Method of using biometric information for secret generation

• US 20040148509A1
• Filed: 03/16/2004
• Published: 07/29/2004
• Est. Priority Date: 03/23/2001
• Status: Abandoned Application

• Current Assignee: Agency For Science Technology and Research
• Original Assignee: Agency For Science Technology and Research
• Inventors: Wu, Yong Dong
• Application Number:
  US10/472,696
• Publication Number:
  US 20040148509A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A method and system that generates a secret from individual'"'"'s biometric information, such as voice, handwriting and fingeprint. It extracts a feature vector from the captured biometric data. The feature vector is then transformed into a codewood, and the codeword is used to construct the secret. A one-way hash of the secret is stored. Only if a user generates a new secret that has the same hash value as that stored will the user be confirmed. To keep pace with the gradual change of the measured biometric features, the a secret can be updated adaptively. The secret may be an encryption key.

Claims

1. A method for generating a secret from biometric data obtained of and from a user, the method including the steps of:

(a) extracting a feature vector from the biometric data;

(b) extracting from the biometric data a mean vector of the biometric data and a variance vector after the feature vector is extracted; and

(c) generating a codeword from the mean vector and a random vector; and

(d) generating the secret from the codeword.

2. A method as claimed in claim 1, wherein the codeword is first mapped into an integer.

3. A method as claimed in claim 2 wherein the random vector is generated with all components of the random vector being random.

4. A method as claimed in claim 1, wherein the codeword may be in a codebook, the codebook being determined from the variance vector.

5. A method as claimed in claim 1, wherein the codeword is obtained from the difference between the mean vector and the random vector.

6. A method as claimed in claim 2, wherein the mapping of the codeword is by calculating the hash value of the codeword.

7. A method as claimed in claim 2, wherein the integer is used to generate the secret.

8. A method as claimed in claim 7, wherein the generation of the secret is by generating the hash value of the integer.

9. A method as claimed in claim 1, wherein a one-way hash of the secret is stored in a database.

10. A method as claimed in claim 9, wherein the random vector and the variance vector are also stored in the database.

11. A method as claimed in claim 1, wherein the biometric data is captured a plural number of times.

12. A method as claimed in claim 9, wherein the stored one-way hash of the secret is compared to a one-way hash of a new secret obtained from new biometric data captured of and from the user, the new biometric data being obtained for verification of the new secret.

13. A method as claimed in claim, 12, wherein the new secret is generated by extracting a new feature vector from the new biometric data, recovering the random vector, generating a new codeword from the new feature vector and the random vector, and generating the new secret from the new codeword.

14. A method as claimed in claim 13, wherein the new codeword is first mapped into a new integer by calculating a one-way hash of the new codeword.

15. A method as claimed in claim 13, wherein following verification of the new secret, the variance vector and the random vector are recovered from the database, the variance vector recalculated using the variance vector and the new biometric data to form a recalculated variance vector, and a new random vector is generated.

16. A method as claimed in claim 15, wherein the recalculated variance vector and new random vector are stored in stead of the variance vector and random vector respectively.

17. A method as claimed in claim 1, wherein the secret is an encryption key.

18. A computer-readable medium containing program instructions for generating a secret from biometric data obtained of and from a user, including the steps of:

(a) capturing the biometric data;

(b) extracting a feature vector from the biometric data;

(c) extracting from the biometric data a mean vector of the biometric data and a variance vector after the feature vector is extracted;

(d) generating a codeword from the mean vector and a random vector; and

(e) generating the secret from the codeword.

19. A computer-readable medium as claimed in claim 18, wherein the codeword is first mapped into an integer.

20. A computer-readable medium as claimed in claim 19, wherein the random vector is generated with all components of the random vector being random.

21. A computer-readable medium as claimed in claim 18, wherein the codeword is in a codebook, the codebook being determined from the variance vector.

22. A computer-readable medium as claimed in claim 19, wherein the codeword is obtained from the difference between the mean vector and the random vector.

23. A computer-readable medium as claimed in claim 19, wherein the mapping of the codeword is by calculating the hash value of the codeword.

24. A computer-readable medium as claimed in claim 19, wherein the integer is used to generate the secret.

25. A computer-readable medium as claimed in claim 24, wherein the generation of the secret is by generating the hash value of the integer.

26. A computer-readable medium as claimed in claim 18, wherein a one-way hash of the secret is stored in a database.

27. A computer-readable medium as claimed in claim 26, wherein the random vector and the variance vector are also stored in the database.

28. A computer-readable medium as claimed in claim 18, wherein the biometric data is captured a plural number of times.

29. A computer-readable medium as claimed in claim 26, wherein the stored one-way hash of the secret is compared to a one-way hash of a new secret obtained from new biometric data captured of and from the user, the new biometric data being obtained for verification of the new secret.

30. A computer-readable medium as claimed in claim 29, wherein the new secret is generated by extracting a new feature vector from the new biometric data, recovering the random vector, generating a new codeword from the new feature vector and the random vector, and generating the new secret from the new codeword.

31. A computer-readable medium as claimed in claim 30, wherein the new codeword is first mapped into a new integer by calculating a one-way hash of the new codeword.

32. A computer-readable medium as claimed in claim 29, wherein following verification of the new secret, the variance vector and the random vector are recovered from the database, the variance vector recalculated using the variance vector and the new biometric data to form a recalculated variance vector, and a new random vector is generated.

33. A computer-readable medium as claimed in claim 30, wherein the recalculated variance vector and new random vector are stored in the database in stead of the variance vector and random vector respectively.

34. A computer-readable medium as claimed in claim 18, wherein the secret is an encryption key.