FPGA Biometric Sampling for Secure Data Reusability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current biometric systems lack reusability and security, as they store entire biometric data samples, making them vulnerable to compromise and spoofing, especially when the device's hardware or software is compromised by malicious actors.
Innovation Solution
An FPGA-based biometric sampling system that uses configurable I/O blocks, logic blocks, and interconnects to apply sampling schemes to biometric input data, extracting enrollment and authentication samples, and allows for reconfiguration in case of identity compromise, enabling secure and reusable biometric data management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entirety of biometric data is stored in secure memory, then biometric authentication can be performed, but the system becomes vulnerable to compromise and lacks reusability when compromised
Solution Approach 1:
The patent divides biometric data into multiple separate samples (enrollment samples and authentication samples) stored in different locations within the secure enclave. This segmentation ensures that compromise of one sample does not expose all biometric data, enabling reusability while maintaining security.
Solution Approach 2:
The patent extracts only the necessary portions of biometric data (specific samples) from the complete biometric dataset for storage and comparison. By taking out and storing only enrollment samples and authentication samples separately, the system reduces the risk of total data exposure while maintaining authentication functionality.
2Reliability
If biometric data is stored in secure memory, then authentication is possible, but the system cannot be reset if compromised
Solution Approach 1:
The patent implements different quality levels and protection mechanisms for different biometric data samples. Enrollment samples and authentication samples are treated differently with separate storage locations and access controls, allowing selective regeneration of compromised samples without affecting the entire biometric system.
Solution Approach 2:
The patent changes the state of biometric data by creating multiple versions (enrollment vs. authentication samples) with different characteristics and storage requirements. This allows the system to reset or regenerate specific samples independently when compromised, maintaining overall system security while enabling recovery.
3Quantity of substance
If entire biometric data samples are stored, then complete biometric information is available, but the risk of data exposure increases
Solution Approach 1:
The patent segments complete biometric data into multiple discrete samples (enrollment samples and authentication samples) that are stored separately in secure memory. This segmentation maintains sufficient data quantity for authentication while reducing the impact of any single data exposure event.
Solution Approach 2:
The patent extracts and stores only the specific samples needed for authentication operations rather than storing complete biometric datasets. This extraction approach maintains functional adequacy while minimizing the amount of sensitive data vulnerable to exposure.
Data Source
AI summary
Concepts and technologies disclosed herein are directed to a field-programmable gate array (“FPGA”)-based biometric sampling system for improving biometric data reusability. The system can include one or more FPGAs, each of which can include a plurality of configurable input/output (“I/O”) blocks, a plurality of configurable logic blocks, and a plurality of configurable interconnects that connect the plurality of configurable I/O blocks to the plurality of configurable logic blocks. The FPGA(s) can be configured based upon a hardware description language model to receive biometric input data associated with a user, to apply a sampling scheme to the biometric input data to extract, from the biometric input data, an enrollment biometric data sample, and to cause the enrollment biometric data sample to be stored in a database.