Systems and methods for detecting data insertions in biometric authentication systems utilizing a secret

1. A method of detecting an unauthorized data insertion into a stream of data segments extending between electronic modules, the method comprising:

providing a plurality of data segments, including a first data segment, to a first of the modules;

generating a Secret in the first module and independently generating a replica of the Secret in a second of the modules while the first and second modules are spaced apart from one another;

modifying the first data segment by incorporating the Secret generated in the first module to create a first modified data segment;

transmitting the first modified data segment for receipt into the second module;

receiving at least a first unverified data segment into the second module; and

determining at least whether the received first unverified data segment is the transmitted first modified data segment on the basis of a comparison between at least a portion of the first unverified data segment and at least a portion of the replica of the Secret.

2. The method of claim 1 , wherein: at least some in the plurality of data segments are acquired with a sensor; and the determining step comprises a determination based on a threshold value for a correlation between data in the first unverified data segment and data in the at least a portion of the replica of the Secret.

3. The method of claim 1 , further comprising: transmitting an unmodified first data segment for receipt into the second module; after receipt of the unmodified first data segment into the second module, modifying the received unmodified first data segment by incorporating the replica of the secret to create a second modified data segment; and determining whether the first unverified data segment is the transmitted first modified data segment on the basis of a comparison between at least a portion of the first unverified data segment and at least a portion of the second modified data segment.

4. The method of claim 3 , wherein the determining step comprises a determination based on a threshold value for a correlation between data in the first unverified data segment and data in the second modified data segment.

5. The method of claim 1 , wherein the first module comprises an image sensor and the first data segment comprises a first image data frame.

6. The method of claim 1 , further comprising: intermittently modifying additional data segments by incorporating in each a secret generated in the first module to create additional modified data segments, wherein fewer than all data segments in the data stream are modified to incorporate a secret; and determining whether additional unverified data segments received into the second module are ones of the additional modified data segments.

7. The method of claim 1 , further comprising: randomly modifying additional data segments by incorporating in each a Secret generated in the first module to create additional modified data segments, wherein fewer than all data segments in the data stream are modified to incorporate a secret; and determining whether additional unverified data segments received into the second module are ones of the additional modified data segments.

8. The method of claim 1 , wherein generating the Secret in the first module and independently generating the replica of the Secret in the second module is based on a common time signal.

9. The method of claim 1 , wherein generating the Secret in the first module and independently generating the replica of the Secret in the second module is in response to providing a code to the first module and providing a code to the second module.

10. The method of claim 9 , further comprising encrypting the code provided to at least one of the modules.

11. The method of claim 1 applied to verify authenticity of data segments in a biometric authentication system.

12. The method of claim 1 where the first modified data segment is formed by placement of a symbol in the image data or the header in the first data segment.

13. The method of claim 1 where each data segment in the stream contains data of like type taken from one in the group of types comprising image, audio, ultrasound, fingerprint, vibration or capacitance data.

14. The method of claim 13 where the first data segment and the first modified data segment are both in a form suitable for performing authentication thereon as a biometric in a biometric authentication unit in the second module.

15. The method of claim 1 where:

the stream is a stream of frames of video data;

each frame corresponds to a segment comprising image data and a header; and

the first modified data segment is formed by placement of a symbol in the image data or the header in the first data segment.

16. The method of claim 1 where the first data segment and the first modified data segment are both in a form suitable for performing authentication thereon as a biometric in a biometric authentication unit in the second module.

17. A non-transitory computer readable medium containing program instructions representing software executable in a system which transfers a stream of data segments between first and second physically separated electronic modules, some of which data segments are captured by a sensor, the system comprising a computer system including a microprocessor, memory media and storage media and connected to a network, which instructions, when executed by the computer system, cause the computer system to perform method steps for detecting an unauthorized data insertion into a stream of data segments extending between electronic modules, the method comprising:

providing a plurality of data segments, including a first data segment, to the first module;

generating a Secret in the first module and independently generating a replica of the Secret in the second module while the first and second modules are spaced apart from one another;

modifying the first data segment by incorporating the Secret generated in the first module to create a first modified data segment; transmitting the first modified data segment for receipt into the second module; receiving at least a first unverified data segment into the second module; and

determining at least whether the received first unverified data segment is the transmitted first modified data segment on the basis of a comparison between at least a portion of the first unverified data segment and at least a portion of the replica of the Secret.