Secure Data Cache for Electronic Passport Biometric Retrieval

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic identity document systems face inefficiencies in data retrieval due to low bandwidth interfaces and security concerns with both distributed and centralized data storage schemes, particularly when handling biometric data.

Innovation Solution

A secure caching method that creates an encrypted cache of biometric data, accessible only with the original identity document, using a unique cryptographic key derived from summary data, allowing for fast data access without compromising security or privacy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is stored in a smartcard chip distributed database, then security and privacy are improved, but data retrieval speed deteriorates due to bandwidth limitations

Engineering Contradiction:
ImprovesecurityVSAvoiddata retrieval speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent divides data into two parts: a small summary (metadata, cryptographic hashes) stored on the smartcard chip and the full biometric data stored externally in a database. This segmentation allows the chip to remain small with limited bandwidth while enabling fast external data retrieval through cryptographic verification of the summary.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a cryptographic summary as an intermediary between the smartcard chip and the external database. The summary acts as a secure key that enables fast database queries without requiring continuous chip communication, thus improving retrieval speed while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If a central store of data is used, then data retrieval speed is improved, but security and privacy concerns worsen

Engineering Contradiction:
Improvedata retrieval speedVSAvoidsecurity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent applies local quality by storing different types of data with different security requirements in different locations. The cryptographic summary (high security requirement) is stored on the secure smartcard chip, while the full biometric data (lower security requirement) is stored in an external database, allowing optimized access patterns.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent transforms the security model by changing the cryptographic parameters stored on the chip from full biometric data to condensed cryptographic summaries (hashes, metadata). This parameter change enables fast database queries using the summary as a key while the full data remains protected in the database.

Inventive Principle:
Principle #35Parameter changes

3Speed

If full biometric data is cached locally, then data retrieval speed is improved, but data protection compliance worsens

Engineering Contradiction:
Improvedata retrieval speedVSAvoiddata protection violation risk
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent extracts only the essential cryptographic elements (summary, metadata, hashes) from the full biometric data and stores them on the smartcard chip. The full biometric data remains in the secure centralized database, complying with data protection laws that prohibit local storage of sensitive biometric information while enabling fast verification through the extracted summary.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP2272021B1Secure data cache
Publication Date: 2016.07.27 CRYPTOMATHIC LTD
  • EP2272021B1 patent drawingFigure 1
  • EP2272021B1 patent drawingFigure 2
  • EP2272021B1 patent drawingFigure 3

AI summary

This invention is generally concerned with methods, apparatus and computer program code for securely caching data, in particular for caching data stored on smart card systems such as those used in ICAO-compliant EU electronic passports. A caching system for providing a secure data cache for data stored in an electronic document, the caching system comprising: an input to receive data to be cached; a processor configured to use all or part of said received data to calculate a unique cryptographic key for said data; encrypt all or part of said data with said unique cryptographic key; and discard said unique cryptographic key after encryption and an output to send said encrypted data to a data cache, with decryption of encrypted data requiring said unique cryptographic key to be recalculated from said electronic document whereby said data cache is secure. Use of such a cache dramatically speeds up the inspection process, by bypassing the need to read data entirely, except for during the first inspection.