Back to results
US 2021/0344487 A1Published application
Authentication processing service
AssigneeKeyless Technologies Limited
InventorsAndrea Carmignani, Fabian Eberle, Giuseppe Ateniese, Jaroslav Sedenka, Paolo Gasti
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer-readable media for facilitating an authentication processing service are provided.
Claims20
A method for authenticating a user of at least a first user electronic device and a second user electronic device using a network node, the method comprising:
- receiving, at the network node, from the first user electronic device, at a first moment in time, communication protocol information comprising:
- a restricted enrollment input corresponding to an unrestricted enrollment input that has been restricted by an enrollment biometric template indicative of user enrollment biometrics captured at an enrollment moment in time that is prior to the first moment in time;
- an unrestricted authentication input;
- and
- a transformed matching function that is operative to output a success key in response to successfully evaluating the transformed matching function using two inputs;
- receiving, at the network node, from the second user electronic device, at a second moment in time after the first moment in time, a restricted authentication input corresponding to the unrestricted authentication input that has been restricted by an authentication biometric sample indicative of user authentication biometrics captured at an authentication moment in time that is after the first moment in time but that is prior to the second moment in time;
- after the receiving the restricted authentication input, evaluating, at the network node, the transformed matching function using the restricted enrollment input and the restricted authentication input;
- and
- when the evaluating is successful, using, at the network node, the success key output by the transformed matching function to enable a secure operation.
6 more elements
A method for authenticating a user of a user electronic device using a network node, the method comprising:
- obtaining, at the user electronic device, a seed;
- generating, at the user electronic device, an enrollment biometric template indicative of user enrollment biometric identifier information;
- identifying, at the user electronic device, a transformed matching function that is operative to output a success key in response to successfully evaluating the transformed matching function using a first input and a second input;
- generating, at the user electronic device, a restricted enrollment input by restricting the first input using the enrollment biometric template;
- encrypting, at the user electronic device, with the success key, seed information that comprises at least a portion of the seed;
- after the encrypting, deleting the seed from the user electronic device;
- and
- sending, from the user electronic device, to the network node, enrollment data comprising the encrypted seed information and the transformed matching function and the restricted enrollment input.
5 more elements
A non-transitory computer-readable storage medium storing at least one program, the at least one program comprising instructions, which, when executed by at least one processor of an electronic subsystem, cause the at least one processor to:
- receive, from a user electronic device, a restricted enrollment input corresponding to an unrestricted enrollment input that has been restricted by an enrollment biometric template indicative of user enrollment biometrics captured at an enrollment moment in time;
- receive, from the user electronic device, a restricted authentication input corresponding to an unrestricted authentication input that has been restricted by an authentication biometric sample indicative of user authentication biometrics captured at an authentication moment in time after the enrollment moment in time;
- receive, from the user electronic device, a transformed matching function that is operative to output a success key in response to successfully evaluating the transformed matching function using two inputs;
- evaluate the received transformed matching function using the received restricted enrollment input and the received restricted authentication input;
- and
- when the evaluation is successful, use the success key output by the transformed matching function to enable a secure operation.
3 more elements
Dependencies are inferred from the claim text.