Cryptographic Data Processing Using Masked Biometric Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional cryptographic processing using biometric information faces challenges in securely protecting multiple confidential information sets for the same person, as leaked decryption keys can be misused to access different authentication systems, leading to unauthorized access.
Innovation Solution
A cryptographic data processing method that selects and uses different masks for each ciphertext, generating masked random numbers and keys from biometric information, and employs error-correction encoding to ensure only valid biometric and mask combinations can decode the information, preventing misuse of decryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same biometric code is used to generate encryption keys for multiple confidential information sets, then user authentication convenience is improved, but security is worsened because a leaked decryption key can be misused to access different authentication systems
Solution Approach 1:
The patent segments the authentication system by introducing mask information that divides the relationship between biometric codes and encryption keys. Each confidential information set is associated with a unique mask, creating independent authentication segments. This allows the system to maintain convenience (single biometric input) while improving security (isolated key generation through mask segmentation).
Solution Approach 2:
The patent applies local quality by assigning different mask information to different confidential information sets or authentication systems. This creates localized security zones where each system has its own protective mask, preventing a leaked key from one system from compromising other systems while maintaining the same biometric authentication method.
2Reliability
If mask information is introduced to generate different encryption keys for the same biometric code, then security is improved by preventing key misuse, but device complexity is worsened due to additional mask management
Solution Approach 1:
The patent achieves universality by designing the mask information as a multi-functional element that serves multiple purposes: it differentiates between confidential information sets, secures key generation, and enables independent authentication systems. The same mask mechanism can be applied across different systems without requiring fundamentally different approaches, managing complexity through a universal masking framework.
3Reliability
If error-correction encoding is used with masked random numbers, then security against noise and unauthorized access is improved, but manufacturing precision is worsened due to complex encoding requirements
Solution Approach 1:
The patent applies preliminary action by pre-generating masked random numbers with embedded error-correction encoding before actual authentication occurs. This preparation phase creates a robust foundation that automatically handles noise and potential attacks during authentication, reducing the precision burden on real-time encoding operations while maintaining strong security.
Data Source
AI summary
A mask is selected amongst a plurality of masks. A first masked random number is generated by converting a first random number using the selected mask, and a first key is generated from the first masked random number and a first biometric code generated from biometric information. In addition, mask information indicating the selected mask is stored. A second masked random number is generated by converting a second random number using the selected mask or a different mask having a predetermined relationship with the selected mask, and a second key is generated from the second masked random number and a second biometric code. A ciphertext is generated using one of the first key and the second key and an error-correction encoding method.