# US 9,438,589 B2 · Binding a digital file to a person's identity using biometrics > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,438,589 B2 - Document ID: US9438589B2 - Status: Granted - Kind: B2 - Application number: 14/245,584 - Filed: 2014-04-04 - Published: 2015-06-18 - Granted: 2016-09-06 - Earliest claimed: 2012-04-19 - Applicants: Martin Tomlinson; Cen Jung Tjhai; Andersen Cheng - Inventors: Martin Tomlinson; Cen Jung Tjhai; Andersen Cheng - Web page: https://patentgrep.com/patent/US9438589B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/3247: {involving digital signatures} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/123: {received data contents, e.g. message integrity} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method and system are described for authenticating one or more digital files in which a feature, characteristic or a portion of the contents of said files is implanted into one or more biometric information files, which are electronically recorded and transmitted and in which the identity of the originator or a trusted third party and all or part of the feature, characteristic or a portion of the contents of said files is determined from said biometric information files. ## Claims ### Claim 1 A method of authenticating a digital data file associated with an originator of the digital data file, the method comprising: deriving information from at least a portion of the digital data file using a predefined function; generating authentication data providing an irrevocable binding of the digital data file to at least one biometric characteristic of the associated originator, by: prompting the originator to record biometric input of the derived information; and capturing audio and/or image data of the biometric input of the derived information by the originator in response to the prompting, wherein the derived information is implanted into the captured audio and/or image data; and transmitting, over a data network, the digital data file and the associated generated authentication data to a recipient, whereby the implanted information and the at least one biometric characteristic of the associated originator are verified from an output of the generated authentication data, wherein the derived information comprises encoded data derived from the digital data file using a codebook look up table, where a symbol or sequence of symbols is used to describe said content. ### Claim 2 (depends on 1) A method according to claim 1, wherein the authentication data comprises one or more captured images of a person communicating said derived information. ### Claim 3 (depends on 1) A method according to claim 1, wherein said digital data file is a public encryption key, and wherein a defined portion of said public encryption key is implanted into said authentication data. ### Claim 4 (depends on 3) A method according to claim 3, further comprising verifying the implanted portion of the public encryption key and the identity of the originator associated with the public encryption key from said received authentication data, before allowing encryption of data using said received public encryption key. ### Claim 5 (depends on 4) A method according to claim 4, wherein the encrypted data comprises electronic data messages transmitted between respective messaging applications of host devices. ### Claim 6 (depends on 5) A method according to claim 5, wherein the authentication data is generated using a microphone and/or camera of the host device to record the derived information. ### Claim 7 (depends on 1) A method according to claim 1, wherein the authentication data is stored in a server for retrieval by the recipient of the associated digital data file. ### Claim 8 (depends on 1) A method according to claim 1, wherein said digital data file comprises the authentication data used for authentication, to form a nested authentication arrangement whereby successive trusted third parties provide authentication data which may be used to provide additional authentication. ### Claim 9 (depends on 1) A method according to claim 1, further comprising masking the identity of an entity transmitting an electronic data message to a receiving entity, by: generating a random identifier for the transmitting entity; linking the random identifier to associated authentication data for the transmitting entity; transmitting a data message to the receiving entity, the data message including the random identifier; displaying the received encrypted data message and the associated random identifier; and outputting the authentication data associated with the random identifier, from which the identity of the transmitting entity is determined. ### Claim 10 (depends on 9) The method of claim 9, wherein the authentication data is retrieved from a remote server. ### Claim 11 (depends on 10) The method of claim 10, wherein the transmitted data message is a data message encrypted using the receiving entity's public key, and wherein the authentication data is generated by the transmitting entity implanting at least a portion of the public key into the authentication data. ### Claim 12 (depends on 1) A method according to claim 1, wherein the derived information is communicated to the recipient indirectly, by encrypting or obfuscating the derived information, and capturing audio and/or image data of the biometric input of the encrypted or obfuscated information. ### Claim 13 (depends on 12) A method according to claim 12, wherein the derived information is implanted into the authentication data by enunciating or writing said derived information, or by hand or body gestures representative of said derived information. ### Claim 14 A system for authenticating a digital data file associated with an originator of the digital data file, the system comprising at least one hardware processor which executes: a deriving unit configured to derive information from at least a portion of the digital data file using a predefined function; a generating unit configured to generate authentication data providing an irrevocable binding of the digital data file to at least one biometric characteristic of the associated originator, by: prompting the originator to record biometric input of the derived information; and capturing audio and/or image data of the biometric input of the derived information by the originator in response to the prompting, wherein the derived information is implanted into the captured audio and/or image data; and a transmitting unit configured to transmit, over a data network, the digital data file and the associated generated authentication data to a recipient, whereby the implanted information and the at least one biometric characteristic of the associated originator are verified from an output of the generated authentication data, wherein the derived information comprises encoded data derived from the digital data file using a codebook look up table, where a symbol or sequence of symbols is used to describe said content. ### Claim 15 A non-transitive computer-readable storage medium storing computer-executable instructions to perform a method of: deriving information from at least a portion of a digital data file using a predefined function; generating authentication data providing an irrevocable binding of the digital data file to at least one biometric characteristic of an associated originator of the digital data file, by: prompting the originator to record biometric input of the derived information; and capturing audio and/or image data of the biometric input of the derived information by the originator in response to the prompting, wherein the derived information is implanted into the captured audio and/or image data; and transmitting, over a data network, the digital data file and the associated generated authentication data to a recipient, whereby the implanted information and the at least one biometric characteristic of the associated originator are verified from an output of the generated authentication data, wherein the derived information comprises encoded data derived from the digital data file using a codebook look up table, where a symbol or sequence of symbols is used to describe said content.