DYNAMIC SEED AND KEY GENERATION FROM BIOMETRIC INDICIA

• US 20160119138A1
• Filed: 10/12/2015
• Published: 04/28/2016
• Est. Priority Date: 02/17/2010
• Status: Active Grant

• Current Assignee: CIP, LLC
• Original Assignee: Ceelox Patents, LLC
• Inventors: Pizano, Erix, Sass, Joe
• Granted Patent: US 9,755,830 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

Generating a seed and/or a key from live biometric indicia, such that all the information necessary for generating the seed and/or the key is not stored, is provided. A method comprises receiving and enrolling a biometric template from a user; assigning an optimization value to the enrolled biometric template; encrypting an item of test data using the optimization value, such that the optimization value is an encryption seed; storing the encrypted item of test data on the storage medium; destroying the encryption seed after encrypting the item of test data; receiving a live biometric template; comparing the templates and determining an interval based on a probability that the templates are specific to the same user; iteratively testing values within the interval to identify the value in the interval for decrypting the encrypted item of test data; and generating the key using the seed.

Claims

1. A system for regenerating a destroyed seed comprising:

at least one processor; and

at least one non-transitory computer readable storage medium having a computer program stored thereon, said computer program including;

an initialization module that when executed by the at least one processor performs the steps of;

enroll a biometric template from a user to obtain an enrolled biometric template, and

assign an optimization value to the enrolled biometric template, said optimization value indicative of at least one feature of the enrolled biometric template;

a seed generation module that when executed by the at least one processor performs the steps of;

encrypt an item of test data using the optimization value to obtain an encrypted seed, and

destroy the optimization value and any associated seed;

a live capture module that when executed by the at least one processor performs the steps of;

receive a live biometric template provided by the user, and

compare the live biometric template with the enrolled biometric template; and

a seed generation module that when executed by the at least one processor performs the steps of;

determine a testing interval comprising a plurality of values; and

test at least a portion of the plurality of values within the testing interval to determine a decrypting value for the encrypted seed,

said testing further including using each tested value to attempt to decrypt the encrypted seed,

wherein upon a tested value successfully decrypting the encrypted seed, the destroyed seed is regenerated.

2. The system of claim 1, wherein the testing interval is based upon a probability that the live biometric template and the enrolled biometric template are indicative of a specific user.

3. The system of claim 2, wherein the testing interval is further based upon the optimization value associated with the enrolled biometric template.

4. The system of claim 1, wherein the testing is performed iteratively.

5. The system of claim 4, wherein one of the plurality of values within the testing interval is indicative of or is the same as said destroyed seed.

6. The system of claim 5, wherein the computer program further includes an interval-filtering module for applying a filter to the plurality of values within the testing interval to obtain a filtered interval.

7. The system of claim 6, wherein the filter reduces noise within the testing interval.

8. The system of claim 7, wherein subsequent to applying the filter, the one of the plurality of values indicative of or the same as the destroyed seed remains in the filtered interval.

9. The system of claim 1, the computer program further including a key generation module for generating a decryption key based on the regenerated seed.

10. The system of claim 9, the computer program further including a decryption module for using the decryption key to decrypt the contents of a storage device.

11. A method for regenerating a destroyed seed comprising:

enrolling a biometric template from a user to obtain an enrolled biometric template;

assigning an optimization value to the enrolled biometric template, said optimization value indicative of at least one feature of the enrolled biometric template;

encrypting an item of test data using the optimization value to obtain an encrypted seed;

destroying the optimization value and any associated seed;

receiving a live biometric template provided by the user;

comparing the live biometric template with the enrolled biometric template;

determining a testing interval comprising a plurality of values; and

testing at least a portion of the plurality of values within the testing interval to determine a decrypting value for the encrypted seed,

said testing further including using each tested value to attempt to decrypt the encrypted seed,

wherein upon a tested value successfully decrypting the encrypted seed, the destroyed seed is regenerated.

12. The method of claim 11, wherein the testing interval is based upon a probability that the live biometric template and the enrolled biometric template are indicative of a specific user.

13. The method of claim 12, wherein the testing interval is further based upon the optimization value associated with the enrolled biometric template.

14. The method of claim 11, wherein the testing is performed iteratively.

15. The method of claim 14, wherein one of the plurality of values within the testing interval is indicative of or is the same as said destroyed seed.

16. The method of claim 15, further including the step of applying a filter to the plurality of values within the testing interval to obtain a filtered interval.

17. The method of claim 16, wherein the filter reduces noise within the testing interval.

18. The method of claim 17, wherein subsequent to applying the filter, the one of the plurality of values indicative of or the same as the destroyed seed remains in the filtered interval.

19. The method of claim 11, further including the step of generating a decryption key based on the regenerated seed.

20. The method of claim 19, further including the step of using the decryption key to decrypt the contents of a storage device.