SYSTEM, METHOD AND PROGRAM PRODUCT FOR GENERATING A CANCELABLE BIOMETRIC REFERENCE TEMPLATE ON DEMAND

• US 20100205658A1
• Filed: 02/12/2009
• Published: 08/12/2010
• Est. Priority Date: 02/12/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Griffin, Phillip H.
• Granted Patent: US 8,359,475 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

A system, method and program product for generating a cancelable biometric reference template on demand. The method includes creating, using a biometric application, a base reference template having a unique biometric template identifier that uniquely identifies biometric data corresponding to a biometric sample collected for an individual and generating, utilizing a transformation engine, a cancelable reference template derived from the base reference template, where the cancelable reference template generated is used by the individual to participate in a new biometric application without having to provide a new biometric sample or without having to rely on a biometric service provider to issue a new reference template for the new biometric application. The method further includes injecting the base reference template created into a secure portable device issued to the individual and loading the transformation engine onto the device for generating on demand the cancelable reference template.

Claims

1-25. -25. (canceled)

26. A method for generating on demand a cancelable biometric reference template, said method comprising the steps of:

creating, using a biometric application, a base biometric reference template having a unique biometric template identifier assigned thereto that uniquely identifies biometric data corresponding to a biometric sample collected for an individual; and

generating, utilizing a cancelable biometric transformation engine, a cancelable biometric reference template derived from said base biometric reference template, wherein said cancelable biometric reference template generated is used by said individual to participate in a new biometric application without having to provide a new biometric sample or without having to rely on a biometric service provider to issue a new biometric reference template for said new biometric application.

27. A method according to claim 26, further comprising the steps of:

injecting said base biometric reference template created into a secure portable device issued to said individual; and

loading said cancelable biometric transformation engine onto said secure portable device for generating on demand of said individual said cancelable biometric reference template derived from said base biometric reference template for said new biometric application.

28. A method according to claim 27, wherein said injecting step further comprises the step of:

signing said base biometric reference template created before injecting said base biometric reference template into said secure portable device.

29. A method according to claim 27, wherein said injecting step further comprises the step of:

encrypting said biometric data contained in said base biometric reference template before injecting said base biometric reference template into said secure portable device.

30. A method according to claim 29, wherein said generating step further comprises the step of:

requesting input of one or more authentication factors for generating said cancelable biometric reference template for said individual.

31. A method according to claim 30, further comprising the step of:

storing said base biometric reference template and said cancelable biometric reference template in a database.

32. A system for generating on demand a cancelable biometric reference template comprising:

a biometric application for creating a base biometric reference template from biometric data collected for an individual, said base biometric reference template created having a unique biometric template identifier assigned thereto that uniquely identifies said biometric data collected for said individual;

a cancelable biometric transformation engine for generating one or more cancelable biometric reference templates from said base biometric reference template;

a secure portable device assigned to said individual for storing said one or more cancelable biometric reference templates generated, wherein said individual dispenses a cancelable biometric reference template of said one or more cancelable biometric reference templates generated as needed to participate in a new biometric application without having to provide a new biometric sample or without having to rely on a biometric service provider to issue a new biometric reference template.

33. The system according to claim 32, further comprising:

an authentication tool for authenticating identity of said individual seeking to generate a cancelable biometric reference template

34. The system according to claim 33, further comprising:

a database for storing said base biometric reference template and said one or more cancelable biometric reference templates.

35. The system according to claim 34, wherein said base biometric reference template is injected into said secure portable device, and wherein said cancelable biometric transformation engine is loaded onto said secure portable device for generating said cancelable biometric reference template on demand.

36. The system according to claim 35, wherein said biometric application assigns a respective identifier to a respective cancelable biometric reference template of said one or more cancelable biometric reference templates generated for uniquely identifying said respective cancelable biometric reference template.

37. The system according to claim 36, wherein said base biometric reference template and said one or more cancelable biometric reference templates are signed before being stored.

38. The system according to claim 37, wherein said biometric application tracks an identity of an intended recipient receiving said respective cancelable biometric reference template for said new biometric application.

39. A computer program product for generating on demand a cancelable biometric reference template, said computer program product comprising:

a computer readable storage medium;

first program instructions to create, using a biometric application, a base biometric reference template having a unique biometric template identifier assigned thereto that uniquely identifies biometric data corresponding to a biometric sample collected for an individual;

second program instructions to generate, utilizing a cancelable biometric transformation engine, a cancelable biometric reference template derived from said base biometric reference template; and

a central processing unit for executing each of said first and second program instructions, wherein said cancelable biometric reference template generated is used by said individual to participate in a new biometric application without having to provide a new biometric sample or without having to rely on a biometric service provider to issue a new biometric reference template for said new biometric application, and wherein said first and second program instructions are recorded on said computer readable storage medium.

40. The computer program product according to claim 39, further comprising:

third program instructions to store said base biometric reference template and said cancelable biometric reference template in a database, wherein said third program instructions are recorded on said computer readable storage medium.

41. The computer program product according to claim 40, wherein said second program instructions further comprise instructions to inject said base biometric reference template created into a secure portable device issued to said individual and to load said cancelable biometric transformation engine onto said secure portable device for generating on demand of said individual said cancelable biometric reference template derived from said base biometric reference template for said new biometric application.

42. The computer program product according to claim 41, wherein said second program instructions further comprise instructions to sign said base biometric reference template created before injecting said base biometric reference template into said secure portable device.

43. The computer program product according to claim 41, wherein said second program instructions further comprise instructions to encrypt said biometric data contained in said base biometric reference template before injecting said base biometric reference template into said secure portable device.

44. The computer program product according to claim 43, wherein said second program instructions include instructions to request input of one or more authentication factors for generating said cancelable biometric reference template for said individual.

45. A process for deploying computing infrastructure comprising integrating computer-readable code into a computing system, wherein said code in combination with said computing system is capable of performing a process for generating on demand a cancelable biometric reference template, said process comprising:

creating, using a biometric application, a base biometric reference template having a unique biometric template identifier assigned thereto that uniquely identifies biometric data corresponding to a biometric sample collected for an individual; and

generating, utilizing a cancelable biometric transformation engine, a cancelable biometric reference template derived from said base biometric reference template, wherein said cancelable biometric reference template generated is used by said individual to participate in a new biometric application without having to provide a new biometric sample or without having to rely on a biometric service provider to issue a new biometric reference template for said new biometric application.

46. The process according to claim 45, further comprising:

injecting said base biometric reference template created into said secure portable device issued to said individual; and

loading said cancelable biometric transformation engine onto said secure portable device for generating on demand of said individual a cancelable biometric reference template derived from said base biometric reference template for a new biometric application.

47. The process according to claim 46, wherein said injecting step further comprises the step of:

signing said base biometric reference template created before injecting said base biometric reference template into said secure portable device.

48. The process according to claim 46, wherein said injecting step further comprises the step of:

encrypting said biometric data contained in said base biometric reference template before injecting said base biometric reference template into said secure portable device.

49. The process according to claim 48, wherein said generating step further comprises the step of:

requesting input of one or more authentication factors for generating said cancelable biometric reference template for said individual.