Method and apparatus for accessing digital data using biometric information

• US 20060282680A1
• Filed: 06/14/2005
• Published: 12/14/2006
• Est. Priority Date: 06/14/2005
• Status: Abandoned Application

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Inventors: Dabbish, Ezzat A., Vogler, Dean H., Messerges, Thomas S., Kuhlman, Douglas A.
• Application Number:
  US11/152,607
• Publication Number:
  US 20060282680A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A method and system for registering a user device in a domain of a domain authority (106) using biometric information is provided. The method includes sending (402) a request (by the user device) to the domain authority for joining the domain. The user device making the request is then authenticated (400) and the biometric information of the user is then requested (406). Further, the method includes authenticating (412) the biometric information of the user. The security information of the domain is transferred (414) to the user device once the authentication of the user device and the biometric information are both successful.

Claims

1. A method for registering a first user device in a domain of a domain authority, the first user device being used by a user for accessing digital data of the domain, the method comprising:

sending a request to join the domain, wherein the request is sent by the first user device to the domain authority;

submitting authentication information of the first user device making the request;

requesting biometric information of the user;

authenticating the biometric information of the user; and

receiving security information of the domain by the first user device, wherein the security information has been transmitted in response to successful authentication of both the first user device and the biometric information

2. The method according to claim 1, wherein the request for the biometric information is sent by the domain authority to the first user device.

3. The method according to claim 2, wherein the request for the biometric information is authenticated by the first user device.

4. The method according to claim 1, wherein the authentication of the biometric information of the user is performed by the first user device.

5. The method according to claim 1, wherein the authentication of the biometric information of the user is performed by the domain authority.

6. The method according to claim 1, wherein the request for the biometric information is processed by a second user device.

7. The method according to claim 6, wherein the processing by the second user device comprises capturing and authenticating the biometric information of the user.

8. The method according to claim 6, wherein the processing by the second user device comprises capturing the biometric information of the user and sending it to the domain authority.

9. The method according to claim 1, wherein the security information of the domain is not transmitted when the authentication of at least one of the first user device and the biometric information is unsuccessful.

10. The method according to claim 1, wherein the security information of the domain comprises a domain key.

11. The method according to claim 1 further comprising the first user device accessing digital data.

12. The method according to claim 11, wherein the digital data is stored in a communication network in a protected form such that the digital data is only accessible by using the security information of the domain.

13. The method according to claim 12, wherein the digital data is encrypted with a content key.

14. The method according to claim 12, wherein the security information comprises an encrypted content key and a domain key, the domain key being used to decrypt the encrypted content key, which recovers the content key.

15. The method according to claim 1 further comprising:

sending an additional request for verifying the biometric information from the domain authority to the user device; and

un-registering the first user device from the domain authority, wherein the first user device is un-registered from the domain authority when no valid response to the additional request is received at the domain authority from the user or the user device after a time interval.

16. A domain authority for registering one or more user devices in a domain of the domain authority, the user device being registered in the domain to access digital data, the domain authority comprising:

means for authenticating the one or more user devices, the authentication module further verifying the biometric information; and

means for administering that registers the one or more user devices in the domain, wherein each of the one or more user devices is registered only when the user device sending the request for accessing the digital data has been authenticated and the biometric information corresponding to the user has been authenticated.

17. The domain authority according to claim 16, wherein the means for administering registers the one or more user devices in the domain by sending a domain key.

18. A user device for accessing digital data corresponding to one or more domains of one or more domain authorities, the user device comprising:

an access means for sending a request for registering the user device corresponding to the access module and for proving the authenticity of the user device to a domain authority;

a user interface means for accepting biometric information from a user, the biometric information being used for registering the user device in the domain authority; and

a delivery means for delivering the biometric information for authentication,

wherein, in response to the authentication of the biometric information by the domain authority, the user device is registered in the one or more domains, to enable access to the digital data.

19. The user device according to claim 18, wherein the access means receives a domain key from the domain authority, the domain key registering the user device in the domain.

20. The user device according to claim 18, wherein the user device is a wireless communication device.