Encrypted Biometric Database Search Using Indexing Filters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Biometric data stored in encrypted form in identity verification systems face inefficiencies and security limitations when searching for matching data, as existing public key searchable encryption systems may yield incorrect results due to differences in biometric data captured during enrollment and identification phases.
Innovation Solution
A database management process using indexing filters and hash functions to create a structured database that allows keyword searches on encrypted biometric data, enabling efficient identification without exhaustive searches, by associating biometric data with subsets of filters and using hash functions to generate keywords for search queries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric data are stored in encrypted form in the database, then security and confidentiality are improved, but search efficiency and identification accuracy deteriorate due to the complexity of comparing encrypted data
Solution Approach 1:
The patent segments the search process into two distinct phases: (1) generating candidate addresses by searching encrypted database using encryption of the query biometric data, and (2) verifying candidates by decrypting and comparing the actual biometric data. This segmentation allows the majority of the search to operate on encrypted data while limiting decryption to only necessary candidate verification, thus maintaining security while improving search efficiency.
Solution Approach 2:
The patent performs preliminary filtering by encrypting the query biometric data and using it to search the encrypted database, generating a set of candidate addresses before actual verification. This preliminary action eliminates the need to decrypt the entire database for comparison, reducing the scope of subsequent decryption operations and improving overall search efficiency while maintaining security.
2Productivity
If public key searchable encryption systems are used to search encrypted biometric database, then search efficiency is improved by eliminating exhaustive search, but identification accuracy deteriorates due to substantial differences between enrollment and later biometric data
Solution Approach 1:
The patent introduces a dynamic verification threshold mechanism that adapts to the inherent variability of biometric data. By allowing multiple candidate matches and using a threshold-based verification process, the system can accommodate variations in biometric data captured at different times while maintaining accurate identification. The verification step compares actual biometric data against candidates with flexibility to handle natural variations.
Solution Approach 2:
The patent implements a feedback mechanism where the verification process uses the actual biometric data to confirm or reject candidate matches. The system takes the candidates generated by encrypted search, verifies them by comparing with the query biometric data after decryption, and uses this feedback to ensure accurate identification despite variations in biometric data. This feedback loop maintains identification accuracy while preserving search efficiency.
3Measurement precision
If decryption is performed to enable comparison of biometric data, then identification accuracy is improved, but security and confidentiality are compromised
Solution Approach 1:
The patent segments the database into encrypted storage and limited decryption zones. Only candidate addresses generated from encrypted search are subjected to decryption for verification, while the majority of the database remains encrypted. This segmentation minimizes the exposure of decrypted data and maintains security while enabling accurate identification when necessary.
Solution Approach 2:
The patent applies decryption selectively only to specific candidate addresses that are likely matches, rather than decrypting the entire database. This local application of decryption maintains high security by limiting exposure of sensitive data while still achieving accurate identification for the relevant candidates. The quality of security is maintained in the bulk of the database while allowing local verification where needed.
Data Source
AI summary
A database comprising biometric data stored in encrypted form is managed by a management unit. It comprises a set of filters respectively associated with filter identifiers. A biometric data item is received at a management unit; next, said biometric data item is stored in an encrypted form at a given address in the database. Then keywords are obtained on the basis of a first set of hash functions and of the biometric data item. A subset of indexing filters is associated with each keyword by selecting, for each keyword, filters as a function of the respectively associated filter identifiers, of said keywords, and of a second set of hash functions; and the given address is associated with each of the filters of the subset of filters.