Authentication with variable biometric templates

• US 20020174347A1
• Filed: 05/17/2002
• Published: 11/21/2002
• Est. Priority Date: 05/18/2001
• Status: Abandoned Application

• Current Assignee: Imprivata Incorporated
• Original Assignee: Imprivata Incorporated
• Inventors: Ting, David M.T.
• Application Number:
  US10/147,946
• Publication Number:
  US 20020174347A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The invention relates to systems and methods for using a template in the authentication process using biometric data. In one embodiment, a module modifies a template of the reference set of biometric data with the candidate set of biometric data when the user is authenticated. In another embodiment, a module modifies a copy of the template of the reference biometric data with modification data thereby creating a challenge template. The client compares the challenge template to a candidate set of biometric data thereby creating a response vector. A module authenticates the user based on the response vector and the modification data.

Claims

1. A method for authentication using biometrics, the method comprising:

receiving an authentication request requesting authentication of a user;

receiving a first set of biometric data from the user;

comparing the first set of biometric data with a second set of biometric data in storage; and

if the second set of biometric data sufficiently matches the first set of biometric data, modifying the second set of biometric data in storage based at least in part on the first set of biometric data.

2. The method of claim 1 wherein the modifying step comprises, if the second set of biometric data sufficiently matches the first set of biometric data, replacing the second set of biometric data in storage with the first set of biometric data.

3. The method of claim 1 wherein the modifying step further comprises:

identifying one or more features in the first set of biometric data;

matching at least a portion of the one or more features in the second set of biometric data; and

augmenting the second set of biometric data with the first set of biometric data based at least in part on the matched features.

4. The method of claim 3 wherein the augmenting step further comprises augmenting the second set of biometric data with features from the first set of biometric data not presently included in the second set of biometric data.

5. The method of claim 3 wherein the augmenting step further comprises augmenting statistical data associated with the second set of biometric data based at least in part on the first set of biometric data.

6. The method of claim 5 wherein the step of augmenting statistical data further comprises increasing the weighting of the matched features.

7. The method of claim 1 further comprising normalizing the first set of biometric data.

8. The method of claim 1 further comprising filtering the first set of biometric data.

9. The method of claim 1 further comprising extracting from the first set of biometric data identifying features.

10. The method of claim 1 wherein the second set of biometric data is stored in a supertemplate.

11. A system for authentication using biometrics, the system comprising:

a network interface module configured to receive an authentication request requesting authentication of a user and to receive a first set of biometric data from the user;

a storage module configured to store a second set of biometric data;

an authentication module configured to compare the first set of biometric data with the second set of biometric data in storage; and

an augmentor module configured to modify the second set of biometric data in storage based at least in part on the first set of biometric data if the second set of biometric data sufficiently matches the first set of biometric data.

12. The system of claim 11 wherein the augmentor module is further configured to replace the second set of biometric data in storage with the first set of biometric data if the second set of biometric data sufficiently matches the first set of biometric data.

13. The system of claim 11 wherein the augmentor module is further configured i) to identify one or more features in the first set of biometric data, ii) to match at least a portion of the one or more features in the second set of biometric data and iii) to augment the second set of biometric data with the first set of biometric data based at least in part on the matched features.

14. The system of claim 13 wherein the augmentor module is further configured to augment the second set of biometric data with features from the first set of biometric data not presently included in the second set of biometric data.

15. The system of claim 13 wherein the augmentor module is further configured to augment statistical data associated with the second set of biometric data based at least in part on the first set of biometric data.

16. The system of claim 15 wherein the augmentor module is further configured to increase the weighting of the matched features.

17. The system of claim 11 further comprising a normalizer module configured to normalize the first set of biometric data.

19. The system of claim 11 further comprising an extractor module configured to extract from the first set of biometric data identifying features.

20. The system of claim 11 wherein the second set of biometric data is stored in a supertemplate.

18. The system of claim 111 further comprising a filter module configured to filter the first set of biometric data.

21. An article of manufacture having computer-readable program portions embodied therein for authentication using biometrics, the article comprising:

a computer-readable program portion for receiving an authentication request requesting authentication of a user;

a computer-readable program portion for receiving a first set of biometric data from the user;

a computer-readable program portion for comparing the first set of biometric data with a second set of biometric data in storage; and

a computer-readable program portion for modifying the second set of biometric data in storage based at least in part on the first set of biometric data if the second set of biometric data sufficiently matches the first set of biometric data.

22. The article of claim 21 wherein the modifying step further comprises:

a computer-readable program portion for identifying one or more features in the first set of biometric data;

a computer-readable program portion for matching at least a portion of the one or more features in the second set of biometric data; and

a computer-readable program portion for augmenting the second set of biometric data with the first set of biometric data based at least in part on the matched features.