Non-invertible Encryption for Biometric Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The security of biometric data, particularly during transmission and storage, is a concern due to its intrinsic correlation with the individual, making it vulnerable to unauthorized access and difficult to ascertain the level of security in data search environments.

Innovation Solution

A system and method for managing and retrieving encrypted biometric data using a unique non-invertible encryption function, where biometric measurements are scrambled with a predetermined noise, and compared against encrypted entries to determine matches, ensuring secure information retrieval.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If biometric data is stored in digital form for easy access and search, then retrieval efficiency is improved, but security is worsened due to vulnerability to unauthorized access

Engineering Contradiction:
Improvedata retrieval efficiencyVSAvoiddata security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent creates encrypted copies of biometric data that can be searched and retrieved efficiently without exposing the original sensitive information. The encrypted biometric templates serve as safe substitutes that maintain functionality while protecting security.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent introduces encrypted biometric templates as an intermediary between the original biometric data and the search process. This intermediary layer allows for efficient database operations while preventing unauthorized access to actual biometric information.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If biometric data is transmitted over communication lines for remote access, then ease of operation is improved, but security is worsened due to transmission vulnerabilities

Engineering Contradiction:
Improveremote data accessVSAvoidtransmission security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent transmits encrypted copies of biometric data instead of the original sensitive information. This allows remote access and communication while maintaining security, as the transmitted data cannot be easily reverse-engineered to reveal the original biometric traits.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent transforms biometric data into encrypted form, changing its parameter state from readable to unreadable. This transformation maintains the data's functional properties for authentication while eliminating security risks during transmission.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If non-invertible encryption is applied to biometric data, then security is improved, but ability to retrieve and compare data is worsened

Engineering Contradiction:
Improvedata securityVSAvoiddata retrieval capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent creates encrypted copies that preserve the essential characteristics needed for comparison and retrieval. The encrypted templates maintain the mathematical properties necessary for biometric matching while being secure against unauthorized access.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent applies encryption transformations that change the data representation while preserving the underlying biometric characteristics. This allows secure storage and retrieval operations to proceed on encrypted data without requiring decryption.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS8996886B2Encrypted biometric data management and retrieval
Publication Date: 2015.03.31 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US8996886B2 patent drawing
  • US8996886B2 patent drawing
  • US8996886B2 patent drawing

AI summary

Aspects of the present invention provide a solution for managing and retrieving encrypted biometric data. A plurality of biometric entries is obtained and each one is encrypted with a unique non-invertible encryption function to get a plurality of encrypted biometric entries. A biometric measurement to be compared against the biometric entries is obtained, a predetermined noise is applied to the biometric measurement, and then the biometric measurement if encrypted using the non-invertible encryption function, resulting in a scrambled encrypted biometric. For each comparison, one of the encrypted biometric entries is subtracted from the scrambled encrypted biometric to get a calculated noise. This calculated noise is then compared with the predetermined noise to determine whether a match exists. Based on a determination that a match exists any information associated with the encrypted biometric entry is forwarded to the requestor.