US 2008/0178002 A1Published application

System, Server, Terminal and Tamper Resistant Device for Authenticating a User

OwnerShinji Hirata, Kenta Takahashi +1inventors

InventorsShinji Hirata, Kenta Takahashi, Masahiro Mimura

Life of this patent

Estimating the term…

Loading patent…

Abstract

The authentication server authenticated by a public key certificate at the time of authentication generates a difference parameter, transforms a template by the difference parameter to create a temporary registration template, and transmits the difference parameter to a tamper resistant device. The tamper resistant device generates a temporary parameter from the held transformation parameter and the difference parameter. A client terminal transforms feature using the temporary parameter, and generates temporarily-transformed feature. An authentication server receives the temporarily-transformed feature, and verifies whether the temporary registration template is in agreement with the temporarily-transformed feature.

Claims20

Dependent claims

A user authentication system comprising:

an authentication server operable to authenticate a user based on biometric information acquired by a client terminal;
and
a tamper resistant device,
wherein the tamper resistant device includes:
a temporary parameter generator operable to hold a parameter and to generate a temporary parameter from the parameter and a difference parameter;
and
an output unit operable to output the temporary parameter to the client terminal,
wherein the authentication server includes:
a storage unit operable to store a registration template created by transforming the biometric information with the parameter;
a difference parameter generator operable to generate the difference parameter;
a transform unit operable to transform the registration template into a temporary registration template with the difference parameter;
and
a verification unit operable to verify whether the temporary verification template inputted from the client terminal and the temporary registration template are in agreement, and
wherein the client terminal includes:
an input unit operable to receive the temporary parameter from the tamper resistant device;
a transform unit operable to transform the biometric information at the time of authentication into the temporary verification template using the temporary parameter;
and
an output unit operable to output the temporary verification template to the authentication server.

15 more elements

Dependencies are inferred from the claim text.