Cancellable Biometric Credentials Using Randomized Projections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric data, once compromised, cannot be easily revoked or canceled, posing security and privacy risks due to the permanent association with individuals and vulnerabilities in template protection schemes.
Innovation Solution
A biometric cryptosystem that generates a revocable, public template by combining multiple biometrics, applying randomized projections to extract stable bits, and using a hash function to create a public cryptographic key without storing the biometric information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If biometric information is stored for verification purposes, then verification accuracy is improved, but security and privacy risks increase because the data cannot be revoked or canceled once compromised
Solution Approach 1:
The system segments biometric verification into two independent components: (1) a revocable public template stored on the device that can be canceled if compromised, and (2) a non-revocable private key stored securely that cannot be extracted. This segmentation allows the public template to provide verification accuracy while limiting security risks to only the revocable portion.
Solution Approach 2:
The patent introduces an intermediary cryptographic transformation process that converts raw biometric data into a public template through a one-way function. This intermediary step ensures that the original biometric information is never stored, only its cryptographic representation exists, providing a security buffer while maintaining verification capability.
2Reliability
If template protection schemes are applied to safeguard biometrics, then security is improved, but verification accuracy degrades
Solution Approach 1:
The system changes the parameter of template protection from protecting the entire biometric template to protecting only the private key derivation process. The public template is intentionally designed to be revocable and replaceable, while the private key remains protected through secure enclave storage and non-exportable cryptographic operations.
3Measurement precision
If multiple biometrics are combined to increase accuracy, then verification accuracy is improved, but system complexity increases
Solution Approach 1:
The patent merges multiple biometric modalities into a single unified public template through cryptographic hashing. Instead of maintaining separate verification systems for different biometrics, the system combines them into one revocable template that can be independently managed and canceled without affecting the underlying private key or requiring complex multi-factor coordination.
Data Source
AI summary
Methods and systems are provided that allow a user to access a cryptosystem configured to revoke or cancel biometric credentials associated with the user. The cryptosystem may use randomized seeds and projections to identify elements unique to the user and generate a cancellable cryptographic key set used to verify the identity of the user.