Encryption process including a biometric unit
AssigneeTecSec, Inc.
InventorEdward M. Scheidt
Life of this patent
Estimating the term…
Abstract
A method of encrypting an object includes generating a cryptographic key, using the cryptographic key to initialize a cryptographic algorithm, and applying the algorithm to the object. Accordingly, an encrypted object is formed. The key is generated by combining key splits derived from different sources. One of the key splits is a biometric value derived from and corresponding to a particular person.
Claims58
A method of encrypting an object, comprising:
- combining a plurality of key splits to generate a cryptographic key;
- initializing a cryptographic algorithm with the cryptographic key;
- and
- applying the initialized cryptographic algorithm to the object, to form an encrypted object;
- wherein at least one of the plurality of key splits corresponds at least in part to a biometric measurement;
- and
- wherein combining a plurality of key splits to generate a cryptographic key is performed on a smart card.
In a cryptographic system associated with an organization, a method of encrypting an object by a user, comprising:
- generating a cryptographic key by combining, on a smart card, an organization split corresponding to the organization, a maintenance split, a random split, a biometric split corresponding to the user, and at least one label split;
- initializing a cryptographic algorithm with the cryptographic key;
- encrypting the object according to the initialized cryptographic algorithm;
- adding combiner data to the encrypted object, wherein the combiner data includes
- reference data corresponding to at least one of the at least one label split and the cryptographic algorithm,
- name data associated with the organization,
- at least one of the maintenance split and a maintenance level associated with the maintenance split, and
- the random split;
- and
- storing the encrypted object with the added combiner data.
A storage medium comprising instructions for causing a data processor to encrypt an object, wherein the instructions include:
- generate a cryptographic key by combining a plurality of key splits;
- initialize a cryptographic algorithm with the cryptographic key;
- and
- apply the initialized cryptographic algorithm to the object to form an encrypted object;
- wherein at least one of the plurality of key splits corresponds at least in part to a biometric measurement;
- and
- wherein the data processor is distributed, and the instruction to generate a cryptographic key is executed at least in part on a smart card.
A storage medium comprising instructions for causing a data processor to encrypt an object, wherein the instructions include:
- generate a cryptographic key by combining, on a smart card, an organization split corresponding to an organization, a maintenance split, a random split, a biometric split corresponding to the user, and at least one label split;
- initialize a cryptographic algorithm with the cryptographic key;
- apply the initialized cryptographic algorithm to the object to form an encrypted object;
- add combiner data to the encrypted object, wherein the combiner data includes
- reference data corresponding to at least one of the at least one label split and the cryptographic algorithm,
- name data associated with the organization,
- at least one of the maintenance split and a maintenance level corresponding to the maintenance split, and
- the random split;
- and
- store the encrypted object with the combiner data for subsequent access.
Dependencies are inferred from the claim text.