System and method for biometric authentication with device attestation
AssigneeNok Nok Labs, Inc.
InventorRolf Lindemann
Life of this patent
Estimating the term…
Abstract
A system, apparatus, method, and machine readable medium are described for biometric device attestation. For example, one embodiment of an apparatus includes: a biometric device to read biometric authentication data from a user and determine whether to successfully authenticate the user based on a comparison with biometric reference data; and a cryptographic engine to establish communication with a relying party and to attest to the model and/or integrity of the biometric device to the relying party.
Claims29
An apparatus for remotely attesting to authenticator model and integrity comprising:
- an authenticator to read biometric authentication data from a user and determine whether to successfully authenticate the user based on a comparison with biometric reference data;
- and
- a cryptographic engine to protect communication with a relying party remote from the apparatus and to attest to the model and/or integrity of the authenticator to the relying party.
A method for remotely attesting to authenticator model and/or integrity comprising:
- reading biometric authentication data from a user and determining whether to successfully authenticate the user based on a comparison with biometric reference data, wherein the operations of reading and determining are performed by an authenticator;
- and
- protecting communication with a remote relying party;
- and
- performing an attestation transaction with the relying party to attest to the model and/or integrity of the authenticator to the relying party.
A non-transitory machine readable medium having program code stored thereon which, when executed by a machine, causes the machine to perform the operations of:
- reading biometric authentication data from a user and determining whether to successfully authenticate the user based on a comparison with biometric reference data, wherein the operations of reading and determining are performed by an authenticator;
- and
- protecting communication with a remote relying party;
- and
- performing an attestation transaction with the relying party to attest to the model and/or integrity of the authenticator to the relying party.
Dependencies are inferred from the claim text.