Certificate Loading for Face Recognition Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current mobile terminal security mechanisms, particularly in face recognition systems, lack effective authentication methods to prevent unauthorized access and ensure the integrity of third-party data processing algorithms, which can lead to security vulnerabilities.

Innovation Solution

A certificate loading method that involves a processor in a mobile terminal detecting a request for a target data processing algorithm, determining the corresponding certificate, and loading it to allow the algorithm to operate in an encrypted state, ensuring only legitimate processes can access and process reference data, thereby enhancing security through certificate authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If certificate authentication is implemented for data processing algorithms, then security against unauthorized access is improved, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by pre-loading certificates into the certificate cache during system initialization or algorithm registration phases. This allows the authentication mechanism to be ready in advance, reducing the complexity burden during actual runtime operations while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a certificate cache as an intermediary component between the data processing algorithms and the authentication mechanism. This cache stores pre-verified certificates and provides them to requesting processes, simplifying the overall system architecture by centralizing the authentication management and reducing direct complexity between multiple components.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If multiple certificates are loaded into cache, then authentication speed is improved, but memory consumption increases

Engineering Contradiction:
Improveauthentication speedVSAvoidmemory consumption
Core Design Contradiction:
SpeedVSQuantity of substance

Solution Approach 1:

The certificate cache is designed to serve multiple functions: it stores certificates for authentication, provides them to multiple processes, and manages their lifecycle. This multi-functionality allows the system to achieve fast authentication for multiple processes using a single shared cache structure, improving speed while optimizing memory usage through resource sharing.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system dynamically adjusts the number of certificates loaded into the cache based on system conditions, process requirements, and available memory resources. By changing the parameter of cache size adaptively rather than using a fixed size, the system optimizes the balance between authentication speed and memory consumption according to actual operational needs.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP3471004B1Certificate loading method and related product
Publication Date: 2024.10.30 GUANGDONG OPPO MOBILE TELECOMMUNICATIONS CORP LTD
  • EP3471004B1 patent drawingFigure 1~2A
  • EP3471004B1 patent drawingFigure 2B~3
  • EP3471004B1 patent drawingFigure 4

AI summary

Embodiments of the present disclosure provide a certificate loading method and related products. The method includes: detecting (201, 301, 405) a first process requesting to call a target data processing algorithm, and determining a certificate corresponding to the target data processing algorithm, the target data processing algorithm being one of a plurality of data processing algorithms associated with a currently launched face recognition application; obtaining (202, 302, 406) a set of process names associated with the certificate; detecting (203) that the set of process names comprises a process name of the first process, and loading the certificate to allow the first process to call the target data processing algorithms.