SYSTEM, DEVICE AND METHOD FOR SECURING A DEVICE COMPONENT

• US 20100026451A1
• Filed: 07/22/2009
• Published: 02/04/2010
• Est. Priority Date: 07/22/2008
• Status: Active Grant

• Current Assignee: Synaptics Incorporated
• Original Assignee: Validity Sensors Incorporated (Synaptics Incorporated)
• Inventors: Schwab, Frank, Erhart, Richard Alex
• Granted Patent: US 8,698,594 B2
• Time in Patent Office: Days
• US Class Current: 340/5.530
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/1365 Matching; Classification

Abstract

A novel system, device and method of validation is provided for sensing a biometric such as a fingerprint, where biometric data corresponding to the biometric entity such as a fingerprint is then transmitted to a host configured to perform a plurality of authentication processes to authenticate the biometric data. At least one of the plurality of authentication steps is then validated. Alternatively, a portion of the biometric data may be retained, where biometric data corresponding to the biometric is then transmitted to a host configured to perform a plurality of authentication steps to authenticate the biometric data. At least one of the plurality of authentication steps is then validated.

Claims

1. A method, comprising:

sensing a fingerprint;

transmitting fingerprint data corresponding to the fingerprint to a host configured to perform a plurality of authentication steps to authenticate the fingerprint data; and

validating at least one of the plurality of authentication steps.

2. The method of claim 1, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

3. The method of claim 2, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

4. The method of claim 3, wherein the extracted swipe template includes a series of minutiae.

5. The method of claim 3, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

6. The method of claim 5, further comprising:

encrypting the enrollment template during an enrollment process; and

decrypting the enrollment template.

7. The method of claim 5, wherein validating includes receiving a match parameter from the host and comparing the enrollment template with the swipe template, using the match parameter.

8. The method of claim 3, further comprising:

receiving the extracted swipe template from the host; and

matching the received swipe template with an enrollment template to produce a first result.

9. The method of claim 8, wherein the plurality of authentication steps performed by the host further includes matching the swipe template with an enrollment template to produce a second result.

10. The method of claim 9, further comprising:

receiving the second result from the host;

comparing the second result with the first result to produce a comparison result; and

releasing credentials based on the comparison result.

11. The method of claim 1, further comprising:

releasing credentials indicating successful validation, wherein the credentials allow for access into the host.

12. The method of claim 11, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.

13. A method, comprising:

sensing a fingerprint;

retaining a portion of the fingerprint data;

transmitting fingerprint data corresponding to the fingerprint to a host configured to perform a plurality of authentication steps to authenticate the fingerprint data; and

validating at least one of the plurality of authentication steps.

14. The method of claim 13, wherein the portion of the fingerprint data is randomly selected.

15. The method of claim 13, wherein the portion of the fingerprint data is of a resolution lower than that of the fingerprint data transmitted to the host.

16. The method of claim 13, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

17. The method of claim 16, wherein validating includes receiving the fingerprint image;

verifying similarity between the retained portion of the fingerprint data and a corresponding portion of the fingerprint image;

discarding the portion of the fingerprint data; and

retaining a section of the fingerprint image.

18. The method of claim 17, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

19. The method of claim 18, wherein the extracted swipe template includes a series of minutiae.

20. The method of claim 19, wherein validating further includes receiving the swipe template;

verifying similarity between minutiae existing in the retained section of the fingerprint image and the series of minutiae of the swipe template;

discarding the section of the fingerprint image; and

retaining the swipe template.

21. The method of claim 20, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

22. The method of claim 21, wherein the enrollment template is encrypted during an enrollment process, and decrypted while matching the swipe template.

23. The method of claim 21 wherein validating further includes receiving a match parameter from the host and comparing the enrollment template with the retained swipe template, using the match parameter.

24. The method of claim 13, further comprising:

releasing credentials indicating successful validation.

25. The method of claim 24, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.

26. A method, comprising:

receiving fingerprint data corresponding to a sensed fingerprint;

performing a plurality of authentication steps to authenticate the fingerprint data; and

transmitting data to a sensor configured to perform a validation of at least one of the plurality of authentication steps.

27. The method of claim 26, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

28. The method of claim 27, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

29. The method of claim 28, wherein the extracted swipe template includes a series of minutiae.

30. The method of claim 28, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

31. The method of claim 30, wherein the enrollment template is encrypted during an enrollment process, and the plurality of authentication steps includes sending a request to the sensor to decrypt the enrollment template, and receiving a decrypted enrollment template.

32. The method of claim 30, wherein the matching produces a match parameter.

33. The method of claim 32, wherein the transmitted data includes the extracted swipe template and the match parameter.

34. The method of claim 33, wherein the validation includes comparing the enrollment template with the swipe template, using the match parameter.

35. The method of claim 28, further comprising:

transmitting the extracted swipe template to the sensor, wherein the sensor is configured to match the transmitted swipe template with an enrollment template to produce a first result.

36. The method of claim 35, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template to produce a second result.

37. The method of claim 36, further comprising:

transmitting the second result to the sensor, wherein the sensor is configured to compare the second result with the first result to produce a comparison result; and

receiving credentials from the sensor based on the comparison result.

38. The method of claim 26, further comprising:

receiving credentials indicating successful validation.

39. The method of claim 38, wherein the credentials include a decryption key configured to allow decryption of a data storage medium.

40. The method of claim 26, wherein the sensor retains a portion of the fingerprint data.

41. The method of claim 40, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

42. The method of claim 41, further comprising:

transmitting the fingerprint image to the sensor.

43. The method of claim 42, wherein the validation performed by the sensor includes verifying similarity between the retained portion of the fingerprint data and a corresponding portion of the fingerprint image;

discarding the portion of the fingerprint data; and

retaining a section of the fingerprint image.

44. The method of claim 43, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

45. The method of claim 44, wherein the extracted swipe template includes a series of minutiae.

46. The method of claim 45, further comprising:

transmitting the extracted swipe template to the sensor.

47. The method of claim 46, wherein the validation performed by the sensor includes verifying similarity between minutiae existing in the retained section of the fingerprint image and the series of minutiae of the swipe template;

discarding the section of the fingerprint image; and

retaining the swipe template.

48. The method of claim 47, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

49. The method of claim 48, wherein the enrollment template is encrypted during an enrollment process, and the plurality of authentication steps includes sending a request to the sensor to decrypt the enrollment template, and receiving a decrypted enrollment template.

50. The method of claim 48, wherein the matching produces a match parameter.

51. The method of claim 50, wherein the transmitted data includes the extracted swipe template and the match parameter.

52. The method of claim 51, wherein the validation includes comparing the enrollment template with the swipe template, using the match parameter.

53. A method, comprising:

receiving fingerprint data corresponding to a sensed fingerprint;

performing a plurality of authentication steps to authenticate the fingerprint data, wherein the plurality of authentication steps includes

reconstructing a fingerprint image with the fingerprint data;

extracting a first swipe template from the fingerprint image;

matching with an application matcher, the first swipe template with an enrollment template of a first format;

extracting a second swipe template from the fingerprint image; and

transmitting data to a sensor configured to perform a validation of at least one of the plurality of authentication steps.

54. The method of claim 53, further comprising:

transmitting the extracted second swipe template to the sensor, wherein the sensor is configured to match the transmitted second swipe template with an enrollment template to produce a sensor match result.

55. The method of claim 54, further comprising:

receiving credentials indicating successful validation, if the sensor match result indicates a match.

56. The method of claim 54, wherein the plurality of authentication steps further includes matching, with a host matcher, the second swipe template with an enrollment template of a second format to produce a host match result.

57. The method of claim 56, wherein the first format and the second format are different.

58. The method of claim 56, wherein the first format is compatible with the application matcher, and the second format is compatible with the host matcher.

59. The method of claim 56, further comprising:

transmitting the host match result to the sensor, wherein the sensor is configured to compare the host match result with the sensor result to produce a comparison result; and

receiving credentials from the sensor based on the comparison result.

60. A method, comprising:

sensing, at a sensor, a fingerprint;

transmitting fingerprint data corresponding to the fingerprint from the sensor to a host;

performing, at the host, a plurality of authentication steps to authenticate the fingerprint data; and

validating, at the sensor, at least one of the plurality of authentication steps.

61. The method of claim 60, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

62. The method of claim 61, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

63. The method of claim 62, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

64. The method of claim 63, wherein the enrollment template is encrypted during an enrollment process, and further comprising:

sending a request from the host to the sensor to decrypt the enrollment template; and

sending a decrypted enrollment template from the sensor to the host.

65. The method of claim 63, wherein the matching produces a match parameter.

66. The method of claim 65, further comprising:

transmitting the extracted swipe template and the match parameter from the host to the sensor.

67. The method of claim 66, wherein the validating includes comparing the enrollment template with the swipe template, using the match parameter.

68. The method of claim 62, further comprising:

transmitting the extracted swipe template from the host to the sensor.

69. The method of claim 68, wherein the validating includes matching, at the sensor, the transmitted swipe template with an enrollment template to produce a first result.

70. The method of claim 69, wherein the plurality of authentication steps further includes matching, at the host, the swipe template with an enrollment template to produce a second result.

71. The method of claim 70, further comprising:

transmitting the second result from the host to the sensor.

72. The method of claim 71, wherein the validating includes comparing, at the sensor, the second result with the first result to produce a comparison result.

73. The method of claim 72, further comprising:

releasing credentials from the sensor to the host based on the comparison result.

74. The method of claim 60, further comprising:

releasing credentials, from the sensor to the host, indicating successful validation.

75. The method of claim 74, wherein the credentials include a decryption key configured to allow decryption of a data storage medium.

76. The method of claim 60, further comprising:

retaining, at the sensor, a portion of the fingerprint data.

77. The method of claim 76, wherein the plurality of authentication steps includes reconstructing a fingerprint image with the fingerprint data.

78. The method of claim 77, further comprising:

transmitting the fingerprint image from the host to the sensor.

79. The method of claim 78, wherein the validating by the sensor includes verifying similarity between the retained portion of the fingerprint data and a corresponding portion of the fingerprint image;

discarding the portion of the fingerprint data; and

retaining a section of the fingerprint image.

80. The method of claim 79, wherein the plurality of authentication steps further includes extracting a swipe template from the fingerprint image.

81. The method of claim 80, wherein the extracted swipe template includes a series of minutiae.

82. The method of claim 81, further comprising:

transmitting the extracted swipe template from the host to the sensor.

83. The method of claim 82, wherein the validating by the sensor includes verifying similarity between minutiae existing in the retained section of the fingerprint image and the series of minutiae of the swipe template;

discarding the section of the fingerprint image; and

retaining the swipe template.

84. The method of claim 83, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

85. The method of claim 84, wherein the enrollment template is encrypted during an enrollment process, and further comprising:

sending a request from the host to the sensor to decrypt the enrollment template; and

sending a decrypted enrollment template from the sensor to the host.

86. The method of claim 84, wherein the matching produces a match parameter.

87. The method of claim 86, further comprising:

transmitting the extracted swipe template and the match parameter from the host to the sensor.

88. The method of claim 87, wherein the validating includes comparing the enrollment template with the swipe template, using the match parameter.

89. A method, comprising:

sensing, at a sensor, a fingerprint;

transmitting fingerprint data corresponding to the fingerprint from the sensor to a host;

performing, at the host, a plurality of authentication steps to authenticate the fingerprint data, wherein the plurality of authentication steps includes

reconstructing a fingerprint image with the fingerprint data;

extracting a first swipe template from the fingerprint image;

matching with an application matcher, the first swipe template with an enrollment template of a first format;

extracting a second swipe template from the fingerprint image; and

validating, at the sensor, at least one of the plurality of authentication steps.

90. The method of claim 89, further comprising:

transmitting the extracted second swipe template from the host to the sensor; and

matching, at the sensor, the transmitted second swipe template with an enrollment template to produce a sensor match result.

91. The method of claim 90, further comprising:

releasing credentials, from the sensor to the host, indicating successful validation, if the sensor match result indicates a match.

92. The method of claim 90, wherein the plurality of authentication steps further includes matching, at the host, with a host matcher, the second swipe template with an enrollment template of a second format to produce a host match result.

93. The method of claim 92, wherein the first format and the second format are different.

94. The method of claim 92, wherein the first format is compatible with the application matcher, and the second format is compatible with the host matcher.

95. The method of claim 92, further comprising:

transmitting the host match result from the host to the sensor;

comparing, at the sensor, the host match result with the sensor result to produce a comparison result; and

releasing credentials, from the sensor to the host, based on the comparison result.

96. A method, comprising:

sensing a fingerprint;

transmitting fingerprint data corresponding to the fingerprint to a host configured to perform a plurality of authentication steps to authenticate the fingerprint data, wherein the plurality of authentication steps includes;

reconstructing a fingerprint image with the fingerprint data;

extracting a swipe template from the fingerprint image; and

matching the swipe template with an enrollment template to produce a second result;

receiving the extracted swipe template from the host; and

matching the received swipe template with an enrollment template to produce a first result;

receiving the second result from the host;

comparing the second result with the first result to produce a comparison result; and

releasing credentials based on the comparison result.

97. A method, comprising:

sensing a biometric;

transmitting biometric data corresponding to the biometric to a host configured to perform a plurality of authentication steps to authenticate the biometric data; and

validating at least one of the plurality of authentication steps.

98. The method of claim 97, wherein the plurality of authentication steps includes reconstructing a biometric image with the biometric data.

99. The method of claim 98, wherein the plurality of authentication steps further includes extracting a swipe template from the biometric image.

100. The method of claim 99, wherein the extracted swipe template includes a series of minutiae.

101. The method of claim 99, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

102. The method of claim 101, further comprising:

encrypting the enrollment template during an enrollment process; and

decrypting the enrollment template.

103. The method of claim 101, wherein validating includes receiving a match parameter from the host and comparing the enrollment template with the swipe template, using the match parameter.

104. The method of claim 99, further comprising:

receiving the extracted swipe template from the host; and

matching the received swipe template with an enrollment template to produce a first result.

105. The method of claim 104, wherein the plurality of authentication steps performed by the host further includes matching the swipe template with an enrollment template to produce a second result.

106. The method of claim 104, further comprising:

receiving the second result from the host;

comparing the second result with the first result to produce a comparison result; and

releasing credentials based on the comparison result.

107. The method of claim 97, further comprising:

releasing credentials indicating successful validation, wherein the credentials allow for access into the host.

108. The method of claim 107, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.

109. A method, comprising:

sensing a biometric;

retaining a portion of the biometric data;

transmitting biometric data corresponding to the biometric to a host configured to perform a plurality of authentication steps to authenticate the biometric data; and

validating at least one of the plurality of authentication steps.

110. The method of claim 109, wherein the portion of the biometric data is randomly selected.

111. The method of claim 109, wherein the portion of the biometric data is of a resolution lower than that of the biometric data transmitted to the host.

112. The method of claim 109, wherein the plurality of authentication steps includes reconstructing a biometric image with the biometric data.

113. The method of claim 109, wherein validating includes receiving the biometric image;

verifying similarity between the retained portion of the biometric data and a corresponding portion of the biometric image;

discarding the portion of the biometric data; and

retaining a section of the biometric image.

114. The method of claim 109, wherein the plurality of authentication steps further includes extracting a swipe template from the biometric image.

115. The method of claim 109, wherein the extracted swipe template includes a series of minutiae.

116. The method of claim 115, wherein validating further includes receiving the swipe template;

verifying similarity between minutiae existing in the retained section of the biometric image and the series of minutiae of the swipe template;

discarding the section of the biometric image; and

retaining the swipe template.

117. The method of claim 116, wherein the plurality of authentication steps further includes matching the swipe template with an enrollment template.

118. The method of claim 117, wherein the enrollment template is encrypted during an enrollment process, and decrypted while matching the swipe template.

119. The method of claim 117 wherein validating further includes receiving a match parameter from the host and comparing the enrollment template with the retained swipe template, using the match parameter.

120. The method of claim 109, further comprising:

releasing credentials indicating successful validation.

121. The method of claim 120, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.

122. A system for authenticating and validating the authentication of biometric data, comprising:

a biometric sensor configured to sense a biometric from user and further configured to communicate biometric data corresponding to the biometric from a user;

a host configured to receive the biometric data and to perform a plurality of authentication steps to authenticate the biometric data and also to verify the biometric sensor.

123. A system according to claim 122, wherein the host is configured with:

a reconstruction unit configured to reconstruct a biometric image with the biometric data;

a template unit configured to extract template from the biometric image; and

a matching unit configured to match the template with an enrollment template to produce a second result.

124. A system according to claim 123, wherein the biometric sensor is configured to receive the extracted swipe template from the host, includes a matching unit configured to match the received swipe template with an enrollment template to produce a first result, configured to receive the second result from the host, includes a matching unit configured to compare the second result with the first result to produce a comparison result, and is further configured to release credentials based on the comparison result to the host for validation.

125. A system, comprising:

a biometric sensor configured to sense a biometric and to communicate biometric data corresponding to the biometric; and

a host configured to perform a plurality of authentication steps to authenticate the biometric data;

wherein the biometric sensor includes a validation unit configured to validate at least one of the plurality of authentication steps.

126. The system of claim 125, wherein the host is configured to perform the plurality of authentication steps with a reconstruction unit configured to reconstruct a biometric image with the biometric data.

127. The system of claim 125, wherein the host includes a template extraction unit configured extract a swipe template from the biometric image.

128. The system of claim 127, wherein the extracted swipe template includes a series of minutiae.

129. The system of claim 125, wherein the host includes a matching unit configured to match the swipe template with an enrollment template.

130. The system of claim 129, further comprising:

an encryption unit configured to encrypt the enrollment template during an enrollment process; and

a decryption unit configured to decrypt the enrollment template.

131. The system of claim 125, wherein validation unit is configured to receive a match parameter from the host and further includes a comparison unit configured to compare the enrollment template with the swipe template, using the match parameter.

132. The system of claim 125, wherein the biometric sensor is configure to receive the extracted swipe template from the host, the biometric sensor further including a template matcher configured to match the received swipe template with an enrollment template to produce a first result.

133. The system of claim 132, wherein the host includes a template matching unit, wherein the host is configured to perform the plurality of authentication steps performed by the host including matching the swipe template with an enrollment template to produce a second result.

134. The system of claim 133, wherein the biometric sensor is further configured to receive the second result from the host, the biometric sensor including a comparator configured to compare the second result with the first result to produce a comparison result;

the biometric sensor configured to release credentials based on the comparison result to the host.

135. The system of claim 134, wherein the biometric sensor is configured to release credentials to the host indicating successful validation, wherein the credentials allow for access into the host by the biometric sensor.

136. The system of claim 135, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.

137. A system, comprising:

a biometric sensor configured to sense a biometric from a user and configured to transmit biometric data corresponding to the biometric to a host configured to perform a plurality of authentication steps to authenticate the biometric data;

storage configured to retain a portion of the biometric data; and

a validation unit configured to validate at least one of the plurality of authentication steps.

138. The system of claim 137, wherein the portion of the biometric data is randomly selected by the biometric sensor and stored.

139. The system of claim 137, wherein the portion of the biometric data is randomly selected by the host and stored.

140. The system of claim 137, wherein the portion of the biometric data is of a resolution lower than that of the biometric data transmitted to the host.

141. The system of claim 137, wherein the plurality of authentication steps includes reconstructing a biometric image with the biometric data.

142. The system of claim 137, wherein the validation unit is configured to receive the biometric image, to verify similarity between the retained portion of the biometric data and a corresponding portion of the biometric image and to discard the portion of the biometric data;

and to retain a section of the biometric image.

143. The system of claim 137, wherein the plurality of authentication steps further includes extracting a template from the biometric image with an extraction unit.

144. The system of claim 137, wherein the extracted template includes a series of minutiae.

145. The system of claim 144, wherein validating further includes receiving the template;

verifying similarity between minutiae existing in the retained section of the biometric image and the series of minutiae of the template;

discarding the section of the biometric image; and

retaining the template.

146. The system of claim 145, wherein the plurality of authentication steps further includes matching the template with an enrollment template.

147. The system of claim 146, wherein the enrollment template is encrypted during an enrollment process, and decrypted while matching the template.

148. The system of claim 144 wherein validating further includes receiving a match parameter from the host and comparing the enrollment template with the retained template, using the match parameter.

149. The system of claim 137, further comprising:

releasing credentials indicating successful validation.

150. The system of claim 149, wherein the credentials include a decryption key configured to allow decryption of a data storage medium of the host.