Obfuscated Code Package for Secure Biometric Data Capture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital security systems are vulnerable to spoofing attacks, where attackers can modify or replay data items captured at client devices, compromising the integrity of biometric authentication and identity verification processes, especially in insecure web application environments.
Innovation Solution
A computer system that generates and distributes an obfuscated code package containing a capture algorithm and cryptographic algorithm to secure data items, using code obfuscation and cryptographic keys to prevent reverse-engineering and ensure data integrity, combined with liveness detection and randomized challenges to verify the authenticity of captured data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If code is distributed in machine form (object or binary code), then security is improved, but the code becomes more difficult to reverse-engineer while still being interpretable to sophisticated attackers
Solution Approach 1:
The patent segments the code into multiple components: a capture module that performs data capture, a cryptographic module that secures the data, and a verification module that validates the data. This segmentation makes it harder for attackers to reverse-engineer the entire system while maintaining security functions.
Solution Approach 2:
The patent introduces an intermediary verification mechanism that sits between the capture module and the backend system. This verification module uses cryptographic signatures and liveness detection to mediate the data transmission, making it difficult for attackers to spoof data without detection.
2Reliability
If code obfuscation is applied to the capture module, then reverse-engineering is prevented, but the code becomes more complex and harder to maintain
Solution Approach 1:
The patent separates the obfuscation logic from the core capture functionality by using distinct modules. The capture module handles data capture while the verification module handles security validation, allowing each module to be maintained independently while maintaining overall security.
Solution Approach 2:
The patent uses parameter changes in the verification process, such as randomized challenges and time-based tokens, to make the system adaptable without requiring complex code changes. These parameter changes provide security through variation rather than through code complexity.
3Reliability
If liveness detection and randomized challenges are implemented, then spoofing attacks are mitigated, but the capture process becomes more complex and time-consuming
Solution Approach 1:
The patent performs preliminary actions by pre-generating and embedding cryptographic keys and verification parameters in the capture module before data capture occurs. This preliminary setup simplifies the actual capture process while maintaining strong verification capabilities through pre-established security mechanisms.
Solution Approach 2:
The patent implements feedback mechanisms where the verification module receives captured data and provides immediate validation feedback. This feedback loop simplifies the overall process by automating verification and providing instant confirmation of authenticity without requiring manual intervention or complex multi-step processes.
Data Source
AI summary
An obfuscated code package is deployed to a client device to effect secure capture of a data item at the client device. The obfuscated code package has a cryptographic key embedded therein or derivable therefrom, and is configured, when run on a client device, to cause the client device to cause the client device to capture a data item according to the capture algorithm, generate a secure message according to the signing algorithm comprising the data item captured at the client device. The cryptographic key is used to generate the secure message.