Obfuscating biometric data to provide enhanced authentication security
AssigneeMicro Focus LLC
InventorsDouglas Max Grover, Michael F Angelo
Life of this patent
Estimating the term…
Abstract
A nonce is sent to a user communication device. Obfuscated biometric data is received from the user communication device. The obfuscated biometric data is generated by an obfuscation process that uses the nonce and first biometric data. The first biometric data is generated from a biometric of a user at the user communication device. For example, the first biometric data may be biometric data from a fingerprint scan. The obfuscation process is reversed by using the first nonce to produce the first biometric data. The first biometric data is compared to known biometric data of the user. In response to the first biometric data being within a threshold of the known biometric data, the user is authenticated.
Claims20
A system comprising:
- a microprocessor;
- and
- a computer readable medium, coupled with the microprocessor and comprising microprocessor readable and executable instructions that, when executed by the microprocessor, cause the microprocessor to:
- send a first nonce;
- receive obfuscated biometric data, wherein the obfuscated biometric data is generated by an obfuscation process that uses the first nonce and first biometric data, wherein the first biometric data is generated from a biometric of a user;
- reverse the obfuscation process by using the first nonce to produce the first biometric data;
- compare the first biometric data to known biometric data of the user;
- in response to the first biometric data being within a threshold of the known biometric data, authenticate the user;
- and
- segment the obfuscated biometric data into a plurality of biometric data points;
- wherein the obfuscation process divides the first nonce into a plurality of nonce segments and wherein each of the plurality of nonce segments is used to obfuscate each of a corresponding plurality of the biometric data points to generate the obfuscated biometric data.
A method comprising:
- sending, by a microprocessor, a first nonce;
- receiving, by the microprocessor, obfuscated biometric data, wherein the obfuscated biometric data is generated by an obfuscation process that uses the first nonce and first biometric data, and wherein the first biometric data is generated from a biometric of a user;
- reversing, by the microprocessor, the obfuscation process by using the first nonce to produce the first biometric data;
- comparing, by the microprocessor, the first biometric data to known biometric data of the user;
- in response to the first biometric data being within a threshold of the known biometric data, authenticating, by the microprocessor, the user;
- and
- segmenting, by the microprocessor, the obfuscated biometric data into a plurality of biometric data points;
- wherein the obfuscation process divides the first nonce into a plurality of nonce segments and wherein each of the plurality of nonce segments is used to obfuscate each of a corresponding plurality of the biometric data points to generate the obfuscated biometric data.
A non-transient computer readable medium having stored thereon instructions that cause a processor to execute a method, the method comprising:
- instructions to:
- send a nonce;
- receive obfuscated biometric data, wherein the obfuscated biometric data is generated by an obfuscation process that uses the nonce and first biometric data, and wherein the first biometric data is generated from a biometric of a user;
- reverse the obfuscation process by using the nonce to produce the first biometric data;
- compare the first biometric data to known biometric data of the user;
- in response to the first biometric data being within a threshold of the known biometric data, authenticate the user;
- and
- segment the obfuscated biometric data into a plurality of biometric data points;
- wherein the obfuscation process divides the nonce into a plurality of nonce segments and wherein each of the plurality of nonce segments is used to obfuscate each of a corresponding plurality of the biometric data points to generate the obfuscated biometric data.
Dependencies are inferred from the claim text.