Authorized anonymous authentication

• US 20050060556A1
• Filed: 12/31/2003
• Published: 03/17/2005
• Est. Priority Date: 12/31/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jonas, Jeffrey J.
• Granted Patent: US 7,702,919 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method, program and system for processing data is disclosed. The method, program and system comprising the steps of: (a) receiving (e.g., during an enrollment process) a first biometric data and a first personal key, (b) processing the first biometric data and the first personal key through an irreversible cryptographic algorithm, sometimes after: (i) generating one or more variants from the first biometric data, (ii) processing the first personal key through a reversible cryptographic algorithm, and (iii) adding salt to the first biometric data or first personal key, (c) receiving (e.g., during an authentication process) a second biometric data and a second personal key, (d) processing the second biometric data and the second personal key through the irreversible cryptographic algorithm, (e) comparing the second processed data to the first processed data, and (f) generating a signal pertaining to the comparison of the second processed data to the first processed data, such as: (i) a confirmation reflecting authentication when the second processed data matches the first processed data (sometimes allowing access to a facility or system) or (ii) a denial reflecting no confirmation when the second processed data does not match the first processed data.

Claims

1. A method for processing data comprising:

receiving a first biometric data and a first personal key;

processing the first biometric data and the first personal key through an irreversible cryptographic algorithm to form a first processed data;

receiving a second biometric data and a second personal key;

processing the second biometric data and the second personal key through the irreversible cryptographic algorithm to form a second processed data;

comparing the second processed data to the first processed data; and

generating a signal pertaining to the comparison of the second processed data to the first processed data.

2. The method of claim 1 further comprising generating a first variant from the first biometric data prior to processing the first biometric data and the first personal key through the irreversible cryptographic algorithm.

3. The method of claim 1 further comprising generating a second variant from the second biometric data prior to processing the second biometric data and the second personal key through the irreversible cryptographic algorithm.

4. The method of claim 1 further comprising processing the first biometric data through a secondary irreversible cryptographic algorithm prior to processing the first biometric data and the second biometric data through the irreversible cryptographic algorithm.

5. The method of claim 1 further comprising adding salt to the first biometric data and the first personal key.

6. The method of claim 1 further comprising processing the first personal key through a cryptographic algorithm prior to processing the first biometric data and the first personal key through the irreversible cryptographic algorithm.

7. The method of claim 1 further comprising associating a first primary key to the first processed data.

8. The method of claim 1 further comprising associating a second primary key to the second processed data.

9. The method of claim 1 wherein receiving the first biometric data and the first personal key occurs during an enrollment process.

10. The method of claim 1 wherein receiving the second biometric data and the second personal key occurs during an authentication process.

11. The method of claim 1 wherein generating a signal includes issuing a confirmation signal when the second processed data matches the first processed data.

12. The method of claim 11 wherein issuing a confirmation signal allows access to a facility.

13. The method of claim 11 wherein issuing a confirmation signal allows access to a system.

14. The method of claim 1 wherein generating a signal includes issuing a rejection signal when the second processed data does not match the first processed data.

15. The method of claim 1 further comprising storing the first processed data in a database.

16. The method of claim 15 wherein the database includes a plurality of first processed data.

17. A method for processing data comprising:

receiving biometric data and a personal key;

processing the biometric data and the personal key through an irreversible cryptographic algorithm to form a processed data; and

comparing the processed data to secondary data.

18. The method of claim 17 further comprising generating a variant from the biometric data prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

19. The method of claim 17 further comprising processing the biometric data through a secondary irreversible cryptographic algorithm prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

20. The method of claim 17 further comprising adding salt to the biometric data and the personal key prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

21. The method of claim 17 wherein receiving the biometric data and the personal key occurs during an authentication process.

22. The method of claim 17 further comprising associating a primary key with the biometric data and the personal key.

23. The method of claim 17 wherein the secondary data includes a secondary biometric data and a secondary personal key.

24. The method of claim 23 wherein the secondary biometric data and the secondary personal key is received during an enrollment process.

25. The method of claim 17 further comprising generating a signal corresponding to the comparison of the processed data to the secondary data.

26. The method of claim 25 wherein generating a signal includes issuing a confirmation message when the processed data matches at least a portion of secondary data.

27. The method of claim 25 wherein generating a signal includes issuing a denial message when the processed data does not match at least a portion of secondary data.

28. The method of claim 25 wherein generating a signal allows entry into a facility when the processed data matches the secondary data.

29. The method of claim 25 wherein generating a signal allows entry into a system when the processed data matches the secondary data.

30. For a system for processing data and a computer readable medium containing program instructions for execution by a computer for performing the method for processing data comprising:

receiving a first biometric data and a first personal key;

processing the first biometric data and the first personal key through an irreversible cryptographic algorithm to form a first processed data;

receiving a second biometric data and a second personal key;

processing the second biometric data and the second personal key through the irreversible cryptographic algorithm to form a second processed data;

comparing the second processed data to the first processed data; and

generating a signal pertaining to the comparison of the second processed data to the first processed data.

31. The computer readable medium for performing the method of claim 30 further comprising generating a first variant from the first biometric data prior to processing the first biometric data and the first personal key through the irreversible cryptographic algorithm.

32. The computer readable medium for performing the method of claim 30 further comprising generating a second variant from the second biometric data prior to processing the second biometric data and the second personal key through the irreversible cryptographic algorithm.

33. The computer readable medium for performing the method of claim 30 further comprising processing the first biometric data through a secondary irreversible cryptographic algorithm prior to processing the first biometric data and the second biometric data through the irreversible cryptographic algorithm.

34. The computer readable medium for performing the method of claim 30 further comprising adding salt to the first biometric data and the first personal key prior to processing the first biometric data and the second biometric data through the irreversible cryptographic algorithm.

35. The computer readable medium for performing the method of claim 30 further comprising processing the first personal key through a reversible cryptographic algorithm prior to processing the first biometric data and the first personal key through the irreversible cryptographic algorithm.

36. The computer readable medium for performing the method of claim 30 further comprising associating a first primary key to the first processed data.

37. The computer readable medium for performing the method of claim 30 further comprising associating a second primary key to the second processed data.

38. The computer readable medium for performing the method of claim 30 wherein receiving the first biometric data and the first personal key occurs during an enrollment process.

39. The computer readable medium for performing the method of claim 30 wherein receiving the second biometric data and the second personal key occurs during an authentication process.

40. The computer readable medium for performing the method of claim 30 wherein generating a signal includes issuing a confirmation signal when the second processed data matches the first processed data.

41. The computer readable medium for performing the method of claim 40 wherein issuing a confirmation signal allows access to a facility.

42. The computer readable medium for performing the method of claim 40 wherein issuing a confirmation signal allows access to a system.

43. The computer readable medium for performing the method of claim 30 wherein generating a signal includes issuing a rejection signal when the second processed data does not match the first processed data.

44. The computer readable medium for performing the method of claim 30 further comprising storing the first processed data in a database.

45. The computer readable medium for performing the method of claim 44 wherein the database includes a plurality of first processed data.

46. For a system for processing data and a computer readable medium containing program instructions for execution by a computer for performing the method for processing data comprising:

receiving biometric data and a personal key;

processing the biometric data and the personal key through an irreversible cryptographic algorithm to form a processed data; and

comparing the processed data to secondary data.

47. The computer readable medium for performing the method of claim 46 further comprising generating a variant from the biometric data prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

48. The computer readable medium for performing the method of claim 46 further comprising processing the biometric data through a secondary irreversible cryptographic algorithm prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

49. The computer readable medium for performing the method of claim 46 further comprising adding salt to the biometric data and the personal key prior to processing the biometric data and the personal key through the irreversible cryptographic algorithm.

50. The computer readable medium for performing the method of claim 46 wherein receiving the biometric data and the personal key occurs during an authentication process.

51. The computer readable medium for performing the method of claim 46 further comprising associating a primary key with the biometric data and the personal key.

52. The computer readable medium for performing the method of claim 46 wherein the secondary data includes a secondary biometric data and a secondary personal key.

53. The computer readable medium for performing the method of claim 52 wherein the secondary biometric data and the secondary personal key is received during an enrollment process.

54. The computer readable medium for performing the method of claim 46 further comprising generating a signal corresponding to the comparison of the processed data to the secondary data.

55. The computer readable medium for performing the method of claim 54 wherein generating a signal includes issuing a confirmation message when the processed data matches at least a portion of secondary data.

56. The computer readable medium for performing the method of claim 54 wherein generating a signal includes issuing a denial message when the processed data does not match at least a portion of secondary data.

57. The computer readable medium for performing the method of claim 54 wherein generating a signal allows entry into a facility when the processed data matches the secondary data.

58. The computer readable medium for performing the method of claim 54 wherein generating a signal allows entry into a system when the processed data matches the secondary data.