Encrypted Text Verification System for Biometric Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted text verification systems face challenges in preventing the determination of whether two pieces of registration data are the same input data, especially when biological information is used, due to insufficient concealment strength and the ability to determine similarity or distance between registration data without knowing the input data.
Innovation Solution
An encrypted text verification system that generates encrypted data using a secret key and secret information, with a registration data generation unit creating registration data based on encrypted input data and a verification key, and a data verifying request generation unit encrypting input data to be verified using a random number and secret information, ensuring that only the same secret information can determine the similarity between data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted text verification is performed using conventional methods (e.g., BCH code masking), then biometric authentication can be performed while keeping templates concealed, but the concealment strength is insufficient and it becomes possible to determine whether two registration data are the same input data
Solution Approach 1:
The patent introduces an intermediary verification process where the server computes a verification value based on the client's response and stored verification data, without directly comparing the original biometric templates. This intermediary computation mechanism prevents direct exposure of template similarity while enabling authentication verification.
Solution Approach 2:
The patent transforms the verification approach by changing the parameter being verified from direct template comparison to verification of computational relationships. The server verifies whether the client's response satisfies a mathematical relationship (verification value computation) rather than comparing the actual biometric data, thereby maintaining concealment while enabling verification.
2Adaptability or versatility
If deterministic common-key encryption or public-key encryption is used for searchable encryption, then encrypted data can be searched, but the keyword must be unique which conflicts with biometric information that contains noise and variations
Solution Approach 1:
The patent employs dynamic verification where the server computes verification values based on the specific client response received, rather than using static deterministic encryption. This dynamic approach allows the system to handle variations in biometric data (noise) by recomputing verification based on actual input while maintaining security.
Solution Approach 2:
The system performs preliminary encryption of biometric data on the client side before transmission, and prepares verification data on the server side in advance. This preliminary action allows the encrypted data to be stored and verified without requiring decryption, enabling search capability while maintaining security and handling noise through the pre-prepared verification mechanism.
3Ease of operation
If biometric templates are stored in databases for authentication verification, then authentication can be performed, but the templates become vulnerable to leakage and impersonation attacks
Solution Approach 1:
The patent introduces an intermediary verification mechanism where the server stores verification data rather than raw biometric templates. During authentication, the server computes a verification value as an intermediary step between receiving client response and determining authentication result, preventing direct exposure of template information while enabling verification.
Solution Approach 2:
The patent extracts only the necessary verification capability from the full biometric template. Instead of storing and processing complete templates, the system extracts and stores only the verification data needed for authentication, removing the vulnerable template information while preserving the authentication function.
Data Source
AI summary
In a system with registration data, in a data registration phase, encrypted data is calculated by encrypting input data to be concealed by using a secret key and secret information, registration data is generated based on the encrypted data and verification key, and the registration data is stored as a registration template in a storage unit together with an identifier for uniquely identifying the registration data. In an encrypted text verification phase, a data verifying request is generated in which input data to be verified has been encrypted by using a random number and secret information, the registration template stored in the storage unit and the data verifying request are matched verified to produce a determined result, a verified result including a part or all of the registration template corresponding to the determined result is produced, and data is restored based on the verified result to produce a restored result.