Optimized biometric authentication method and system

• US 8,838,989 B2
• Filed: 01/24/2008
• Issued: 09/16/2014
• Est. Priority Date: 01/24/2008
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil Patrick, Littlo, Herbert A.
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US12/019,618
• Publication Number:
  US 20090190802A1
• Time in Patent Office: 2,427 Days
• Field of Search: 726/5, 713/186
• US Class Current: 713/186
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

An efficient exchange of messages in a system for authenticating access to a base device is facilitated through the selection of a particular biometric template from among a plurality of biometric templates. Rather than transmitting the template to a peripheral device, an indication of a location of the particular biometric template within the plurality of biometric templates is transmitted to the peripheral device. At the peripheral device, once the indication of the location and a biometric candidate are received, the particular biometric template may be located and compared to the biometric candidate. Finally, an indication of a result of the comparing may be transmitted to the base device.

Claims

1. A method of facilitating, at a base device, an efficient exchange of messages in a system for authenticating access to said base device, said authenticating based on a data set comprising a plurality of biometric templates, said method comprising:

selecting a particular biometric template from among said plurality of biometric templates stored at said base device;

determining a first location, in said plurality of biometric templates stored at said base device, for said particular biometric template;

transmitting, to a peripheral device, an indication of a second location, said second location for said particular biometric template among a plurality of biometric templates stored at said peripheral device, said second location corresponding to said first location;

prompting for input to be provided to said peripheral device;

receiving a message, said message including an authentication result determined, at said peripheral device, from a comparison of said particular biometric template to a biometric candidate derived from said input; and

controlling, based on said authentication result, access to said base device.

2. The method of claim 1 wherein said plurality of biometric templates comprise fingerprint templates.

3. The method of claim 1 wherein said indication of said second location comprises an indication of an index, within said plurality of biometric templates stored at said peripheral device, of said particular biometric template.

4. The method of claim 1 wherein said indication of said second location comprises an indication of a length of said particular biometric template.

5. The method of claim 1 wherein said indication of said second location comprises an indication of a specific hand and a specific finger with which said particular biometric template is associated.

6. The method of claim 1 wherein said transmitting said indication comprises employing a wireless communication channel.

7. The method of claim 6 wherein said wireless communication channel comprises a Bluetooth communications channel.

8. A computing apparatus employing a system for authenticating access to said computing apparatus, said authenticating based on a data set comprising a plurality of biometric templates, said computing apparatus comprising:

a microprocessor configured to;

select a particular biometric template from among said plurality of biometric templates stored at said base device;

determine a first location, in said plurality of biometric templates stored at said base device, for said particular biometric template;

transmit to a peripheral device, an indication of a second location, said second location for said particular biometric template among a plurality of biometric templates stored at said peripheral device, said second location corresponding to said first location;

prompt for input to be provided to said peripheral device;

receive a message, said message including an authentication result determined, at said peripheral device, from a comparison of said particular biometric template to a biometric candidate derived from said input; and

control, based on said authentication result, access to said base device.

9. A non-transitory computer readable medium containing computer-executable instructions that, when performed by processor in a computing apparatus, said computing apparatus employing a system for authenticating access to said computing apparatus, said authenticating based on a data set comprising a plurality of biometric templates, cause said processor to:

select a particular biometric template from among said plurality of biometric templates stored at said base device;

determine a first location, in said plurality of biometric templates stored at said base device, for said particular biometric template; and

transmit to a peripheral device, an indication of a second location, said second location for said particular biometric template among a plurality of biometric templates stored at said peripheral device, said second location corresponding to said first location;

prompt for input to be provided to said peripheral device;

receive a message, said message including an authentication result determined, at said peripheral device, from a comparison of said particular biometric template to a biometric candidate derived from said input; and

control, based on said authentication result, access to said base device.

10. A method of facilitating, at a peripheral device, efficient exchange of messages in a system for authenticating access to a base device, said method comprising:

forwarding, to a memory device physically connected said peripheral device, a template request command, received from said base device, indicating a requirement for biometric templates;

receiving a response message from said memory device, said response message including a data set including a plurality of biometric templates;

responsive to said receiving said response message;

extracting a copy of said data set from said response message;

storing said copy of said data set at said peripheral device; and

transmitting said response message including the plurality of biometric templates to said base device;

receiving, from said base device, an indication of a location, among said plurality of biometric templates stored at said peripheral device, at which is stored a particular biometric template;

extracting said particular biometric template from said location in said plurality of biometric templates stored at said peripheral device;

obtaining a biometric candidate from a biometric input device integrated with said peripheral device;

comparing, at said peripheral device responsive to said obtaining, said particular biometric template to said biometric candidate; and

transmitting an indication of a result of said comparing to said base device so that, at the base device and based on the indication of the result, access to the base device may be controlled.

11. The method of claim 10 wherein said data storage apparatus comprises a smart card conforming to ISO 7816.

12. The method of claim 11 wherein said peripheral device comprises a smart card reader.

13. The method of claim 10 wherein said plurality of biometric templates stored at said peripheral device comprise fingerprint templates.

14. The method of claim 10 wherein said indication of said location comprises an indication of an index, within said data set, of said particular biometric template.

15. The method of claim 10 wherein said indication of said location comprises an indication of a length of said particular biometric template.

16. The method of claim 10 wherein said indication of said location comprises an indication of a specific hand and a specific finger with which said particular biometric template is associated.

17. The method of claim 10 wherein said receiving and said transmitting comprise employing a wireless communication channel.

18. The method of claim 17 wherein said wireless communication channel comprises a Bluetooth communications channel.

19. A peripheral device as part of a system for authenticating access to a base device, said peripheral device comprising:

a processor adapted to;

forward, to a memory device physically connected said peripheral device, a template request command, received from said base device, indicating a requirement for biometric templates;

receive a response message from said memory device, said response message including a data set including a plurality of biometric templates;

responsive to said receiving said response message;

extract a copy of said data set from said response message;

store said copy of said data set at said peripheral device; and

transmit said response message including the plurality of biometric templates to said base device;

receive, from said base device, an indication of a location, among said plurality of biometric templates stored at said peripheral device, at which is stored a particular biometric template;

extract said particular biometric template from said location in said plurality of biometric templates stored at said peripheral device;

obtain a biometric candidate from a biometric input device integrated with said peripheral device;

compare said particular biometric template to said biometric candidate; and

transmit an indication of a result of said comparing to said base device so that, at the base device and based on the indication of the result, access to the base device may be controlled.

20. A non-transitory computer readable medium containing computer-executable instructions that, when performed by processor in a peripheral device, said peripheral device being part of a system for authenticating access to a base device, said authenticating based on a data set comprising a plurality of biometric templates, cause said processor to:

forward, to a memory device physically connected said peripheral device, a template request command, received from said base device, indicating a requirement for biometric templates;

receive a response message from said memory device, said response message including a data set including a plurality of biometric templates;

responsive to said receiving said response message;

extract a copy of said data set from said response message;

store said copy of said data set at said peripheral device; and

transmit said response message including the plurality of biometric templates to said base device;

receive, from said base device, an indication of a location, among said plurality of biometric templates stored at said peripheral device, at which is stored a particular biometric template;

extract said particular biometric template from said location in said plurality of biometric templates stored at said peripheral device;

obtain a biometric candidate from a biometric input device integrated with said peripheral device;

compare said particular biometric template to said biometric candidate; and

transmit an indication of a result of said comparing to said base device so that, at the base device and based on the indication of the result, access to the base device may be controlled.