Systems and methods for securely managing biometric data

A method for securely managing biometric data, the method conducted at a secure server and comprising:

• receiving a token from a secure element directly connected to a biometric input, wherein the token is generated at the secure element by obtaining biometric data and encoding a biometric signature using an obscured algorithm and an encryption key, wherein a seed value is obtained from the biometric data or biometric signature, wherein a secret key is generated based on the seed value and a key derivation function, wherein a random number is obtained by inputting the secret key into a pseudorandom number generator, wherein the encryption key is generated based on the random number, wherein the biometric data and the biometric signature are erased once the token has been generated;
• and,
• if the token is received together with a registration request, storing the received token in a database;
• or,
• if the token is received together with an authentication request, authenticating the received token.

A system for securely managing biometric data, the system including a secure element, which is directly connected to a biometric input, the secure element comprising one or more processors and one or more non-transitory computer-readable media storing instructions which, when executed by the one or more processors, cause:

• receiving biometric data directly from the biometric input;
• obtaining a biometric signature based on the biometric data;
• accessing a seed value specific to the biometric data by obtaining the seed value from the biometric data or biometric signature;
• generating a secret key based on the seed value and a key derivation function;
• obtaining a random number by inputting the secret key into a pseudorandom number generator;
• generating an encryption key based on the random number;
• encoding the biometric signature using an obscured algorithm and the encryption key to generate a token;
• outputting the token for secure storage within the secure element or secure transmission to a secure server for registration or authentication of the biometric data;
• and
• flushing the biometric data and the biometric signature once the token has been output.

A system for securely managing biometric data, the system including a secure server comprising one or more processors and one or more non-transitory computer-readable media storing instructions which, when executed by the one or more processors, cause:

• receiving a token from a secure element directly connected to a biometric input, wherein the token is generated at the secure element by obtaining biometric data and encoding a biometric signature using an obscured algorithm and an encryption key, wherein a seed value is obtained from the biometric data or biometric signature, wherein a secret key is generated based on the seed value and a key derivation function, wherein a random number is obtained by inputting the secret key into a pseudorandom number generator, wherein the encryption key is generated based on the random number, wherein the biometric data and the biometric signature are erased once the token has been generated;
• and,
• if the token is received together with a registration request, storing the received token in a database;
• or,
• if the token is received together with an authentication request, authenticating the received token.