Biometric identification network security

• US 20070162739A1
• Filed: 09/29/2006
• Published: 07/12/2007
• Est. Priority Date: 05/21/2002
• Status: Active Grant

• Current Assignee: Bio-Key International Incorporated
• Original Assignee: Bio-Key International Incorporated
• Inventors: LaCous, Mira
• Granted Patent: US 7,415,605 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for regulating user access in the context of a biometric security system are disclosed. One method disclosed includes receiving a remotely transmitted data packet containing an encryption key, utilizing a decryption component to decrypt the data packet, and utilizing the encryption component to encrypt biometric data. Another method disclosed includes utilizing a processor, within a client computing device, to perform an encryption function within a biometric security system, wherein the encryption function is incorporated into an authentication process that involves a transfer of biometric information between the client computing device and a remotely implemented server.

Claims

1. A method for regulating user access in the context of a biometric security system, the method comprising:

receiving a remotely transmitted data packet, the data packet containing an encryption key;

utilizing a decryption component to decrypt the data packet; and

utilizing the encryption key to encrypt biometric data.

2. The method of claim 1 wherein utilizing a decryption component to decrypt the data packet comprises:

obtaining the decryption component from a storage location that is an integrated part of trusted computing components maintained on a client computing device.

3. The method of claim 2 wherein the trusted computing components comprise an integrated processing component, wherein utilizing the decryption component further comprises utilizing the integrated processing component to decrypt the data packet.

4. The method of claim 2 wherein the trusted computing components include an embedded security chip.

5. The method of claim 2 wherein the trusted computing components include implementation of a Trusted Computing Platform (TCP).

6. The method of claim 2 wherein the trusted computing components include implementation of a Trusted Platform Module (TPM).

7. The method of claim 2 wherein utilizing a decryption component to decrypt comprises utilizing a decryption component to decrypt a data packet using a pre-established decryption relationship between a client security system and a remotely deployed authentication module.

8. The method of claim 2 wherein utilizing a decryption component comprises utilizing a private key that is complimentarily related to a public key used to encrypt the data packet.

9. The method of claim 2 wherein the encryption key contained in the data packet is unrelated to the decryption component utilized to decrypt the transmitted data packet.

10. The method of claim 2 wherein the data packet contains session data associated with a user access session initiated within the biometric security system.

11. The method of claim 10 wherein the session data includes a session number.

12. The method of claim 10 wherein the session data includes a time stamp.

13. A method for regulating user access in the context of a biometric security system, the method comprising:

receiving a remotely transmitted data packet; and

encrypting a second data packet utilizing an encryption key contained in the first data packet.

14. The method of claim 13 wherein encrypting comprises encrypting utilizing a processing component that is an integrated part of trusted computing components maintained on a client computing system.

15. The method of claim 14 wherein the trusted computing components include an embedded security chip.

16. The method of claim 14 wherein the trusted computing components include an integrated Trusted Computing Platform (TCP).

17. The method of claim 14 wherein the trusted computing components include an integrated Trusted Platform Module (TPM).

18. A method for regulating user access in the context of a biometric security system, the method comprising:

providing, within a client computing device, a processor that is implemented as part of a trusted computing environment; and

utilizing the processor to perform an encryption function within the biometric security system, wherein the encryption function is incorporated into an authentication process that involves a transfer of biometric information between the client computing device and a remotely implemented server.

19. The method of claim 18, wherein utilizing the processor comprises utilizing the processor to decrypt a remotely transmitted data packet that contains an encryption key.

20. The method of claim 18, wherein utilizing the processor comprises utilizing the processor to encrypt biometric data.

21. The method of claim 18, wherein utilizing the processor comprises utilizing the processor to store an encryption component utilized to decrypt a remotely transmitted data packet.