Relational encryption

摘要

A method includes receiving biometric data, the biometric data non-uniformly distributed and processing the biometric data to a level of randomness as a plaintext vector, the level of randomness associated with a security level. The method also includes encrypting the plaintext vector using a relational linearity encryption scheme to generate a linearity ciphertext representative of the plaintext vector, encrypting the plaintext vector using a relational proximity encryption scheme to generate a proximity ciphertext representative of the plaintext vector, and communicating the linearity ciphertext and the proximity ciphertext to an authentication server. The method further includes receiving from the authentication server an authentication signal for the security level indicative of a linearity relationship between the linearity ciphertext and a registration linearity ciphertext discovered using a relational linearity key and of a proximity relationship between the proximity ciphertext and a registration proximity ciphertext detected using a relational proximity key.

主权项

1. A method comprising:
receiving a first linearity ciphertext that represents a first biometric template of non-uniformly distributed first biometric data processed to a level of randomness associated with a security parameter and encrypted using a relational linearity encryption scheme; receiving a second linearity ciphertext that represents a second biometric template of non-uniformly distributed second biometric data processed to the level of randomness associated with the security parameter and encrypted using the relational linearity encryption scheme; receiving a first proximity ciphertext that represents the first biometric template of the first biometric data processed to the level of randomness associated with the security parameter and encrypted using a relational proximity encryption scheme; receiving a second proximity ciphertext that represents the second biometric template of the second biometric data processed to the level of randomness associated with the security parameter and encrypted using the relational proximity encryption scheme; determining a proximity relationship between the first proximity ciphertext and the second ciphertext using a proximity relational secret key; as part of determining the proximity relationship, determining a linearity relationship between the first linearity ciphertext and the second linearity ciphertext using a linearity relational secret key; and authenticating an identity of a user based upon the security parameter, the linearity relationship, and the proximity relationship.