Fingerprint Cards Ab

Fingerprint Cards Anacatum IP Ab

Steven Pope

Christian Gehrmann

Peter Almers

Anders Østergaard Nielsen

Mark Ruvald Pedersen

Anders ØStergaard Nielsen

The present disclosure generally relates to a method for authenticating a user by means of an electronic device, where the electronic device comprises a first and a second control unit adapted to process a biometric representation from a biometric sensor. Preferably, the second control unit comprises a secure element and/or a secure block adapted to provide a secure processing environment. The present disclosure also relates to a corresponding electronic device and to a computer program product.

Method and electronic device for authenticating a user

Methods and devices for updating biometric template protection keys can include updating at least one stored feature transformation key with which a set of biometric data of a user initially has been transformed at a first client device at which the biometric data of the user was captured and enrolled with a network node, which set of transformed biometric data of the user is stored at a biometric data verification node that does not have access to the feature transformation key. The method comprises generating random data, computing at least one new feature transformation key based on said random data, replacing the at least one stored feature transformation key with the computed at least one new feature transformation key, and transmitting the generated random data to the biometric data verification node, which uses the generated random data to update the at least one set of transformed biometric data.

Updating biometric template protection keys

A method performed by a client device of enrolling biometric data of a user with a network node over a secure communication channel comprises capturing the biometric data, transforming the biometric data into a first set of transformed biometric data using a first feature transformation key, generating a second feature transformation key, and transforming the biometric data into a second set of transformed biometric data using the second feature transformation key. The method further comprises encrypting the first and second set of transformed biometric data with an encryption key, encrypting the second feature transformation key with another encryption key shared with the network node at which the first and second sets of transformed biometric data are to be enrolled, and submitting, to the network node, an enrolment request comprising the encrypted first and second sets of transformed biometric data, the encrypted second feature transformation key, and user profile data.

Two-step central matching

A method performed by a client device of enrolling biometric data of a user with a network node over a secure communication channel comprises capturing the biometric data, transforming the biometric data into a first set of transformed biometric data using a first feature transformation key, generating a second feature transformation key, and transforming the biometric data into a second set of transformed biometric data using the second feature transformation key. The method further comprises encrypting the first and second set of transformed biometric data with an encryption key, encrypting the second feature transformation key with another encryption key shared with the network node at which the first and second sets of transformed biometric data are to be enrolled, and submitting, to the network node, an Enrollment request comprising the encrypted first and second sets of transformed biometric data, the encrypted second feature transformation key, and user profile data.

Growing community of inventors

Holte, Denmark

Steven Pope