Granted Patent B2

US 9,356,786 · App. 14/385,337 · Granted May 31, 2016

Abstract

Claims (43)

1. A method for encrypting a set of at least two indexed data items, implemented by a management computer server, the data items being in the form of lists of elements, each element of which belongs to a finite set of indexed symbols called an alphabet, the method comprising:

randomly generating for each data item in a base, using the management computer server, a corresponding encoding function, and

for each symbol of the alphabet,

for each data item,

if at least one element of the list that constitutes the data item is the symbol of the alphabet, the management computer server determines an image of said symbol of the alphabet via the encoding function corresponding to the data item to obtain a codeword coordinate that is a function of the data item and the symbol of the alphabet,

the management computer server adds the codeword coordinate thereby obtained to an indexed set corresponding to the element of the alphabet, the indexed set having a predetermined cardinal,

then the management computer server randomly re-indexes the elements of the indexed set corresponding to the symbol of the alphabet, and

the management computer server adds the indexed set corresponding to the symbol of the alphabet to a protected set, and

in that, for each symbol in the alphabet, prior to the re-indexing by the management computer server, the management computer server completes the indexed set corresponding to the alphabet element with error-inducing points,

wherein the data items are biometric data items, and

wherein the biometric data items include information relating to fingerprints of individuals, said biometric data items being in the form of lists of triplets of coordinates of minutiae of fingerprints of the individuals.

2. The method according to claim 1 , wherein, for the symbols of the alphabet that do not correspond to any element of the data items in the base,

the management computer server randomly selects some of said elements, and

for each element selected, the management computer server creates a predetermined cardinal set with an index corresponding to that of the element, and adds to this element as many error-inducing points as the cardinal of the element.

3. The method according to claim 2 , wherein non-selected symbols of the alphabet are associated with an empty set.

4. The method according to claim 2 , wherein the error-inducing points are points generated randomly among a destination set of the encoding functions, deprived of the images of the symbols of the alphabet by the encoding functions corresponding to the data items.

5. The method according to claim 1 , wherein the encoding functions corresponding to the data items are associated with an evaluation code for which there exists at least one list recovery algorithm.

6. The method according to claim 5 , wherein the evaluation code is a folded Reed-Solomon code, a Reed-Muller code or an algebraic code.

7. The method according to claim 1 , wherein the computer management server computes an image of each encoding function corresponding to one of the data items using a public hash function, and adds said image to the protected set.

8. The method according to claim 1 , wherein each said respective coordinate of the triplets is coded on one byte, and the alphabet contains all possible configurations of triplets.

9. The method according to claim 1 , further comprising:

electronically capturing a physical biometric characteristic; and

converting the captured physical biometric characteristic into the biometric data items.

10. A method for identifying an individual, in a system comprising a control computer server configured to acquire a biometric data item of the individual to be identified, and a management computer server configured to manage a base containing encrypted individual biometric data items of listed individuals, the method comprising:

providing the encrypted individual biometric data items of listed individuals, the individual biometric data items having been encrypted using an encryption method for encrypting a set of at least two indexed biometric data items, implemented by the management computer server, the biometric data items being in the form of lists of elements, each element of which belongs to a finite set of indexed symbols called an alphabet, where the encryption method includes:

randomly generating for each biometric data item in a base, using the management computer server, a corresponding encoding function, and

for each symbol of the alphabet,

for each biometric data item,

if at least one element of the list that constitutes the biometric data item is the symbol of the alphabet, the management computer server determines an image of said symbol of the alphabet via the encoding function corresponding to the biometric data item to obtain a codeword coordinate that is a function of the biometric data item and the symbol of the alphabet,

the management computer server adds the codeword coordinate thereby obtained to an indexed set corresponding to the element of the alphabet, the indexed set having a predetermined cardinal,

then the management computer server randomly re-indexes the elements of the indexed set corresponding to the symbol of the alphabet, and

the management computer server adds the indexed set corresponding to the symbol of the alphabet to a protected set, and

 in that, for each symbol in the alphabet, prior to the re-indexing by the management computer server, the management computer server completes the indexed set corresponding to the alphabet element with error-inducing points; and

identifying the individual to be identified by comparing the biometric data item of the individual with N biometric data items in the base to identify the biometric data item or items in the base having a degree of similarity with the biometric data item of the individual exceeding a predetermined threshold.

11. The method according to claim 10 ,

wherein the management computer server communicates the protected set to the control computer server, and, from the biometric data item of the individual to be identified, the control computer server decrypts the protected set, the decrypting including:

selecting a subset of the protected set comprising all the indexed sets corresponding to the symbols of the alphabet present in the list of elements that constitutes the biometric data item of the individual, and

using a list recovery algorithm, an argument of which is said selected subset, and the result of which is a set of encoding functions such that, when the biometric data item of the individual corresponds to a biometric data item in the base, the set of encoding functions contains the encoding function corresponding to said biometric data item.

12. The method according to claim 11 , wherein, from the encoding function or functions obtained, the control computer server determines the biometric data item or items in the base corresponding to the biometric data item of the individual with the degree of similarity greater than the predetermined threshold.

13. The method according to claim 11 , wherein the control computer server determines an image of encoding functions of the protected set resulting from the list recovery algorithm using a public hash function, and compares the image with the images of the encoding functions corresponding to the biometric data items in the base contained in the protected set.

14. The method according to claim 10 , further comprising:

electronically capturing a physical biometric characteristic of the individual; and

converting the captured physical biometric characteristic into the biometric data item of the individual.

Assignments (10)