Shared keys based on multiple features
A method for secret sharing utilizing multiple features of an input includes: receiving a registration input; obtaining features from the registration input; generating a secret key and a plurality of shared keys according to a shared secret scheme; associating each of the plurality of shared keys with a respective feature of the registration input; generating a plurality of additional features associated with additional keys having a similar format as a shared key associated with a respective feature; storing the plurality of shared keys associated with respective features together with the plurality of additional keys associated with additional features; and encrypting an element to be protected by the secret key using the secret key.
1. A non-transitory computer-readable medium having processor-executable instructions stored thereon for secret sharing utilizing multiple features of an input, the processor-executable instructions, when executed, facilitating performance of the following:
receiving a registration input from a user;
obtaining features from the registration input;
generating a secret key and a plurality of shared keys according to a shared secret scheme, wherein the secret key is re-creatable using the plurality of shared keys;
generating a plurality of key-feature data elements based on the features of the registration input and the plurality of shared keys, wherein each of the key-feature data elements is based on a respective shared key of the plurality of shared keys and a respective feature of the registration input;
generating a plurality of additional data elements having a similar format as the plurality of key-feature data elements such that the key-feature data elements and the additional data elements are indistinguishable from one another to an attacker;
storing the plurality of key-feature data elements together with the plurality of additional data elements, wherein the secret key is not stored with the plurality of key-feature data elements and the plurality of additional data elements; and
encrypting an element to be protected by the secret key using the secret key.
2. The non-transitory computer-readable medium according to claim 1 , wherein the shared secret scheme is based on Shamir's scheme, Blakley's scheme, or the Chinese remainder theorem.
3. The non-transitory computer-readable medium according to claim 1 , wherein generating the plurality of key-feature data elements further comprises associating a respective shared key and a shared key parameter corresponding to the respective shared key with a respective feature of the registration input; and
wherein generating the plurality of additional data elements includes generating an additional parameter having a similar format as a shared key parameter.
4. The non-transitory computer-readable medium according to claim 1 , wherein generating the plurality of key-feature data elements comprises storing each of the plurality of shared keys in one or more extended dimensions of the respective feature of the registration input.
5. The non-transitory computer-readable medium according to claim 1 , wherein the number of shared keys generated is based on the number of features obtained.
6. A method for secret sharing utilizing multiple features of an input, the method comprising:
receiving, by a computing system, a registration input from a user;
obtaining, by the computing system, features from the registration input;
generating, by the computing system, a secret key and a plurality of shared keys according to a shared secret scheme, wherein the secret key is re-creatable using the plurality of shared keys;
generating, by the computing system, a plurality of key-feature data elements based on the features of the registration input and the plurality of shared key, wherein each of the key-feature data elements is based on a respective shared key of the plurality of shared keys and a respective feature of the registration input;
generating, by the computing system, a plurality of additional data elements having a similar format as the plurality of key-feature data elements such that the key-feature data elements and the additional data elements are indistinguishable from one another to an attacker;
storing, by the computing system, the plurality of key-feature data elements together with the plurality of additional data elements, wherein the secret key is not stored with the plurality of key-feature data elements and the plurality of additional data elements; and
encrypting, by the computing system, an element to be protected by the secret key using the secret key.
7. The method according to claim 6 , wherein the shared secret scheme is based on Shamir's scheme, Blakley's scheme, or the Chinese remainder theorem.
8. The method according to claim 6 , wherein generating the plurality of key-feature data elements further comprises associating a respective shared key and a shared key parameter corresponding to the respective shared key with a respective feature of the registration input; and
wherein generating the plurality of additional data elements includes generating an additional parameter having a similar format as a shared key parameter.
9. The method according to claim 6 , wherein generating the plurality of key-feature data elements comprises storing each of the plurality of shared keys in one or more extended dimensions of the respective feature of the registration input.
10. The method according to claim 6 , wherein the number of shared keys generated is based on the number of features obtained.