Secure World Biometric Input Processing via Sensor Interrupts

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional security information processing systems read and process user biometric data in the normal world, making it vulnerable to theft before encryption, thus compromising security.

Innovation Solution

A method that reads and processes user security information in a secure world until the data is encrypted, using a sensor module to sense input motion, create an interrupt, and read the information through a security information inputting module, ensuring protection from malicious hacking.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security information is read and processed in normal world, then processing speed and accessibility are improved, but security is worsened because raw data may be stolen before encryption

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system is divided into two separate execution environments: normal world for general applications and secure world for security-critical operations. The processor is segmented into a normal processor running the operating system and a secure processor running a secure operating system, with distinct memory spaces and protection domains. This segmentation isolates security information processing from potential threats in the normal world while maintaining processing capabilities in both environments.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A secure monitor acts as an intermediary between the normal world and secure world. It manages the transition of security information between environments, controls access to secure resources, and ensures that only authorized operations can access raw security data. The secure monitor enforces security policies and prevents unauthorized data exposure while allowing legitimate processing to occur.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If security information is processed in secure world, then security is improved by preventing raw data disclosure, but processing speed may be worsened due to additional security overhead

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

Security information is encrypted and processed in the secure world before being transferred to the normal world. The secure processor performs preliminary encryption and feature extraction on raw biometric data, so that only processed or encrypted results need to be transmitted to the normal world for application-level processing. This reduces the security overhead during normal operations while maintaining high security standards.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system merges security-critical functions in the secure world with application-level processing in the normal world. The secure processor handles encryption, authentication, and feature extraction, while the normal processor handles application logic and user interface. This combination allows security operations to be performed in a protected environment while maintaining overall system performance through parallel processing and optimized data flow between the two worlds.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS10664578B2Security information inputting/outputting method and electronic device adapted to the method
Publication Date: 2020.05.26 SAMSUNG ELECTRONICS CO LTD
  • US10664578B2 patent drawing
  • US10664578B2 patent drawing
  • US10664578B2 patent drawing

AI summary

A method is provided that inputs/outputs security information to/from an electronic device. The security information inputting method includes sensing a motion for inputting security information by a sensor module; creating an interrupt according to the security information inputting motion; and reading the security information by a security information inputting module, in response to the interrupt.