Universal enrollment using biometric PKI

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors, cause the one or more processors to:
• obtain identification information for a user for obtaining a form of access using universal enrollment;
• generate a public key, private key pair based on at least one of a shared secret method or a shared secret key;
• obtain, based on generating the public key, private key pair, a digital certificate associated with the identification information,
• the digital certificate including a public key of the public key, private key pair,
• the public key and a private key of the public key, private key pair are generated using elliptical curve cryptography based on a first template of first biometric information of the user obtained during the universal enrollment, and
• the digital certificate comprising:
• sensor information, and
• information related to the elliptical curve cryptography;
• obtain second biometric information of the user,
• the sensor information is used when obtaining the second biometric information, and
• the second biometric information is used to provide authentication for obtaining the form of access;
• create a second template based on the second biometric information;
• generate an elliptical curve based on the information related to the elliptical curve cryptography from the digital certificate;
• identify at least one overlapping point using the second template and the elliptical curve;
• generate a second private key using the elliptical curve cryptography based on the at least one overlapping point;
• determine whether information of the second private key corresponds to information of the public key included in the digital certificate;
• and
• provide the form of access based on information of the second private key corresponding to information of the public key included in the digital certificate,
• the second private key is a recreation of the private key.

A method comprising:

• obtaining, by a device, identification information for a user for obtaining a form of access using universal enrollment;
• generating, by the device, a public key, private key pair based on at least one of a shared secret method or a shared secret key;
• obtaining, by the device and based on generating the public key, private key pair, a digital certificate associated with the identification information based on the identification information matching stored identification information,
• the digital certificate including a public key of the public key, private key pair,
• the public key and a private key of the public key, private key pair are generated using elliptical curve cryptography based on a first template of first biometric information of the user obtained during the universal enrollment, and
• the digital certificate comprising:
• sensor information, and
• information related to the elliptical curve cryptography;
• obtaining, by the device, second biometric information from the user,
• the sensor information is used when obtaining the second biometric information, and
• the second biometric information is used to provide authentication for obtaining the form of access;
• creating, by the device, a second template based on the second biometric information;
• generating, by the device, an elliptical curve based on the information related to the elliptical curve cryptography from the digital certificate;
• identifying, by the device, at least one overlapping point using the second template and the elliptical curve;
• generating, by the device, a second private key using the elliptical curve cryptography based on the at least one overlapping point;
• determining, by the device, whether information of the second private key corresponds to information of the public key included in the digital certificate;
• and
• providing, by the device, the form of access based on information of the second private key corresponding to information of the public key included in the digital certificate.