Method for managing a biometric smart card
AssigneeThales Dis France SAS
InventorsGuillaume Cammas, Jean-Luc Salles, Pierre Souchon, Nicolas Boulanger
Life of this patent
Estimating the term…
Abstract
Provided is a method for managing a biometric sensor configured to collect a captured biometric data and a secure element able to communicate with the biometric sensor through a communication channel. The method comprises receiving a specific data by the biometric smart card, and checking the specific data by using a control data pre-stored in the biometric smart card. Only if said checking is successful, it then executes an erasing command for removing said reference biometric data from the biometric smart card and a disabling command for permanently deactivating the communication channel.
Claims7
A method for managing a biometric smart card associated to a user, said biometric smart card comprising a reference biometric data previously enrolled by said user, a biometric sensor configured to collect a captured biometric data from a person and a secure element able to communicate with the biometric sensor through a communication channel, characterized in that the method comprises the steps:
- providing a server computer with information reflecting that said biometric smart card has been lost or stolen,
- coupling said biometric smart card to a hardware machine and establishing a communication session between the server computer and the hardware machine by starting an online financial transaction,
- receiving, by the biometric smart card and through both said hardware machine and communication session, a specific data generated by the server computer in accordance with the fact that said biometric smart card has been lost or stolen, wherein the specific data is a cryptographic data,
- checking, by the biometric smart card, the specific data by using a control data prestored in the biometric smart card, wherein the control data is a key,
- only if said checking is successful, executing by the biometric smart card both an erasing command for removing said reference biometric data from the biometric smart card and a disabling command for permanently deactivating said communication channel, and
- rejecting the online financial transaction.
A system comprising:
- a hardware server computer and a biometric smart card allocated to a user, said biometric smart comprising a reference biometric data previously enrolled by said user,
- a biometric sensor configured to collect a captured biometric data from a person, and
- a secure element able to:
- communicate with the biometric sensor through a communication channel, characterized in that said hardware server computer is adapted to be provided with information reflecting that said biometric smart card has been lost or stolen,
- generate a specific data in accordance with the fact that said biometric smart card has been, lost or stolen, wherein the specific data is a cryptographic data, and
- send accordingly the specific data to the biometric smart card when both said biometric smart card has been coupled to a hardware machine and said communication session has been established between the hardware server computer and the hardware machine by starting an online financial transaction and in that said biometric smart card comprises at least a processing unit and instructions which cause said biometric smart card to:
- receive the specific data,
- check the specific data by using a control data pre-stored in the biometric smart card, wherein the control data is a key,
- only if said checking is successful, execute both an erasing command for removing said reference biometric data from the biometric smart card and a disabling command for permanently deactivating said communication channel, and
- reject the online financial transaction.
Dependencies are inferred from the claim text.