Secure Data Cache for Electronic Passport Biometric Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic identity document systems face inefficiencies in data retrieval due to low bandwidth interfaces and security concerns with both distributed and centralized data storage schemes, particularly when handling biometric data.
Innovation Solution
A secure caching method that creates an encrypted cache of biometric data, accessible only with the original identity document, using a unique cryptographic key derived from summary data, allowing for fast data access without compromising security or privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a smartcard chip distributed database, then security and privacy are improved, but data retrieval speed deteriorates due to bandwidth limitations
Solution Approach 1:
The patent divides data into two parts: a small summary (metadata, cryptographic hashes) stored on the smartcard chip and the full biometric data stored externally in a database. This segmentation allows the chip to remain small with limited bandwidth while enabling fast external data retrieval through cryptographic verification of the summary.
Solution Approach 2:
The patent introduces a cryptographic summary as an intermediary between the smartcard chip and the external database. The summary acts as a secure key that enables fast database queries without requiring continuous chip communication, thus improving retrieval speed while maintaining security.
2Speed
If a central store of data is used, then data retrieval speed is improved, but security and privacy concerns worsen
Solution Approach 1:
The patent applies local quality by storing different types of data with different security requirements in different locations. The cryptographic summary (high security requirement) is stored on the secure smartcard chip, while the full biometric data (lower security requirement) is stored in an external database, allowing optimized access patterns.
Solution Approach 2:
The patent transforms the security model by changing the cryptographic parameters stored on the chip from full biometric data to condensed cryptographic summaries (hashes, metadata). This parameter change enables fast database queries using the summary as a key while the full data remains protected in the database.
3Speed
If full biometric data is cached locally, then data retrieval speed is improved, but data protection compliance worsens
Solution Approach 1:
The patent extracts only the essential cryptographic elements (summary, metadata, hashes) from the full biometric data and stores them on the smartcard chip. The full biometric data remains in the secure centralized database, complying with data protection laws that prohibit local storage of sensitive biometric information while enabling fast verification through the extracted summary.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This invention is generally concerned with methods, apparatus and computer program code for securely caching data, in particular for caching data stored on smart card systems such as those used in ICAO-compliant EU electronic passports. A caching system for providing a secure data cache for data stored in an electronic document, the caching system comprising: an input to receive data to be cached; a processor configured to use all or part of said received data to calculate a unique cryptographic key for said data; encrypt all or part of said data with said unique cryptographic key; and discard said unique cryptographic key after encryption and an output to send said encrypted data to a data cache, with decryption of encrypted data requiring said unique cryptographic key to be recalculated from said electronic document whereby said data cache is secure. Use of such a cache dramatically speeds up the inspection process, by bypassing the need to read data entirely, except for during the first inspection.