# US 10,313,317 B2 · Systems and methods for securely managing biometric data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,317 B2 - Document ID: US10313317B2 - Status: Granted - Kind: B2 - Application number: 15/532,004 - Filed: 2016-02-10 - Published: 2017-09-14 - Granted: 2019-06-04 - Earliest claimed: 2015-02-11 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Alan Joseph O'Regan; Horatio Huxham - Web page: https://patentgrep.com/patent/US10313317B2 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/06: Authentication - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04W 12/069: using certificates or pre-shared keys - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods for securely managing biometric data are provided. In a method conducted at a secure element which is directly connected to a biometric input, biometric data is received directly from the biometric input. A biometric signature based on the biometric data is obtained. A seed value specific to the biometric data is accessed by obtaining the seed value from the biometric data or biometric signature. The biometric signature is encoded using an obscured algorithm and the seed value to generate a token which is output for secure storage within the secure element or secure transmission to a secure server for registration or authentication of the biometric data. Obtaining the seed value from the biometric data or biometric signature can be repeated reliably to obtain the same the seed value ## Claims ### Claim 1 A method for securely managing biometric data, the method being conducted at a secure element which is directly connected to a biometric input and comprising: receiving biometric data directly from the biometric input; obtaining a biometric signature based on the biometric data; accessing a seed value specific to the biometric data by obtaining the seed value from the biometric data or biometric signature; generating a secret key based on the seed value and a key derivation function; obtaining a random number by inputting the secret key into a pseudorandom number generator; generating an encryption key based on the random number; encoding the biometric signature using an obscured algorithm and the encryption key to generate a token; outputting the token for secure storage within the secure element or secure transmission to a secure server for registration or authentication of the biometric data and erasing the biometric data and the biometric signature once the token has been output. ### Claim 2 (depends on 1) The method as claimed in claim 1 wherein obtaining the seed value from the biometric data or biometric signature can be repeated reliably to obtain the same the seed value. ### Claim 3 (depends on 1) The method as claimed in claim 1 wherein obtaining the seed value includes one of: evaluating predetermined data points of the biometric data or biometric signature to generate the seed value; or applying a predetermined transform to the biometric data or biometric signature to generate the seed value. ### Claim 4 (depends on 3) The method as claimed in claim 3 wherein evaluating predetermined data points includes applying a masking function to the biometric data or biometric signature. ### Claim 5 (depends on 3) The method as claimed in claim 3 wherein the predetermined data points evaluated or the predetermined transform applied can be varied to vary the seed value. ### Claim 6 (depends on 1) The method as claimed in claim 1 wherein the seed value is a variable input to the obscured algorithm which may be varied to vary the obscured algorithm. ### Claim 7 (depends on 1) The method as claimed in claim 1 wherein encoding the biometric signature using the obscured algorithm and the seed value includes one of a group of: using the seed value as a separate input to the obscured algorithm; concatenating the seed value together with the biometric signature as a single input to the obscured algorithm; or, selecting the obscured algorithm based on the seed value and encoding the biometric signature using the selected algorithm. ### Claim 8 (depends on 1) The method as claimed in claim 1 wherein the obscured algorithm is an encryption algorithm and wherein the seed value is used as the encryption key. ### Claim 9 (depends on 1) The method as claimed in claim 1 including transmitting the token to the secure server via a secure communication channel for registration or authentication thereat. ### Claim 10 (depends on 9) The method as claimed in claim 9 wherein the step of transmitting the token to the secure server includes transmitting one or both of the seed value and auxiliary information together with the token. ### Claim 11 (depends on 9) The method as claimed in claim 9 wherein the method includes a step of receiving, from the secure server, an authentication confirmation or denial message. ### Claim 12 (depends on 1) The method as claimed in claim 1 wherein the method includes: receiving, from the secure server, a token for use in authenticating a user; comparing the output token to the received token; and, if the output token substantially matches the received token, authenticating the biometric data. ### Claim 13 (depends on 1) The method as claimed in claim 1 including securely storing the token within the secure element for use in authenticating biometric data locally; comparing a subsequently output token to the stored token; and, if the subsequently output token substantially matches the stored token, authenticating the biometric data. ### Claim 14 A method for securely managing biometric data, the method conducted at a secure server and comprising: receiving a token from a secure element directly connected to a biometric input, wherein the token is generated at the secure element by obtaining biometric data and encoding a biometric signature using an obscured algorithm and an encryption key, wherein a seed value is obtained from the biometric data or biometric signature, wherein a secret key is generated based on the seed value and a key derivation function, wherein a random number is obtained by inputting the secret key into a pseudorandom number generator, wherein the encryption key is generated based on the random number, wherein the biometric data and the biometric signature are erased once the token has been generated; and, if the token is received together with a registration request, storing the received token in a database; or, if the token is received together with an authentication request, authenticating the received token. ### Claim 15 (depends on 14) The method as claimed in claim 14, wherein the token is received together with auxiliary information and the seed value, and wherein authenticating the received token includes: identifying a stored token and stored seed value associated with the received auxiliary information; decoding the received token and the stored token using the obscured algorithm and the received seed value to obtain biometric signatures; comparing the obtained biometric signatures; and, if the biometric signatures substantially match, transmitting an authentication confirmation to the secure element. ### Claim 16 (depends on 14) The method as claimed in claim 14, wherein the token is received together with auxiliary information, and wherein authenticating the received token includes: identifying a stored token associated with the received auxiliary information; comparing the stored token with the received token; and, if the stored token substantially matches the received token, transmitting an authentication confirmation to the secure element. ### Claim 17 (depends on 14) The method as claimed in claim 14, wherein the method includes steps of retrieving a stored token from the database and transmitting the retrieved token to a secure element for use in authenticating a user thereat. ### Claim 18 A system for securely managing biometric data, the system including a secure element, which is directly connected to a biometric input, the secure element comprising one or more processors and one or more non-transitory computer-readable media storing instructions which, when executed by the one or more processors, cause: receiving biometric data directly from the biometric input; obtaining a biometric signature based on the biometric data; accessing a seed value specific to the biometric data by obtaining the seed value from the biometric data or biometric signature; generating a secret key based on the seed value and a key derivation function; obtaining a random number by inputting the secret key into a pseudorandom number generator; generating an encryption key based on the random number; encoding the biometric signature using an obscured algorithm and the encryption key to generate a token; outputting the token for secure storage within the secure element or secure transmission to a secure server for registration or authentication of the biometric data; and flushing the biometric data and the biometric signature once the token has been output. ### Claim 19 A system for securely managing biometric data, the system including a secure server comprising one or more processors and one or more non-transitory computer-readable media storing instructions which, when executed by the one or more processors, cause: receiving a token from a secure element directly connected to a biometric input, wherein the token is generated at the secure element by obtaining biometric data and encoding a biometric signature using an obscured algorithm and an encryption key, wherein a seed value is obtained from the biometric data or biometric signature, wherein a secret key is generated based on the seed value and a key derivation function, wherein a random number is obtained by inputting the secret key into a pseudorandom number generator, wherein the encryption key is generated based on the random number, wherein the biometric data and the biometric signature are erased once the token has been generated; and, if the token is received together with a registration request, storing the received token in a database; or, if the token is received together with an authentication request, authenticating the received token.