Distributed Biometric Matching Without Central Template Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current biometric systems face vulnerabilities due to centralized storage of encrypted biometric templates, which can be compromised by a single security breach, and the need for decryption during comparison processes, exposing decrypted templates to further risks.
Innovation Solution
A distributed biometric framework where biometric templates are divided into parts and encrypted, with each part stored on separate worker nodes, allowing secure comparison without decryption, using secure multi-party computation and homomorphic encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric templates are stored in a central repository with encryption, then security is improved, but a single security breach compromises all stored templates
Solution Approach 1:
The patent divides complete biometric templates into multiple fragmented parts and distributes them across different worker nodes in a decentralized network. Each node stores only a portion of the template, so that even if one node is compromised, the complete biometric information cannot be reconstructed. This segmentation eliminates the single point of failure inherent in centralized storage.
2Measurement precision
If encrypted biometric templates are decrypted for comparison, then authentication accuracy is improved, but decrypted templates become vulnerable to compromise
Solution Approach 1:
The patent introduces homomorphic encryption as an intermediary mechanism that enables comparison operations to be performed directly on encrypted biometric template parts without decryption. The encrypted fragments are mathematically processed to determine matches while remaining encrypted throughout the comparison process, thus maintaining security while achieving authentication accuracy.
3Reliability
If complete biometric templates are encrypted and stored, then security is improved, but a compromised template provides complete biometric information to attackers
Solution Approach 1:
The patent fragments complete biometric templates into multiple parts and distributes them across different worker nodes. Each node holds only a portion of the template, so compromise of any single node reveals only incomplete information that cannot be used to reconstruct the full biometric identity. This limits the information exposure even when security breaches occur.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method is disclosed. An authentication node may receive a plurality of encrypted match values, wherein the plurality of encrypted match values were formed by a plurality of worker nodes that compare a plurality of encrypted second biometric template parts derived from a second biometric template to a plurality of encrypted first biometric template parts derived from a first biometric template. The authentication node may decrypt the plurality of encrypted match values resulting in a plurality of decrypted match values. The authentication node may then determine if a first biometric template matches the second biometric template using the plurality of decrypted match values. An enrollment node may be capable of enrolling a biometric template and storing encrypted biometric template parts at worker nodes.