Identification and security using biometric measurements

• US 5,991,408 A
• Filed: 05/16/1997
• Issued: 11/23/1999
• Est. Priority Date: 05/16/1997
• Status: Expired due to Fees

• Current Assignee: Veridicom, Inc. (Veridicom International, Inc.)
• Original Assignee: Veridicom, Inc. (Veridicom International, Inc.)
• Inventors: Pearson, Peter Kelley, Upton, Jimmy Ray, Rowley, Thomas Edward
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/857,642
• Time in Patent Office: 921 Days
• Field of Search: 380/23, 380/25, 380/30, 382/115-119
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The present invention makes it possible for a user to have a security key created from one or more biometric elements of the user, such as a fingerprint. For example, a biometric feature or combination of biometric features of the user can be used to create an instance of a problem which can only be solved by data inherent in the biometric feature or combination of biometric features. The user can supply the data to solve the problem by inputting, through an appropriate input device, an image, or other representation of the biometric elements from which the data that will solve the instance of the problem is derived. If problem is solved, either completely or partially, using the derived data then the identity of the user can either be verified or ascertained. the solution can then be used for other purposes such as the generation of a cryptographic key.

Claims

1. A method for enrolling at least a first user in a biometric based verification system, comprising the steps of:

receiving from a sensor a representation of a biometric element of the first user, the representation including a plurality of biometric features;

determining a graph representing the relationships between the plurality of biometric features;

adding a plurality of camouflaging vertices and edges to the graph to create a camouflaged graph; and

storing the camouflaged graph with a first user identity information, the first user identity information identifying the first user as being the source of the plurality of biometric features.

2. The method of claim 1, wherein the graph includes a plurality of vertices and a plurality of edges, and wherein the determining the graph includes:

representing biometric features in the plurality of biometric features as vertices in the plurality of vertices;

connecting vertices in the plurality of vertices with edges in the plurality of edges; and

wherein the plurality of vertices and the plurality of edges form a clique.

3. The method of claim 1, wherein the camouflage edges in the plurality of camouflage edges are connected to the camouflage vertices in the plurality of camouflage vertices.

4. The method of claim 1, further comprising determining a cryptographic key includes identifying a clique in the graph.

5. The method of claim 1, wherein the biometric element comprises biometric elements from a second user.

6. The method of claim 1, wherein the biometric element comprises an element of a fingerprint.

7. The method of claim 1, wherein the biometric element comprises an element of a plurality of fingerprints.

8. The method of claim 1, wherein the biometric element comprises an element of a palm print.

9. The method of claim 1, wherein the biometric element comprises an element of an iris.

10. The method of claim 1, wherein the biometric element comprises an element of a retina.

11. A method for attempting to identify a user using a biometric based system, the method comprising:

receiving a representation of a user biometric element from a sensor, the representation including a plurality of user features;

accessing an instance of a problem, the problem having been created from a plurality of enrollment features, the plurality of enrollment features being previously identified features corresponding to a biometric element, the instance of the problem being at least as difficult to solve as an NP complete problem; and

attempting to at least partially solve the instance of the problem using user features in the plurality of features, and if the instance of the problem is at least partially solved then the user is identified as being a user associated with the instance of the problem.

12. The method of claim 11, wherein:

the instance of the problem comprises identifying features in the plurality of features, the plurality of features including a plurality of minutia; and

wherein the subset of elements satisfies a predetermined condition.

13. The method of claim 12, wherein the predetermined condition is a numerical sum.

14. The method of claim 12, wherein the instance of the problem includes identifying a clique in a graph, wherein the graph represents a plurality of features, and wherein the predetermined condition is a clique in a graph.

15. The method of claim 11, wherein the instance of the problem comprises an NP-hard problem.

16. The method of claim 11, wherein the instance of the problem comprises an exponentially hard problem.

17. The method of claim 11, wherein the user biometric element comprises pieces from more than one person.

18. The method of claim 11, wherein the user biometric element comprises an element of at least one of a fingerprint, a palm print, an element of an iris, and an element of a retina.

19. The method of claim 11, wherein if the problem is solved, then the solution is used to create a cryptographic key for decrypting encrypted information, the encrypted information having been encrypted using a second cryptographic key corresponding to the cryptographic key, the second cryptographic key being created from said plurality of enrollment features.

20. The method of claim 11, including the step of providing evidence that the partial solution to the instance of the problem has been found, wherein the evidence corresponds to using a zero knowledge proof of knowledge.

21. A system for enrolling a user in an identification system, the system comprising:

a sensor for receiving a representation of a biometric element of the user, the representation including a plurality of biometric features;

a memory for storing the representation; and

a processor, being coupled to the sensor and the memory;

for determining a set of relationships between the plurality of biometric features, the set of relationships corresponding to a graph, the processor further for adding a plurality of camouflaging vertices and edges to the graph to create a camouflaged graph, and the processor further for storing the camouflaged graph with a user identity information, the user identity information identifying the user as being the source of the plurality of biometric features.

22. A system for enrolling a user in an identification system, the system comprising:

a first means for receiving a representation of a biometric element of the user, the representation including a plurality of biometric features;

a second means for storing the representation; and

a third means, being coupled to the first means and the second means;

for determining a set of relationships between the plurality of biometric features, the set of relationships corresponding to a graph, the third means further for adding a plurality of camouflaging vertices and edges to the graph to create a camouflaged graph, and the third means further for storing the camouflaged graph with a user identity information, the user identity information identifying the user as being the source of the plurality of biometric features.