Systems and methods for detecting data insertions in biometric authentication systems utilizing a secret
Systems and methods of detecting an unauthorized data insertion into a stream of data segments extending between electronic modules or between electronic components within a module, wherein a Secret embedded into the data stream is compared to a Replica Secret upon receipt to confirm data transmission integrity.
1. A system comprising:
a first module comprising first processing circuitry configured to:
generate a first series of secrets; and
combine a generated secret with a first data segment to create a first modified data segment;
a second module comprising second processing circuitry and operable remote from the first module, the second processing circuitry configured to:
generate a second series of replica secrets, the replica secrets being duplicates of the first series of secrets; and
compare data in at least a portion of an unverified data segment received by the second module with at least a portion of a replica secret to determine if the unverified data segment is the first modified data segment.
2. The system of claim 1 , wherein the system is configured to provide a control function commanding generation of a secret in the first module and a corresponding replica secret in the second module.
3. The system of claim 2 , wherein the second module is configured to provide the control function.
4. The system of claim 2 , further comprising a processor of the second module programmed to provide the control function.
5. The system of claim 1 , further comprising a communication interface operable to transmit the first modified data segment from the first module to the second module.
6. The system of claim 1 , wherein the second module further comprises a comparator operable to compare at least a portion of the unverified data segment with at least a portion of the replica secret to determine if the unverified data segment is the first modified data segment or if a data insertion has occurred between the modules.
7. The system of claim 1 , wherein the first module comprises an encoder configured to combine the generated secret with the first data segment to create the first modified data segment.
8. The system of claim 1 , wherein the system is operable to communicate a stream of data segments between the first and second modules, wherein:
processing circuitry in the system includes a processor operable to control intermittent modification of additional data segments by incorporating in each a secret generated in the first module to create additional modified data segments; and
fewer than all data segments in the stream of data segments are modified to incorporate a secret for determining whether additional unverified data segments received into the second module are ones of the additional modified data segments.
9. The system of claim 1 , wherein the second processing circuitry in the second module performs biometric authentication and the first module acquires data segments which comprise biometric data.
10. The system of claim 1 , wherein the first module further comprises a camera and the first data segment comprises a first image data frame generated by the camera.
11. The system of claim 1 , wherein the first module further comprises a biometric sensor.