Biometric authentication method, computer program, authentication server, corresponding terminal and portable object

A non-transitory medium that can be read by computer and comprising programming code instructions stored thereon for execution of a biometric authentication method, with an authentication server, of a user to be authenticated, using a portable object comprising at least one biometric sensor, the portable object being adapted to cooperate with a terminal, the method comprising:

• transmitting, by the authentication server, a challenge to the portable object;
• receiving a response from the portable object to the challenge, wherein the response to the challenge includes an encrypted biometric sample, by the authentication server, and
• validating, by the authentication server, the response to the challenge;
• decrypting, by the authentication server, the encrypted biometric sample to obtain the decrypted biometric sample;
• determining, by the authentication server, a signature to be authenticated using the biometric sample, the signature being determined by applying a signature creation algorithm to the biometric sample;
• and
• comparing the signature to be authenticated with a reference signature and thereby authenticating the user without any signature transiting through the terminal or through a communication network and without any biometric sample being directly used in the server for the step of comparing.

An authentication server comprising:

• a memory comprising program code instructions stored thereon;
• and
• a hardware processing unit configured by the program code instructions to execute the following steps:
• biometric authentication of a user to be authenticated using a portable object comprising at least one biometric sensor, the portable object being adapted to cooperate with a reading terminal, wherein biometric authentication includes:
• transmitting a challenge to the portable object;
• receiving a response from the portable object to the challenge, wherein the response to the challenge includes an encrypted biometric sample;
• validating the response to the challenge;
• decrypting the encrypted biometric sample to obtain the biometric sample;
• determining a signature to be authenticated using the biometric sample, the signature being determined by applying a signature creation algorithm to the biometric sample;
• and
• comparing the signature to be authenticated with a reference signature and thereby authenticating the user without any signature transiting through the terminal or through a communication network and without any biometric sample being directly used in the server for comparing.

A reading terminal adapted to receive an encrypted biometric sample from a portable object comprising at least one biometric sensor dedicated to a biometric authentication, with an authentication server, of at least one user to be authenticated, wherein the terminal comprises:

• a memory comprising program code instructions stored thereon;
• and
• a hardware processing unit configured by the program code instructions to execute the following steps:
• receiving a challenge from the authentication server and applying the challenge to the portable object;
• receiving the encrypted biometric sample coming from the user to be authenticated and transmitted by the portable object as a response to the challenge;
• transmitting the encrypted biometric sample to the authentication server via a communication network;
• and
• receiving an authentication decision concerning the user to be authenticated according to a result of a comparison of a signature to be authenticated with a reference signature, the signature to be authenticated being created using a decryption of the biometric sample and applying a signature creation algorithm by the authentication server, the authentication decision being received from the authentication server via the communication network, and thereby authenticating the user without any signature transiting through the terminal or through the communication network and without any biometric sample being directly used in the server for comparing.