Method of biometric authentication

• US 7,272,245 B1
• Filed: 05/13/2004
• Issued: 09/18/2007
• Est. Priority Date: 05/13/2004
• Status: Expired due to Fees

• Current Assignee: National Security Agency
• Original Assignee: The United States of America As Represented By The Director National Security Agency
• Inventors: Layton, William James
• Primary Examiner(s): Mehta; Bhavesh M
• Assistant Examiner(s): Carter; Aaron W
• Application Number:
  US10/845,462
• Time in Patent Office: 1,223 Days
• Field of Search: 704/250, 704/256, 382115-124, 283/68, 283/69, 283/78, 340/5.1, 340/5.2, 340/5.52, 340/5.53, 902/3, 356/71, 713/186
• US Class Current: 382/115
• CPC Class Codes: G06V 40/193 Preprocessing; Feature extraction
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The present invention is a method of biometric authentication. The first step is taking a series of measurements of the biometric. The second step is averaging those measurements to create a valid iris model. The third step is generating a random number. The fourth step is using an error-correcting code to create a codeword using the random number. The fifth step is generating a list of random locations corresponding to valid bits in the biometric reading. The sixth step is generating a list of numbers consisting of the combination of specified biometric bits and the codeword. The seventh step is generating the secret by performing a hash on the random number. The eighth step is storing the secret and the list to a certificate. The ninth step of the method is authenticating the subject.

Claims

1. A method of biometric authentication comprising the steps of:

a) taking a plurality of measurements of a biometric from a subject;

b) averaging said measurements to create a combined biometric consisting of a plurality of bits;

c) generating at least one random number;

d) generating a codeword from said at least one random number;

e) generating a list of random locations corresponding to a user-definable set of valid bits in said combined biometric;

f) combining the combined biometric readings that correspond to said random locations and said codeword;

g) generating a list that comprises said list of random locations and the combination of said combined biometric readings and said codeword;

h) generating a secret value;

i) generating a certificate that includes said list and said secret value; and

j) authenticating said subject using said certificate.

2. The method of claim 1, wherein said step of authenticating said subject further includes the steps of:

a) taking at least one second biometric measurement from the subject;

b) combining the bits in said at least one second biometric measurement corresponding to the locations from said list of random locations with said numbers stored in the list from said certificate;

c) recovering said at least one random number;

d) generating a second secret value; and

e) comparing said second secret value to said secret value on said certificate to authenticate said subject.

3. The method of claim 1, wherein said step of generating a codeword from said at least one random number comprises generating a codeword from said random number by applying an error-correcting code to said at least one random number.

4. The method of claim 2, wherein said step of generating a codeword from said at least one random number comprises generating a codeword from said random number by applying an error-correcting code to said random number.

5. The method of claim 3, wherein said step of generating a secret value comprises generating a secret value by applying a hash function to said at least one random number.

6. The method of claim 4, wherein said step of generating a secret value comprises generating a secret value by applying a hash function to said at least one random number.

7. The method of claim 6, wherein said step of recovering said at least one random number comprises recovering said at least one random number using said error correcting code.

8. The method of claim 7, wherein said step of generating a second secret value comprises generating a second secret value by applying a hash function to said recovered at least one random number.

9. The method of claim 5, wherein said step of taking a plurality of measurements consists of taking a plurality of iris scan measurements.

10. The method if claim 8, wherein said step of taking a plurality of measurements consists of taking a plurality of iris scan measurements.

11. The method of claim 9, wherein said step of applying an error-correcting code consists of applying a Hamming code.

12. The method of claim 10, wherein said step of applying an error-correcting code consists of applying a Hamming code.

13. The method of claim 11, wherein said step of combining said biometric readings and said codeword comprises combining the combined biometric readings that correspond to said random locations and said codeword using a non-linear reversible combination chosen from the group of non-linear reversible combinations comprising mod-2 sum, and any other suitable non-linear reversible function.

14. The method of claim 12, wherein said step said step of combining said biometric readings and said codeword comprises combining the combined biometric readings that correspond to said random locations and said codeword using a non-linear reversible combination chosen from the group of non-linear reversible combinations comprising mod-2 sum, and any other suitable non-linear reversible function.

15. The method of claim 13, wherein said step of generating a list of random locations consists of generating a list of random locations wherein the number of random locations is less than the total number of locations of bits in the biometric.

16. The method of claim 14, wherein said step of generating a list of random locations consists of generating a list of random locations wherein the number of random locations is less than the total number of locations of bits in the biometric.

17. The method of claim 1, wherein said step of generating a secret value comprises generating a secret value by applying a hash function to said at least one random number.

18. The method of claim 2, wherein said step of generating a secret value comprises generating a secret value by applying a hash function to said at least one random number.

19. The method of claim 2, wherein said step of recovering said at least one random number comprises recovering said at least one random number using said error correcting code.

20. The method of claim 2, wherein said step of generating a second secret value comprises generating a second secret value by applying a hash function to said recovered at least one random number.

21. The method of claim 1, wherein said step of applying an error-correcting code consists of applying a Hamming code.

22. The method of claim 2, wherein said step of applying an error-correcting code consists of applying a Hamming code.

23. The method of claim 1, wherein said step of combining said biometric readings and said codeword comprises combining the combined biometric readings that correspond to said random locations and said codeword using a non-linear reversible combination chosen from the group of non-linear reversible combinations comprising mod-2 sum, and any other suitable non-linear reversible function.

24. The method of claim 2, wherein said step of combining said biometric readings and said codeword comprises combining the combined biometric readings that correspond to said random locations and said codeword using a non-linear reversible combination chosen from the group of non-linear reversible combinations comprising mod-2 sum, and any other suitable non-linear reversible function.

25. The method of claim 1, wherein said step of generating a list of random locations consists of generating a list of random locations wherein the number of random locations is less than the total number of locations of bits in the biometric.

26. The method of claim 2, wherein said step of generating a list of random locations consists of generating a list of random locations wherein the number of random locations is less than the total number of locations of bits in the biometric.

27. The method of claim 2, wherein step of taking said list from said certificate comprises taking said list from said certificate and performing a non-linear reversible combination of the bits in said at least one second biometric measurement corresponding to the locations from said list of random locations and said numbers stored in the list, said non-linear reversible combination being chosen from the group of non-linear reversible combinations comprising mod-2 sum, function and any other suitable non-linear reversible combination.