Fingerprint Authentication Segmentation Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing fingerprint authentication methods using dual processing units introduce security risks by allowing the high-performance unit to handle comparison processes, which can be vulnerable to external access and hacker attacks.
Innovation Solution
A method where the fingerprint authentication process is segmented between a high-security first control unit and a high-performance second control unit, with the first unit maintaining the main fingerprint template securely and the second unit determining computationally intensive elements, ensuring that the comparison remains within the secure environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the high-performance first processing unit performs the comparison process between fingerprint image and template, then the computational speed and processing performance is improved, but the security level deteriorates because the unsecure environment is vulnerable to hacker attacks
Solution Approach 1:
The patent divides the authentication system into two separate processing units: a first processing unit providing a secure environment for storing the fingerprint template and performing authentication, and a second processing unit providing a high-performance environment for capturing the fingerprint image and generating feature data. This segmentation isolates the sensitive template data in a secure environment while allowing computationally intensive operations in a high-performance environment, thus resolving the contradiction between speed and security.
2Reliability
If the computational processing is strengthened to improve authentication security, then the security level is improved, but the device complexity increases due to need for faster and more computationally strong processing environment
Solution Approach 1:
The system is segmented into two specialized processing units: a secure element that handles only authentication logic and template verification, and a high-performance unit that handles image capture and feature extraction. This segmentation allows each unit to be optimized for its specific function, reducing overall system complexity while maintaining high security standards.
3Speed
If the fingerprint template is stored in the high-performance first processing unit for quick access, then the processing speed is improved, but the security level deteriorates due to risk of unauthorized access
Solution Approach 1:
The patent implements segmentation by storing the fingerprint template exclusively in the second processing unit which provides a secure environment, while the first processing unit provides only the high-performance environment for image capture and feature extraction. This physical and logical separation ensures that even though the high-performance unit operates quickly, it cannot access the template data, thus eliminating unauthorized access risk while maintaining processing speed.
Solution Approach 2:
The sensitive fingerprint template is extracted from the high-performance processing environment and placed into a separate secure environment. This extraction removes the vulnerability of storing valuable authentication data in a high-performance but less secure system, while the high-performance system continues to provide fast service for non-sensitive operations.
Data Source
AI summary
The present disclosure generally relates to a method for authenticating a user using an electronic device, where the electronic device comprises a fingerprint sensor as well as a first and a second control unit. Preferably, the first control unit comprises a secure element and/or a secure block adapted to provide a secure processing environment. The present disclosure also relates to a corresponding electronic device and to a computer program product.