Methods for secure enrollment and backup of personal identity credentials into electronic devices

• US 8,826,031 B2
• Filed: 03/25/2013
• Issued: 09/02/2014
• Est. Priority Date: 08/06/2002
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Privaris, Inc.
• Inventors: Abdallah, David S., Johnson, Barry W.
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US13/849,985
• Publication Number:
  US 20130227299A1
• Time in Patent Office: 526 Days
• Field of Search: 713/186, 382/115, 340/5.8
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method and system for securely enrolling personal identity credentials into personal identification devices. The system of the invention comprises the manufacturer of the device and an enrollment authority. The manufacturer is responsible for recording serial numbers or another unique identifier for each device that it produces, along with a self-generated public key for each device. The enrollment authority is recognized by the manufacturer or another suitable institution as capable of validating an individual before enrolling him into the device. The enrollment authority maintains and operates the appropriate equipment for enrollment, and provides its approval of the enrollment. The methods described herein discuss post-manufacturing, enrollment, backup, and recovery processes for the device.

Claims

1. A method, comprising:

sending from a personal identification device to a party at least one of (1) an identifier uniquely associated with the personal identification device or (2) a portion of an asymmetric key pair generated by the personal identification device;

receiving from the party a digital certificate based, at least in part, on the at least one of the identifier or the portion of the asymmetric key pair sent from the personal identification device to the party, the sending and the receiving being before biometric data associated with enrollment is received at the personal identification device; and

disabling functionality within the personal identification device before biometric data associated with enrollment is received except that the personal identification device is in a wait state associated with future enrollment.

2. The method of claim 1, further comprising:

receiving at the personal identification device a party digital certificate from the party, the party digital certificate including a public key associated with the party.

3. The method of claim 1, wherein the asymmetric key pair includes a personal identification device public key and a personal identification device private key, the portion of the asymmetric key pair sent from the personal identification device to the party includes the personal identification device public key.

4. The method of claim 1, wherein the sending includes sending a personal identification device public key and the identifier to the party.

5. The method of claim 1, wherein the identifier is generated at the personal identification device.

6. An apparatus, comprising:

a housing;

a memory coupled to the housing and configured to store biometric data associated with enrollment;

a biometric sensor coupled to the memory and configured to receive biometric data associated with enrollment;

a receiver coupled to the housing, the receiver configured to receive a public key associated with a party before biometric data associated with enrollment is received, the receiver configured to receive a digital certificate from the party before biometric data associated with enrollment is received, the digital certificate being based, at least in part, on an identifier;

a transmitter coupled to the housing, the transmitter configured to send the identifier from the apparatus to the party based on the public key before biometric data associated with enrollment is received; and

a processor coupled to the receiver and the transmitter, the processor configured to disable functionality within the apparatus before biometric data associated with enrollment is received except that the apparatus is in a wait state associated with future enrollment.

7. The apparatus of claim 6, wherein the biometric sensor is a fingerprint sensor.

8. The apparatus of claim 6, wherein the transmitter includes a radio frequency transmitter.

9. The apparatus of claim 6, wherein the identifier is uniquely associated with the apparatus.

10. The apparatus of claim 6, wherein the identifier is associated with an asymmetric key pair including a personal identification device public key and a personal identification device private key.

11. The apparatus of claim 6, wherein the digital certificate includes data associated with the apparatus.

12. The apparatus of claim 6, wherein the processor is configured to disable functionality within the apparatus after the receiver receives the public key associated with the party and the digital certificate from the party.

13. The apparatus of claim 6, wherein the processor is configured to disable functionality within the apparatus after the transmitter sends the identifier.

14. An apparatus, comprising:

a housing;

a memory coupled to the housing and configured to store biometric data associated with enrollment;

a biometric sensor coupled to the memory and configured to receive biometric data associated with enrollment;

a receiver coupled to the housing, the receiver configured to receive a public key associated with a party before biometric data associated with enrollment is received, the receiver configured to receive a digital certificate from the party before biometric data associated with enrollment is received, the digital certificate being based, at least in part, on the public key;

a transmitter coupled to the housing, the transmitter configured to send a personal identification device public key from the apparatus to the party before biometric data associated with enrollment is received, the personal identification device public key being associated with the apparatus; and

a processor coupled to the receiver and the transmitter, the processor configured to disable functionality within the apparatus before biometric data associated with enrollment is received except that the apparatus is in a wait state associated with future enrollment.

15. The apparatus of claim 14, wherein the biometric sensor is a fingerprint sensor.

16. The apparatus of claim 14, wherein the transmitter includes a radio frequency transmitter.

17. The apparatus of claim 14, wherein the personal identification device public key is associated with an asymmetric key pair including the personal identification device public key and a personal identification device private key.

18. The apparatus of claim 14, wherein the digital certificate includes data associated with the apparatus.

19. The apparatus of claim 14, wherein the processor is configured to disable functionality within the apparatus after the receiver receives the public key associated with the party and the digital certificate from the party.

20. The apparatus of claim 14, wherein the processor is configured to disable functionality within the apparatus after the transmitter sends the personal identification device public key.