Remote authentication of fingerprints over an insecure network

A system for enabling the remote authentication of fingerprints over an insecure network using a client-server architecture, comprising:

• means for transmitting the identity of the finger-print source to the server,
• means for retrieving the fingerprint pattern data of the fingerprint source from the fingerprint data-base at the server,
• means for transmitting a set of queries, each of which is derived from a randomly selected set of fingerprint pattern elements in said fingerprint pattern, to said client,
• means for comparing the received set of queries against the observed fingerprint pattern at the client,
• means for transmitting the identities of those queries to the server for which a match is observed by the client provided at least a defined minimum number of queries are verified,
• means for generating a set of challenges pertaining to defined physical relationships between fingerprint pattern elements in the identified queries,
• means for transmitting said challenges to said client,
• means for responding to said challenges based on observed fingerprint patterns at the client, and
• means for confirming authentication provided at least a defined minimum proportion of responses are determined to be correct by the server.

A computer program product comprising computer readable program code stored on computer readable storage medium embodied therein for enabling the remote authentication of fingerprints over an insecure network using a client-server architecture, comprising:

• computer readable program code means configured for transmitting the identity of the finger-print source to the server,
• computer readable program code means configured for retrieving the fingerprint pattern data of the fingerprint source from the fingerprint data-base at the server,
• computer readable program code means configured for transmitting a set of queries, each of which is derived from a randomly selected set of fingerprint pattern elements in said fingerprint pattern, to said client,
• computer readable program code means configured for comparing the received set of queries against the observed fingerprint pattern at the client,
• computer readable program code means configured for transmitting the identities of said queries to the server for which a match is observed by the client provided at least a defined minimum number of queries are verified,
• computer readable program code means configured for generating a set of challenges pertaining to defined physical relationships between fingerprint pattern elements in the identified queries,
• computer readable program code means configured for transmitting said challenges to said client,
• computer readable program code means configured for responding to said challenges based on observed fingerprint patterns at the client, and
• computer readable program code means configured for confirming authentication provided at least a defined minimum proportion of responses are determined to be correct by the server.