Back to results
US 11,080,380 B2Granted
Decentralized biometric identity authentication
AssigneeAware, Inc.
InventorsDalys Sebastian, David Benini
Life of this patent
Estimating the term…
Abstract
A decentralized biometric identity authentication method utilizes biometrics captured on a mobile device to perform identity authentication against data that was registered as part of an identity proofing process and is thus trusted. The user registers his or her biometric using the user's mobile device and associates it with the user's electronic identity as part of a supervised identity proofing process, thus forming a proofed identity, and registers the proofed identity with a federated identity system. To later access the resources of the federated identity system, the user logs in with his or her biometrics. The methods described herein are useful, for example, in the travel, healthcare, and financial services fields.
Claims20
A decentralized biometric identity authentication method, comprising:
- enrolling a user biometric, the enrolling comprising:
- receiving first factor credentials via a user interface of a mobile device;
- capturing a first user biometric with a biometric sensor associated with the mobile device;
- securely saving the first user biometric to a memory of the mobile device;
- calculating, with a processor of the mobile device, a first cryptographic hash of the first user biometric;
- and
- transmitting the first cryptographic hash via a communication interface of the mobile device;
- and
- registering the user biometric, the registering comprising:
- capturing a second user biometric with the biometric sensor;
- comparing, with the processor, the second user biometric to the first user biometric;
- generating, with the processor, a cryptographic key pair comprising a private key and a public key;
- securely saving the private key to the memory;
- calculating, with the processor of the mobile device, a second cryptographic hash of the second user biometric;
- preparing, with the processor, a registration package comprising the public key and the second cryptographic hash of the second user biometric;
- and
- transmitting the registration package via the communication interface to a relying party server,
- wherein, when the first user biometric is securely saved in memory, the user is prevented from altering the first user biometric.
15 more elements
A mobile device comprising:
- a user interface;
- a biometric sensor;
- a communication interface;
- a processor;
- and
- a memory storing instructions for execution by the processor that, when executed, cause the processor to:
- enroll a user biometric, the enrolling comprising:
- receiving first factor credentials via the user interface;
- capturing a first user biometric with the biometric sensor;
- securely saving the first user biometric to the memory;
- calculating a first cryptographic hash of the first user biometric;
- and
- transmitting the first cryptographic hash via the communication interface;
- and
- register the user biometric, the registration comprising:
- capturing a second user biometric with the biometric sensor;
- comparing the second user biometric to the first user biometric;
- generating a cryptographic key pair comprising a private key and a public key;
- securely saving the private key to the memory;
- calculating with the processor, a second cryptographic hash of the second user biometric;
- preparing a registration package comprising the public key and the second cryptographic hash of the second user biometric;
- and
- transmitting the registration package via the communication interface to a party server,
- wherein, when the first user biometric is securley saved in memory, the user is prevented from altering the first user biometric.
21 more elements
A non-transient computer-readable medium containing program instructions for causing a computer to perform a decentralized biometric identity authentication method comprising:
- enrolling a user biometric, the enrolling comprising:
- receiving first factor credentials via a user interface of a computing device;
- capturing a first user biometric with a biometric sensor associated with the computer;
- securely saving the first user biometric to a memory of the computing device;
- calculating, with a processor of the computing device, a first cryptographic hash of the first user biometric;
- and
- transmitting the first cryptographic hash via a communication interface of the computing device;
- and
- registering the user biometric, the registering comprising:
- capturing a second user biometric with the biometric sensor;
- comparing, with the processor, the second user biometric to the first user biometric;
- generating, with the processor, a cryptographic key pair comprising a private key and a public key;
- securely saving the private key to the memory;
- calculating, with the processor, a second cryptographic hash of the second user biometric;
- preparing, with the processor, a registration package comprising the public key and the second cryptographic hash of the second user biometric;
- and
- transmitting the registration package via the communication interface to s relying party server,
- wherein, when the first user biometric is securely saved in memory, the user is prevented from altering the first user biometric.
15 more elements
Means for decentralized biometric identity authentication, comprising:
- means for enrolling a user biometric, the enrolling comprising:
- receiving first factor credentials via a user interface of a mobile device;
- capturing a first user biometric with a biometric sensor associated with the mobile device;
- securely saving the first user biometric to a memory of the mobile device;
- calculating, with a processor of the mobile device, a first cryptographic hash of the first user biometric;
- and
- transmitting the first cryptographic hash via a communication interface of the mobile device;
- and
- means for registering the user biometric, the registering comprising:
- capturing a second user biometric with the biometric sensor;
- comparing, with the processor, the second user biometric to the first user biometric;
- generating, with the processor, a cryptographic key pair comprising a private key and a public key;
- securely saving the private key to the memory;
- calculating, with the processor, a second cryptographic hash of the second user biometric,
- preparing, with the processor, a registration package comprising the public key and the second cryptographic hash of the second user biometric;
- and
- transmitting the registration package via the communication interface.
14 more elements
Dependencies are inferred from the claim text.