Electronically signing a document
AssigneeTecSec, Inc.
InventorEdward M. Scheidt
Life of this patent
Estimating the term…
Abstract
An electronic signature device includes a processor, a memory, a user input device including a first biometric input device, and a device interface, all communicatively connected by at least one bus. A method of personalizing the electronic signature device to a user includes receiving a digitized biometric signature of the user via the first biometric input device. A cryptographic key is generated. A biometric electronic template is generated based on the digitized biometric signature. The cryptographic key and the biometric electronic template are stored in the memory.
Claims35
For an electronic signature device comprising a processor, a memory, a user input device including a first biometric input device, and a device interface, all communicatively connected by at least one bus, a method of personalizing the electronic signature device to a user, comprising:
- receiving a digitized biometric signature of the user via the first biometric input device;
- generating a cryptographic key according to a predetermined cryptographic scheme;
- generating a biometric electronic template based on said digitized biometric signature;
- and
- storing said cryptographic key and said biometric electronic template in the memory;
- wherein generating cryptographic keys includes
- generating a prime parameter, a sub-prime parameter, and a base parameter;
- generating a signing private key;
- generating a signing public key based on said prime, sub-prime, and base parameters;
- and
- generating a user public key based on said signing private key and said prime and base parameters;
- and
- further comprising storing said prime, sub-prime, and base parameters, and said signing private and public keys in the memory.
For an electronic signature device comprising a processor, a memory having a biometric electronic template stored therein, a user interface comprising a biometric signature input device, a device interface adapted to interface a computer, and at least one bus operably connected to the processor, the memory, the user interface, and the device interlace, a method of originating an electronically signed transaction, said method comprising:
- verifying whether a user is permitted to originate the electronically signed transaction with the electronic biometric signature device, comprising
- receiving a digitized biometric originator signature via the user interface, and
- comparing said digitized biometric originator signature against the biometric electronic template to produce a first verification result;
- receiving a transaction package through one of the user interface and the device interface;
- combining said transaction package and one of said digitized biometric signature and a digitized biometric user signature extracted from the biometric electronic template to produce an originator biometric signature block;
- generating a cryptographic key;
- encrypting said originator biometric signature block with said cryptographic key to produce an encrypted biometric signature block;
- combining said encrypted biometric signature block and said cryptographic key to produce an electronically signed transaction;
- and
- if the user is verified, providing said electronically signed transaction via the device interface;
- wherein the memory further has a biometric electronic template, a prime parameter, a sub-prime parameter, and a base parameter, user public data comprising a user public key, and a user private key stored therein, wherein generating a cryptographic key includes
- generating an ephemeral private key based on the prime, subprime, and base parameters;
- generating an ephemeral public key based on said ephemeral private key and the prime and base parameters;
- and
- generating a shared encryption key based on said ephemeral public key, the user public key, and the prime parameter;
- wherein the cryptographic key is a shared encryption key;
- and
- wherein said ephemeral private key, the prime parameter, and at least a portion of the user public data are combined with said encrypted biometric signature block and said cryptographic key to produce the electronically signed transaction.
Dependencies are inferred from the claim text.