Method and system for providing password-free, hardware-rooted, asic-based, authentication of human to a stand-alone computing device using biometrics with a protected local template to release trusted credentials to relying parties

Abstract

Biometric data are obtained from a biometric sensor on a stand-alone computing device, which may contain an ASIC, connected to or incorporated within it. The computing device and ASIC, in combination or individually, capture biometric samples, extract biometric features and match them to a locally stored, encrypted template. For extra security, the biometric matching may be enhanced by the use of an entered PIN. The biometric template and other sensitive data are encrypted using hardware elements of the computing device and ASIC, together with a PIN hash. A stored obfuscated Password is de-obfuscated and may be released to the authentication mechanism in response to a successfully decrypted template and matching biometric sample. A different de-obfuscated password may be released to authenticate the user to a remote computer and to encrypt data in transit. This eliminates the need for the user to remember and enter complex passwords on the device.