Biometrics-based remote login
AssigneeFingerprint Cards AB
InventorChristian GEHRMANN
Life of this patent
Estimating the term…
Abstract
The invention relates to methods and devices for enabling authentication of a user based on biometric data. In an aspect of the invention, a method performed by a client device of enabling authentication of user of the client device with a network node over a secure communication channel based on biometric data is provided.
Claims24
A method performed by a network node of enabling authentication of a user of a client device over a secure communication channel based on biometric data, comprising:
- receiving a request from the client device to enroll the biometric data of the user captured at the client device;
- and
- receiving, from the client device, transformed biometric data, said biometric data having been transformed into non-invertible biometric data, a fuzzy vault containing a client-generated first secret key, the vault being locked using the biometric data of the user, a client-generated second secret key and a client-generated secret random number from which the second secret key is generated in combination with the first secret key.
9-12. (canceled)
A method performed by a client of enabling authentication of user of the client device with a network node over a secure communication channel based on biometric data, comprising:
- submitting a request to the network node to enroll the biometric data of the user captured at the client device;
- capturing the biometric data of the user;
- transforming the biometric data into non-invertible biometric data;
- generating a first secret key;
- creating a fuzzy vault containing the first secret key, the vault being locked using the biometric data of the user;
- generating a secret random number;
- creating a second secret key based on the first secret key and the secret random number;
- and
- submitting, to the network node, the transformed biometric data, the fuzzy vault, the second secret key and the secret random number.
14-16. (canceled)
A network node configured to enable authentication of a user of a client device over a secure communication channel based on biometric data, the trusted network node comprising a processing unit being configured to:
- receive a request from the client device to enroll the biometric data of the user captured at the client device;
- and
- receive, from the client device, transformed biometric data, said biometric data having been transformed into non-invertible biometric data, a fuzzy vault containing a client-generated first secret key, the vault being locked using the biometric data of the user, a client-generated second secret key and a client-generated secret random number from which the second secret key is generated in combination with the first secret key.
25-34. (canceled)
A client device configured to enable authentication of user of the client device with a network node over a secure communication channel based on biometric data, the client device comprising a biometric data sensing system comprising a biometric data sensor and a processing unit,
- the processing unit being configured to:
- submit a request to the network node to enroll the biometric data of the user captured at the client device;
- the biometric data sensor being configured to:
- capture the biometric data of the user;
- the processing unit further being configured to:
- transform the biometric data into non-invertible biometric data;
- generate a first secret key;
- create a fuzzy vault containing the first secret key, the vault being locked using the biometric data of the user;
- generate a secret random number;
- create a second secret key based on the first secret key and the secret random number;
- and
- submit, to the network node, the transformed biometric data, the fuzzy vault, the second secret key and the secret random number.
36-47. (canceled)
(canceled)
Dependencies are inferred from the claim text.