Quantum-Resistant Passwordless Authentication with Lattice Bioquantum
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing passwordless authentication techniques are vulnerable to quantum computing attacks, require specialized hardware, and suffer from compatibility issues, as well as security risks due to reliance on biometric data.
Innovation Solution
A system and method for quantum-resistant passwordless authentication using a lattice matrix generated by an authentication server, where a user computing device computes a bioquantum of biometric data based on a post-quantum fuzzy commitment scheme and stores it in a database, enabling secure authentication through indirect comparisons.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional passwordless authentication techniques (FIDO, MitID, METASECURE) are used, then authentication convenience is improved, but security against quantum computing attacks deteriorates
Solution Approach 1:
The patent changes the cryptographic parameter basis from traditional RSA/ECC to lattice-based cryptography, fundamentally altering the mathematical foundation to be quantum-resistant while maintaining the same authentication convenience
Solution Approach 2:
The patent replaces the cryptographic mechanism with a lattice-based post-quantum scheme, substituting the underlying mathematical problems from integer factorization/discrete logarithm to lattice shortest vector problems that are resistant to quantum algorithms
2Ease of operation
If FIDO and other passwordless techniques are implemented, then user authentication is simplified, but hardware and software requirements become more complex
Solution Approach 1:
The patent uses biometric templates as copies of user characteristics, creating a simplified authentication model where the biometric copy can be processed with standard hardware rather than requiring specialized cryptographic hardware
Solution Approach 2:
The patent makes the authentication system universal by using biometric data that can be captured by various standard devices (cameras, scanners) and processed on conventional hardware, eliminating the need for specialized FIDO hardware keys
3Ease of operation
If biometric data is used for authentication, then passwordless access is achieved, but security risks increase due to potential biometric data theft
Solution Approach 1:
The patent introduces a lattice-based cryptographic intermediary layer between the biometric data and the authentication verification, where the biometric template is transformed into a protected form that can only be verified with the corresponding private key, preventing direct exposure of raw biometric data
Solution Approach 2:
The patent changes the representation of biometric data from raw templates to transformed lattice-based vectors, altering the data structure to provide cryptographic protection while maintaining the ability to verify identity
Data Source
AI summary
A system and method for passwordless authentication for accessing a remote system includes an authentication server, a database, and a user computing device. The user computing device is configured to send a request to the authentication server. The authentication server is configured to generate, a lattice matrix, store the lattice matrix in the database, and return a lattice generator matrix (LGM) to the user computing device. The user computing device is further configured to compute a bioquantum of biometric data of a user based on the LGM using a post-quantum fuzzy commitment scheme (PQFC) and send the bioquantum to the authentication server for storage in the database.