Koninklijke Philips Corporation N.v.

Genkey Netherlands B.v.

Nxp B.v.

Nuance Communications, Inc.

Priv Id B.v.

Thomas Andreas Maria Kevenaar

Antonius Hermanus Maria Akkermans

Alphons Antonius Maria Lambertus Bruekers

Aweke Negash Lemma

Pim Theo Tuyls

Minne Van Der Veen

Dirk Jeroen Breebaart

Geert Jan Schrijen

Franciscus Lucas Antonius Johannes Kamperman

Robertus Adrianus Maria Wolters

Koen Theo Johan De Groot

Petra Elisabeth De Jongh

Franciscus Maria Joannes Willems

Bahaa Eddine Sarroukh

Emile Josephus Carlos Kelkboom

Sabri Boughorbel

Joseph Gerard Hubert Strous

Berk Gokberk

Bart Johan Hendrikus Bouwman

The present invention relates to a system and a method of verifying the identity of an individual by employing biometric data associated with the individual (), wherein privacy of said biometric data (X, Y) is provided. A helper data scheme (HDS) is employed to provide privacy of the biometric data. The present invention is advantageous for number of reasons. First, processing of security sensitive information is performed in a secure, tamper-proof environment () which is trusted by the individual. This processing, combined with utilization of a helper data scheme, enables set up of a biometric system where the biometric template is available in electronic form only in the secure environment. Moreover, electronic copies of the biometric templates are not available in the secure environment permanently, but only when the individual offers her template to the sensor.

Architectures for privacy protection of biometric templates

The invention relates to a system for verifying the identity of an individual by employing biometric data features associated with the individual, which system comprises at least one or more hardware components, an enrollment means, and a verifying means, wherein said enrollment means are arranged in deriving a first biometric template data, said first biometric template data being secret and associated with a first set of first biometric data features of said individual, and in receiving a further set of first biometric data features of said individual, and in deriving a further biometric template data associated with said further set of first biometric data, and wherein said verifying means are arranged in comparing the first biometric template data with the further biometric template data to check for correspondence, wherein the identity of the individual is verified if correspondence exists. The invention aims to provide a solution to the above identified drawbacks and thereto at least one of said hardware components is provided with at least one component specific data feature associated therewith and wherein said enrollment means are arranged in associating at least one of said component specific data features with said biometric template data.

System and method for verifying the identity of an individual by employing biometric data features associated with the individual

The invention relates to a method for generating a representation of a finger print minutiae information. The invention also relates to a method for generating a representation of a finger print for biometric template protection purposes Biometric template protection techniques provide technological means to protect the privacy of biometric reference information stored in biometric. systems These methods stand in sharp contrast to approaches where biometric information is protected only by legislation and procedures around storage facilities. These systems are not reliable as they are susceptible to human and procedural errors. Template protection guarantees the protection of biometric information without the assumption that individuals are trusted or procedures are properly implemented.

Method and system for generating a representation of a finger print minutiae information

An efficient solution for secure implementation of indirect addressing (IA) is described. IA may be used, for example, in networks of which the routing algorithms are not capable of multicast but also contain very constrained devices that, although requiring multicast, are not capable of repeated unicast. This ID is useful in wireless networks containing low-power low-cost devices.

Secure indirect addressing

The invention relates to a method for verifying the identity of an individual by employing biometric data features associated with the individual, which method provides privacy of said biometric data features, comprising at least the steps of: a) for enrollment purposes deriving a first biometric template from at least a first set of first biometric data features associated with said individual, and b) for identity verifying purposes deriving a further biometric template from at least a further set of said first biometric data features associated with said individual, and c) comparing said further biometric template with said first biometric template. The invention also relates to a system for verifying the identity of an individual by employing biometric data features associated with the individual, which system at least comprises: an enrollment means and a verifying means, wherein said enrollment means are arranged in deriving a first biometric template data, said first biometric template data being secret and associated with a first set of first biometric data features of said individual, and in receiving a further set of first biometric data features of said individual, and in deriving a further biometric template data associated with said further set of first biometric data, and wherein said verifying means are arranged in comparing the first biometric template data with the further biometric template data to check for correspondence, wherein the identity of the individual is verified if correspondence exists.

Method and system for verifying the identity of an individual by employing biometric data features associated with the individual

This invention relates to physical uncloneable function (PUF) devices for determining authenticity of an item, systems for determining authenticity of a physical item, and methods for determining authenticity of an item. A PUF pattern of the PUF device is damaged when using the item for the first time.

Device, system and method for determining authenticity of an item

The invention relates to localizing the position of a person speaking by using pictures of a pattern () on an object () worn by the person. The object () carries a complex pattern () that is optimized for determining the orientation of the object (), the distance from the object to a microphone device () and/or to a camera (). Moreover, the pattern () may be arranged for identifying the person carrying the object (). The determination of the position of the person carrying the object () may be used to enhance speech recognition (SR) and/or to provide hands-free voice control of devices (DC), e.g. in hospitals or in industrial settings.

Localizing the position of a source of a voice signal

A basic idea of the present invention is to selectively employ one of at least two different feature extraction processes when generating a biometric template of an individual. An individual offers a physiological property, such as a fingerprint, an iris, an ear, a face, etc., from which biometric data can be derived, to a sensor of an enrollment authority. In the following, the property to be discussed will be fingerprints, even though any suitable biometric property may be used. From the fingerprint, a positional reference point of the biometric data is derived. The derivation of the positional reference point may be accomplished using any appropriate method out of a number of known methods. Such a reference point could be the location of a core, a delta, a weighted average of minutiae coordinates, or alike. Typically, the reference point includes a core of a fingerprint expressed as a three-dimensional coordinate denoted by means of x, y, and angle &#x3b1;. A contribution indicator is calculated for the derived positional reference point, and it is determined whether the derived positional reference point can be considered reliable. Depending on the reliability of the derived reference point, one of the two different feature extraction processes is selected; either the first feature set is extracted using a method which is invariant of the derived reference point, or a method is used taking into account the derived reference point. The better the estimation of the reference point is, the more reliable the reference point-dependent extraction method is. Finally, the biometric template is generated using the extracted first feature set.

Robust biometric feature extraction with and without reference point

There is provided an authentication method for a system () comprising several devices (). The method involves: a) providing each device () with an identity value (pi: i=1, . . . , n) and a polynomial (P) for generating a polynomial key; (b) including a verifier device (p) and a prover device (P)amongst said devices (); (c) arranging for the prover device (p) to notify its existence to the verifier device (P); (d) arranging for the verifier device (p) to challenge the prover device (p) to encrypt a nonce using the prover (P)device's polynomial (P) key and communicate the encrypted nonce as a response to the verifier device (p); (e) arranging for the verifier device (p) to receive the encrypted nonce as a further challenge from the prover device (p) and: (i ) encrypt the challenge using the polynomial keys generated from a set of stored device identities; or (ii) decrypt the challenge received using the set of polynomial keys; until said verifier device (p) identifies an authentication match.

Method of authentication based on polyomials

A method for configuring a biometric template protected authentication system wherein the desired classification threshold is first selected to optimize the trade-off between a false accept (FAR) and a false non match or reject rate (FRR) of the system, and then an error correcting code (ECC) used in the authentication process is chosen such that the number of errors which can be corrected is equal to or greater than the selected classification threshold. During authentication, the number of errors in a first codeword derived from biometric data associated with a physical object is determined and used in the decision process to accept or reject authentication.

Defining classification thresholds in template protection systems

The invention provides a method for authenticating a physical object (OBJ) using a first helper data (W) and a first control value (V) associated with a reference object. The method comprises a step to generate a first property set (S) using a noise compensating mapping (NCM) on information derived from the first helper data (W) and a metric data (Y) associated with the physical object, and a step to establish a sufficient match between the physical object and the reference object using the first property set (S) and the first control value (V). The method further comprises a step to generate an update data (WUPD) for updating the first helper data (W) using the first helper data (W), the first property set (S) and the metric data (Y). Also provided is a client terminal configured to carry out the method.

Template renewal in helper data systems

Data is transmitted using a layered communication model. In a first layer of the model, a first communication fragment is generated. The first fragment includes a first address reference referring to a first entity. In a second layer of the model, below the first layer, a second communication fragment is generated based on the first communication fragment. The second communication fragment includes a second address reference referring to a second entity which is related to the first entity. The first address reference is at least partially removed from the data to be transmitted. Then the data including the second communication fragment is transmitted.

Overhead reduction and address protection in communication stack

The invention relates to a method of authentication of a physical object and an apparatus applying said method. The method uses a helper data (W) and a control value (V) associated with a reference object to generate a first property set (C) using the helper data (W) and a metric (Y) associated with the physical object. It further comprises a step to generate a second property set (S) using a noise compensating mapping (NCM) on the first property set (C), as well as a step to establish a sufficient match between the physical object and the reference object using the second property set (S) and the first control value (V). The method is characterized by a step that generates an error measure (ERR) by quantifying the noise removed by the noise compensating mapping (NCM) using the first property set (C) and information derived from the noise compensating mapping (NCM). Error measure (ERR) is subsequently used for generating an authentication decision (D). Also provided is an apparatus configured to carry out the method.

Shaping classification boundaries in template protection systems

The present invention relates to a method and a system of determining correspondence between location sets. A basic idea of the present invention is to provide a scheme in which correspondence between location sets is determined. A feature location set (X) comprising a number (n+1) of components is transformed into a feature vector that can be used in an HDS. Therefore, a feature density function (&#x192;(x)) is created. A feature vector (X) for the HDS is chosen to be a sampled version of the feature density function (&#x192;(x) ), which results in feature vectors of equal and finite dimensions regardless of the number (n+1) of features that are present in the biometric template Xfrom which the location sets is derived. Thereafter, a distance (d) between two feature location sets (X, Y) is determined. The distance (d) between the sets is chosen to be the Euclidian distance between the corresponding feature density functions.

Growing community of inventors

Eindhoven, Netherlands

Thomas Andreas Maria Kevenaar