains the master copy and coordinates updates across all devices. This segmentation allows users to access templates locally (improving convenience) while the server ensures consistency (maintaining reliability).
Solution Approach 2:
A synchronization server acts as an intermediary between multiple client devices. When template updates occur on any device, the synchronization server receives the update, validates it, and then propagates the changes to all other registered devices. This intermediary mechanism ensures that all devices maintain consistent template versions without requiring direct peer-to-peer communication, thus resolving the contradiction between local access convenience and global consistency.
2Ease of operation
If biometric templates are synchronized across multiple devices, then user experience is improved, but security risks are worsened
Solution Approach 1:
Before synchronizing biometric templates across devices, the system performs preliminary actions including authentication verification, device registration, and security policy validation. The synchronization server verifies user identity and device legitimacy before allowing template distribution. This preliminary security check ensures that only authorized devices receive templates, mitigating security risks while enabling the beneficial cross-device synchronization functionality.
Solution Approach 2:
The system changes the parameter of template representation by storing and synchronizing encrypted template data rather than plain text. Templates are transformed into secure cryptographic representations that maintain their functional utility for authentication while being resistant to unauthorized access or misuse. This parameter change allows synchronization to proceed with improved security characteristics, reducing the harmful factors associated with template distribution.
3Reliability
If biometric templates are encrypted for security, then security is improved, but device compatibility is worsened
Solution Approach 1:
The synchronization server implements a universal encryption and decryption mechanism that works across diverse device types and platforms. Rather than requiring each device to implement its own encryption scheme, the server provides a standardized cryptographic interface that handles template encryption, decryption, and synchronization uniformly across all registered devices. This multi-functional approach maintains security through encryption while ensuring broad device compatibility through standardized protocols.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
Generally, this disclosure describes technologies for restoring and/or synchronizing templates such as biometric templates to/among one or more client devices. In some embodiments one or more client devices may register with a synchronization server and provide encrypted copies of their reference templates to the server. In a restoration operation, the synchronization server may provide an encrypted copy of a client's reference template(s) to the client, which may decrypt them in a protected environment. In a synchronization operation, the synchronization server may provide encrypted copy of a first client's template(s) to a plurality of second clients. The second clients may then decrypt the encrypted template(s) within a protected environment using an appropriate decryption key.