# US 10,122,710 B2 · Binding a data transaction to a person's identity using biometrics

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,710 B2
- Document ID: US10122710B2
- Status: Granted
- Kind: B2
- Application number: 14/804,010
- Filed: 2015-07-20
- Published: 2016-06-30
- Granted: 2018-11-06
- Earliest claimed: 2012-04-19
- Assignees: Pq Solutions Limited
- Applicants: PQ Solutions Limited
- Inventors: Martin Tomlinson; Cen Jung Tjhai; Andersen Cheng
- Web page: https://patentgrep.com/patent/US10122710B2

## CPC

- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/602: {Providing cryptographic facilities or services}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04W 12/065: Continuous authentication
- H04W 12/65: Environment-dependent, e.g. using captured environmental data
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Methods and systems are described for binding a data transaction to a person's identity using biometrics. The method comprises the generation of data which includes information associated with a transaction, or an encrypted transaction, between a server and a client device associated with a user, generating authentication data providing an irrevocable binding of the information to biometric characteristics of the user, by capturing biometric input by the user of said authentication data or information associated with the transaction, wherein this information is implanted into the captured data. A predetermined minimum number of quorum portions may be generated from a portion of the data generated or processed by the method, wherein at least a predetermined minimum number of received quorum data portions are required to reconstruct the data portion.

## Claims

### Claim 1

A computer-implemented method comprising:
generating transaction data including information associated with a transaction between a first device and a second device, the first device associated with a user;
generating authentication data associated with the transaction data, by:
i) computing a first data representation of the information associated with the transaction using a defined algorithm, wherein the algorithm results in a different data representation when the information changes;
ii) prompting the user to record inputting of the computed first data representation; and
iii) capturing audio and/or video data of the first computed data representation as inputted by the user in response to the prompting, wherein the first computed data representation is implanted into the captured audio and/or video data;
transmitting the transaction data and the associated authentication data to the second device and
verifying the transaction data received by the second device, by:
i) computing a second data representation from the received transaction data using the defined algorithm; and
ii) comparing the computed second data representation to the first computed data representation implanted into the audio and/or video data of the received authentication data to identify a match;
wherein an identity of the user associated with the first device is verified from the audio and/or video data of the received authentication data.

### Claim 2 (depends on 1)

The method of claim 1, wherein the authentication data provides an irrevocable binding of the transaction data to at least one biometric characteristic of the user.

### Claim 3 (depends on 1)

The method of claim 1, further comprising computing the data representation by extracting a portion of the transaction data or computing a function of the transaction data.

### Claim 4 (depends on 1)

The method of claim 1, wherein the information associated with the transaction comprises at least a portion of a unique identifier generated for the transaction.

### Claim 5 (depends on 1)

The method of claim 1, further comprising determining the identity of the user associated with the transaction from the received authentication data.

### Claim 6 (depends on 1)

The method of claim 1, wherein first the computed data representation is implanted into one or more biometric information files by enunciating or writing said computed data representation, or by hand or body gestures representative of said first computed data representation.

### Claim 7 (depends on 1)

The method of claim 1, wherein the transaction data comprises an encrypted data portion associated with sensitive information of the transaction.

### Claim 8 (depends on 7)

The method of claim 7, wherein the information associated with the transaction comprises binding data derived from at least the encrypted data portion.

### Claim 9 (depends on 8)

The method of claim 8, further comprising extracting at least a portion of the encrypted data portion or computing a function of the encrypted data portion as the binding data, whereby the binding data is implanted into the captured audio and/or video data.

### Claim 10 (depends on 7)

The method of claim 7, wherein a symmetric encryption key used to generate the encrypted data portion is retained by the user until the sensitive information of the transaction is to be retrieved.

### Claim 11 (depends on 7)

The method of claim 7, wherein a cryptographic key of the encrypted data portion is split into a plurality of key portions.

### Claim 12 (depends on 8)

The method of claim 8, wherein at least one key portion is retained by the user until the sensitive information of the transaction is to be retrieved.

### Claim 13 (depends on 12)

The method of claim 12, wherein at least a predetermined minimum number of received quorum key portions are required to reconstruct the cryptographic key to decrypt the encrypted data portion.

### Claim 14 (depends on 7)

The method of claim 7, wherein the encrypted data portion comprises at least one of a predetermined minimum number of quorum portions generated from original data, wherein at least a predetermined minimum number of received quorum data portions are required to reconstruct the original data.

### Claim 15 (depends on 14)

The method of claim 14, wherein the received plurality of quorum portions includes at least one portion received from the client device.

### Claim 16 (depends on 14)

The method of claim 14, further comprising generating said plurality of quorum portions from original data, and distributing the plurality of quorum portions between a plurality of entities.

### Claim 17 (depends on 16)

The method of claim 16, wherein one or more of said entities receives a greater proportion of said quorum portions.

### Claim 18 (depends on 16)

The method of claim 16, wherein the entities comprise one or more of: a computing device, an authentication token and a security dongle.

### Claim 19 (depends on 14)

The method of claim 14, wherein identified discrepancies in received quorum portions are used to identify the associated entity presenting quorum portions containing corrupted or erroneous values.

### Claim 20 (depends on 14)

The method of claim 14, wherein each quorum portion comprises one or more data values each identifying a solution to a respective one of a series of equations that encode dependencies between data values of the original data, each equation associated with a single unknown dependent data value.

### Claim 21 (depends on 20)

The method of claim 20, further comprising generating the plurality of quorum portions from said original data, by:
defining a quorum code including data values associated with original data to be encoded, and a predefined number of dependent data values;
determining each said dependent data value as a solution to a respective one of said series of equations that encode dependencies between data values of the original data; and
defining each quorum portion as one or more of said dependent data values.

### Claim 22 (depends on 20)

The method of claim 20, further comprising determining reconstructed data from a received plurality of quorum portions, using a series of reconstruction equations each associated with a single unknown value of the candidate data, wherein the reconstructed data includes data values corresponding to the original data and data values corresponding to the plurality of quorum portions generated from said original data.

### Claim 23 (depends on 14)

The method of claim 14, further comprising generating a plurality of quorum portions from said original data, wherein each quorum portion includes a corrupted data value at a respective defined position in the original data, and distributing the plurality of quorum portions to a plurality of entities.

### Claim 24 (depends on 14)

The method of claim 14, further comprising:
receiving at least a predetermined minimum number of quorum portions generated from original data, wherein each quorum portion includes a corrupted data value at a respective defined position in the original data; and
reconstructing the original data from the received quorum data portions, wherein the original data is reconstructed from the majority data value at each respective defined position of the received quorum portions.

### Claim 25 (depends on 14)

The method of claim 14, further comprising:
receiving at least a predetermined minimum number of quorum portions generated from original data, wherein each quorum portion comprises a respective partial encryption key, and at least one ciphertext portion generated by encrypting the original data using an associated encryption key formed from a defined combination of said partial encryption keys; and
decrypting the received ciphertext portions using an associated decryption key formed from the defined combination of received partial encryption keys, to recover the original data.

### Claim 26 (depends on 14)

The method of claim 14, wherein each quorum portion is received from a corresponding computing device, together with additional data associated with the computing device, and wherein the defined series of reconstruction relationships encode dependencies between data values of the received versions and the additional data.

### Claim 27 (depends on 26)

The method of claim 26, wherein the additional data is associated with a current location and/or current time and/or current date and/or identity of the computing device.

### Claim 28 (depends on 14)

The method of claim 14, wherein the original data is a sensitive data file, an encryption or decryption key, an authentication key or a password.

### Claim 29 (depends on 1)

A method according to claim 1, wherein the transaction data comprises a plurality of generated authentication data in a nested arrangement whereby successive trusted third parties provide authentication data which may be used to provide additional authentication.

### Claim 30 (depends on 1)

The method of claim 1, wherein the second device is a server.

### Claim 31 (depends on 1)

The method of claim 1, wherein the captured audio and/or video data comprises a video recording of the user enunciating the first data representation, and wherein the identity of the user is authenticated at the second device by recognising one or more items selected from the group consisting of: the user's face, the user's voice, and one or more gestures made by the user, on replay of the received video recording.

### Claim 32

A computer-implemented method comprising:
receiving, at a first device associated with a user, transaction data including a data representation of information associated with a transaction between the first device and a second device;
receiving authentication data associated with the transaction data, the authentication data including captured audio and/or video data of a computed data representation as inputted by the user, the first data representation computed from the information associated with the transaction using a defined algorithm, wherein the algorithm results in a different data representation when the information changes, and wherein the first computed data representation is implanted into the captured audio and/or video data; and
verifying the transaction data received by the second device, by:
computing a second data representation from the received transaction data using the defined algorithm; and
comparing the computed second data representation to the first computed data representation implanted into the audio and/or video data of the received authentication data to identify a match;
wherein an identity of the user associated with the first device is verified from the audio and/or video data of the received authentication data.

### Claim 33

A system comprising one or more hardware computer processors configured to:
generate, by the one or more hardware computer processors, transaction data including information associated with a transaction between a first device and a second device, the first device associated with a user;
generate, by the one or more hardware computer processors, authentication data associated with the transaction data, by:
i) computing a first data representation of the information associated with the transaction using a defined algorithm, wherein the algorithm results in a different data representation when the information changes;
ii) prompting the user to record inputting of the computed first data representation; and
iii) capturing audio and/or video data of the computed first data representation as inputted by the user in response to the prompting, wherein the computed first data representation is implanted into the captured audio and/or video; data
transmitting the transaction data and the associated authentication data to the second device;
verify the transaction data received by the second device, by:
i) computing a second data representation from the received transaction data using the defined algorithm; and
ii) comparing the computed second data representation to the first computed data representation implanted into the audio and/or video data of the received authentication data to identify a match;
wherein an identity of the user associated with the first device is verified from the audio and/or video data of the received authentication data.

### Claim 34

A non-transitive computer-readable storage medium storing computer-executable instructions to perform a method of:
generating transaction data associated with a transaction between a first device and a second device associated with a user;
generating authentication data providing an irrevocable binding of the transaction data to at least one biometric characteristic of the user, by:
i) computing a first data representation of the information associated with the transaction using a defined algorithm, wherein the algorithm results in a different data representation when the information changes;
ii) prompting the user to record inputting of the computed first data representation; and
iii) capturing audio and/or video data of the computed first data representation as inputted by the user in response to the prompting, wherein the computed first data representation is implanted into the captured audio and/or video data;
transmitting the transaction data and the associated authentication data to the server; and
verifying the transaction data received by the second device, by:
i) computing a second data representation from the received transaction data using the defined algorithm; and
ii) comparing the computed second data representation to the first computed data representation implanted into the audio and/or video data of the received authentication data to identify a match;
wherein an identity of the user associated with the first device is verified from the audio and/or video data of the received authentication data.