EncryptionNew encryption method improves privacy protection

VTT Technical Research Center of Finland has developed a new kind of encryption method for improving the privacy protection of consumers to enable safer, more reliable, and easier-to-use user authentication than current systems allow.

The method combines safety, usability, and privacy protection — until now, implementing all three at the same time has been a challenge.

“Our method protects, for example, the user’s biometric data or typing style,” says Senior ScientistKimmo Halunen.

VTT says that in biometric authentication, the risk is that a person’s permanent biometric identifiers, which cannot be changed, leak out of the database. VTT’s method stores data in the database in an encrypted form and all comparisons between measuring results and the database are conducted using encrypted messages so there is no need to open any biometric data at this stage of the process.

VTT integrates new kinds of encryption methods, such as homomorphic cryptography and secure exchange of cryptographic keys, into known measuring methods of typing styles.

The traditional authenticationbased on passwords has proved to be weak, since users mostly select weak passwords, and hackers often succeed in stealing large password databases. Recently, companies such as Dropbox and Yahoo have fallen prey to such data breaches.

In addition, new types of user environments, such as smart devices, cars, and home appliances, create challenges for user authenticationwith the help of passwords.

VTT says it is now looking for a partner for further processing and commercialization of this method, which could be available to consumers within a year or two.