Distributed Biometric Template Storage for Cyber-Attack Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric data is vulnerable to sophisticated cyber-attacks, with compromised databases affecting millions and once compromised, biometric data cannot be changed, posing a significant security risk due to its permanent nature.
Innovation Solution
A method and system that distribute and encrypt biometric templates across multiple networked devices, making it difficult to steal in bulk and protecting against alteration by generating and sending biometric queries to these devices for match score calculation, ensuring enhanced security through redundancy and encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If biometric data is stored in a centralized database, then authentication efficiency is improved, but security against cyber-attacks deteriorates
Solution Approach 1:
The patent divides the centralized biometric database into multiple distributed template storage devices. Each device holds a portion of the biometric templates, so that compromising one device does not expose the entire database. The segmentation is achieved by distributing templates across multiple devices while maintaining the ability to perform authentication queries across the distributed system.
2Reliability
If biometric templates are distributed across multiple devices, then security against bulk theft is improved, but system complexity increases
Solution Approach 1:
The patent creates multiple copies of biometric templates across different storage devices. Each device contains replicated template data, allowing the system to maintain security through distribution while simplifying access through standardized query mechanisms. The copying approach ensures that no single device holds the complete set of templates, preventing bulk theft.
3Stability of the object's composition
If biometric data is encrypted and distributed, then data integrity is improved, but query processing complexity increases
Solution Approach 1:
The patent performs preliminary encryption of biometric templates before distribution to storage devices. The templates are encrypted using cryptographic keys, and this encryption is done in advance before the templates are stored. During authentication queries, the encrypted templates can be directly compared without decryption, maintaining data integrity while simplifying the query processing.
Data Source
AI summary
Embodiments include method, systems and computer program products for safeguarding biometric data. Aspects include receiving a first biometric data unit and generating a template based upon the first biometric data unit. Aspects also include sending the template to a plurality of external template storage devices, each template storage device having a unique device identifier. Aspects also include generating a biometric query including a second biometric data unit. Aspects also include sending the biometric query to at least some of the plurality of external template storage devices. Aspects also include receiving a match score from at least one of the plurality of template storage devices external to the processor, wherein the match score reflects the degree of similarity between the first biometric data unit and the second biometric data unit.