Security Device Data Encryption via Biometric Crypto-Biometric Algorithms

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The production phase of security devices can be subcontracted, leading to a risk of confidentiality breaches during the manufacturing process, as the issuing body may not have direct control over the production chain.

Innovation Solution

The method involves encrypting confidential data using biometric information during the preparation phase, ensuring it remains masked throughout production, and decrypting it only upon activation using the same biometric information, employing 'crypto-biometric' algorithms and a processing unit within the security device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If confidential data is stored in plaintext during production, then the production process is simple and efficient, but the confidentiality of sensitive data is compromised

Engineering Contradiction:
Improvedata confidentialityVSAvoidencryption/decryption system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by encrypting confidential data before the production phase begins. The encryption is performed in advance during the preparation phase, so that when data is stored in the security device during production, it is already in encrypted form. This preliminary encryption action ensures confidentiality is maintained throughout production without requiring complex real-time security measures during manufacturing.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses an intermediary approach by introducing encryption algorithms and key management systems as mediators between the confidential data and the production environment. The encrypted data acts as an intermediary representation that preserves confidentiality while allowing production processes to proceed. The decryption key serves as another intermediary that enables controlled access only when needed.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If biometric verification is required for decryption, then data security is enhanced, but the activation process becomes more complex and time-consuming

Engineering Contradiction:
Improveidentity authenticationVSAvoidactivation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by collecting and verifying biometric information during the initial preparation phase, before production begins. The biometric data is stored and prepared in advance, so that during activation, the system only needs to perform a comparison rather than full verification. This preliminary preparation reduces the time required during the actual activation process while maintaining strong security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces traditional mechanical or manual authentication methods with biometric verification systems. Instead of requiring physical presence or manual verification procedures, the system uses automated biometric recognition (such as fingerprint, facial, or iris recognition) to rapidly verify identity. This substitution reduces activation time while enhancing security compared to conventional methods.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If decryption is restricted to a single operation, then unauthorized access is prevented, but legitimate access may be lost if decryption fails

Engineering Contradiction:
Improvesecurity against unauthorized accessVSAvoidaccess reliability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies beforehand cushioning by implementing error correction codes and redundancy mechanisms in advance of the decryption operation. The system prepares backup verification data and error correction capabilities during the preparation phase, so that if the decryption operation encounters errors or failures, the system can recover and succeed without requiring a second decryption attempt. This cushioning approach maintains the single-operation restriction while ensuring access reliability.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Solution Approach 2:

The patent uses feedback mechanisms by implementing verification checks during the decryption process that provide real-time information about the operation's progress and success probability. The system monitors the decryption operation and can detect potential failures before they complete, allowing for corrective actions or alternative verification methods to be triggered. This feedback loop ensures that the single decryption operation is highly likely to succeed while maintaining security.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP2927858B1Method for manufacturing a security device
Publication Date: 2020.12.23 IDEMIA FRANCE SAS
  • EP2927858B1 patent drawingFigure 1
  • EP2927858B1 patent drawingFigure 2

AI summary

Method for making a security device (1) capable of storing confidential data (2), comprising the following phases: a preparation phase (4) comprising the following steps: collection (42) of the confidential data (2,20), transformation (43) of the confidential data (2,20) into encrypted data (2,21), by means of encryption, a production phase (5) comprising the following steps: manufacture (51) of a blank security device (1,10), storage (52) of said encrypted data (2,21) in said security device (1), delivery of the security device (1,11), an activation phase (6) comprising the following steps: transformation (62) of the encrypted data (2,21) to recover the confidential data (2,22), by means of decryption.