Dual-Level Data Storage for Secure Peripheral Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mobile communication devices configured to store state data in an encrypted manner, the Hidden Password feature is incompatible with the need to reestablish a connection between the device and a peripheral device to unlock encrypted data, as the connection is required to obtain the decryption key, leading to security and usability issues.
Innovation Solution
Implementing a dual-level data storage system where sensitive data like biometric templates are stored encrypted in one portion of the flash memory (Data A) and connection information in a non-encrypted form in another portion (Data B), allowing the device to establish a connection and retrieve the decryption key without fully unlocking the device, thus enabling secure and efficient authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all data is stored in an encrypted manner, then data security is improved, but the device cannot reestablish connection to peripherals without fully unlocking the device
Solution Approach 1:
The patent divides stored data into two distinct portions: a first portion containing sensitive data (biometric templates, authentication keys) stored in encrypted form, and a second portion containing connection information stored in unencrypted form. This segmentation allows the device to maintain security for sensitive data while enabling connection reestablishment without full decryption, resolving the contradiction between security and operational ease.
Solution Approach 2:
Different security measures are applied to different portions of stored data based on their sensitivity and functional requirements. Connection information requires immediate accessibility for device operation, so it is stored unencrypted in the second portion, while sensitive authentication data is encrypted in the first portion. This local differentiation of storage security levels resolves the contradiction.
2Reliability
If biometric templates are stored in an encrypted manner, then authentication security is improved, but the authentication process becomes more complex
Solution Approach 1:
The patent segments the storage structure to separate encrypted biometric templates (first portion) from connection information (second portion). During authentication, the system can efficiently retrieve and process biometric data without requiring decryption of the entire data structure, simplifying the authentication process while maintaining security.
Solution Approach 2:
Connection information is pre-stored in unencrypted form in the second portion, enabling the device to reestablish connections and prepare authentication environments before actual authentication occurs. This preliminary preparation reduces the complexity of the authentication process by having connection parameters ready for immediate use.
3Reliability
If connection information is stored in an encrypted manner, then overall data security is improved, but the device cannot retrieve decryption keys without full unlocking
Solution Approach 1:
The patent applies segmentation by storing connection information (including decryption keys) in a separate second portion in unencrypted form, while sensitive data remains encrypted in the first portion. This allows selective retrieval of connection information for authentication purposes without compromising the security of encrypted biometric data, resolving the contradiction between overall security and key accessibility.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Rather than storing all data in the same manner, e.g., an encrypted manner, a security level with which to associate received data of a given type may be determined. Subsequently, distinct types of data may be stored in a distinct manner, with the manner of storage having a security level appropriate to the type of data. For example, a first type of data may be stored in an encrypted manner (i.e., with a high level of security), while a second level of data may be stored in a plain text manner (i.e., with a low level of security).