Encrypted Biometric Deduplication via Conversion Table
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing deduplication methods for biometric data require a central database, making them vulnerable to attacks and unsuitable for decentralized biometric deployments where each consumer stores their own template on their device, and are inefficient for cross-repository matching.
Innovation Solution
A method involving a server computer that receives encrypted biometric templates, uses a public key to encrypt and match them against stored templates, and provides notifications without decrypting the data, utilizing a conversion table to determine match values and prevent central repository vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central database is used to store all biometric templates for deduplication, then deduplication can be performed by comparing new templates against the central repository, but the system becomes vulnerable to attacks and creates a single point of failure
Solution Approach 1:
The patent divides the centralized biometric template storage into distributed local storage across multiple devices. Each device stores its own biometric templates locally rather than in a central database, eliminating the single point of failure while maintaining deduplication capability through secure local comparison and verification processes.
Solution Approach 2:
The patent introduces encrypted biometric templates as an intermediary form that enables secure comparison without exposing raw biometric data. By using encryption schemes that allow computation on encrypted data, the system maintains security while enabling deduplication functionality.
2Object-affected harmful factors
If biometric templates are stored locally on each user device for privacy, then central repository vulnerabilities are eliminated, but deduplication across multiple repositories becomes infeasible
Solution Approach 1:
The patent creates a universal encrypted biometric template format that can be stored locally on any device while maintaining compatibility across different repositories and systems. This encrypted format enables deduplication to work universally across distributed devices without requiring a central repository, allowing cross-repository deduplication through standardized encryption and comparison protocols.
3Productivity
If unencrypted biometric templates are stored and processed, then matching and comparison operations are computationally efficient, but security and privacy are compromised
Solution Approach 1:
The patent changes the state of biometric templates from unencrypted to encrypted form, enabling security and privacy protection while maintaining computational efficiency through cryptographic operations that allow matching and comparison on encrypted data without decryption.
4Object-affected harmful factors
If encrypted biometric templates are used to protect privacy, then security is improved, but matching operations become computationally more complex
Solution Approach 1:
The patent performs encryption of biometric templates in advance during the enrollment process, creating pre-encrypted templates that can be stored and later used for efficient matching operations. This preliminary encryption action separates the computationally intensive encryption step from the ongoing matching operations, reducing real-time computational complexity.
Data Source
AI summary
A method is disclosed. The method includes constructing a table by encrypting a plurality of unencrypted match values using a public key to produce a plurality of encrypted match values. Each unencrypted match value being an indication of a degree of match between an input biometric template and an enrollment template. The method includes arranging each row so that each row has a match value and a corresponding encrypted match value. The method also includes storing, in a database, the table comprising the plurality of encrypted match values and the plurality of unencrypted match values. The server computer can be programmed to receive an encrypted biometric template and the table is used to determine a match value using the encrypted biometric template, and the match value is used to determine if a person is enrolling a biometric template associated with the encrypted biometric template more than once.