Encryption parameter selection
AssigneeMicrosoft Technology Licensing, LLC
InventorsAmer A. Hassan, Edward C. Giaimo, III
Life of this patent
Estimating the term…
Abstract
Disclosed in some examples are methods, systems, devices, and machine-readable mediums for securing biometric data using an encryption technique that does not require key storage or distribution. In some examples, a first biometric template of a user is input into a function that selects or determines parameters (such as an encryption key) of an encryption function that is then used to encrypt a second biometric template of the user.
Claims20
A computing device for securing biometric data, the computing device comprising:
- a processor;
- a memory, storing instructions, which when executed by the processor, cause the processor to perform operations comprising:
- receiving a first set of data points representing a biometric characteristic of a user;
- receiving a second set of data points representing a second biometric characteristic of the user;
- selecting at least one encryption parameter of an encryption function using the first set of data points;
- transforming the second set of data points to a third set of data points using the encryption function and the at least one encryption parameter;
- and
- transmitting the third set of data points to a network-based authentication service over a communications network.
A method for securing biometric data, the method comprising:
- using one or more hardware processors:
- receiving a first set of data points representing a biometric characteristic of a user;
- receiving a second set of data points representing a second biometric characteristic of the user;
- selecting at least one encryption parameter of an encryption function using the first set of data points;
- transforming the second set of data points to a third set of data points using the encryption function and the at least one encryption parameter;
- and
- transmitting the third set of data points to a network-based authentication service over a communications network.
A computing device for authenticating a secure biometric, the computing device comprising:
- a hardware processor;
- a memory, storing instructions, which when executed, cause the hardware processor to perform operations comprising:
- receiving, from a computing device, a request to authenticate a user;
- identifying a selection biometric template representing a first biometric characteristic of the user;
- identifying a challenge biometric template representing a second biometric characteristic of the user;
- identifying an encrypted exemplar biometric template;
- decrypting the encrypted exemplar biometric template using the selection biometric template;
- comparing the decrypted exemplar biometric template to the challenge biometric template;
- and
- responsive to determining that the decrypted exemplar biometric template matches the challenge biometric template within a predetermined margin of error, producing an indication that the user is authenticated.
Dependencies are inferred from the claim text.