Apparatuses, system and method for authentication

The method according to any one of the preceding claims, further comprising the steps, prior to said obtaining candidate biometric data, of

• obtaining said first reference biometric data from a reference individual 101;
• generating said first data item and said second data item using said first reference biometric data;
• storing said first data item on said data carrier (108);
• and
• storing said second data item in said digital storage (106).

An authentication apparatus (118) for authenticating a candidate individual (101′) comprising:

• an authentication biometric reader (112) for obtaining biometric data from a candidate individual (101′);
• a data carrier reader (109) configured to obtain a first data item related to a first reference biometric data from a data carrier (108), wherein any significant part of said first reference biometric data is not readily available from said first data item;
• and
• an authentication controller being configured to:
• obtain a second data item related to said first reference biometric data from digital storage (106), wherein any significant part of said first reference biometric data is not readily available from said second data item;
• work out a second reference biometric data using said first data item and said second data item;
• and
• authenticate said candidate individual (101′) when said candidate biometric data is determined to correspond to said first reference biometric data using said second reference biometric data and said candidate biometric data.

A data carrier issuing apparatus comprising:

• a reference biometric reader configured to obtain first reference biometric data from a reference individual;
• a data carrier writer;
• and
• a reference controller being configured;
• to generate a first data item and a second data item from said first reference biometric data,
• wherein any significant part of said first reference biometric data is not readily available from either of said first data item or said second data item,
• to store said first data item on a data carrier using said data carrier writer;
• and
• to store said second data item in digital storage.

A system (100) for authenticating a candidate individual (101′) comprising:

• digital storage (106),
• a data carrier issuing apparatus (116) comprising:
• a reference biometric reader (102) configured to obtain first reference biometric data from a reference individual (101);
• a data carrier writer;
• and
• a reference controller being configured:
• to generate a first data item and a second data item from said first reference biometric data, wherein any significant part of said first reference biometric data is not readily available from either of said first data item or said second data item,
• to store said first data item on a data carrier (108) using said data carrier writer;
• and
• to store said second data item in said digital storage (106), and
• an authentication apparatus (118) comprising:
• an authentication biometric reader (112) for obtaining biometric data from a candidate individual (101′);
• a data carrier reader (109) configured to obtain said first data item related to said first reference biometric data from said data carrier (108);
• and
• an authentication controller being configured to:
• obtain said second data item related to said first reference biometric data from said digital storage (106);
• work out a second reference biometric data using said first data item and said second data item;
• and
• authenticate said candidate individual (101′) when said candidate biometric data is determined to correspond to said first reference biometric data using said second reference biometric data and said candidate biometric data.