Method and system for verifying the identity of an individual by employing biometric data features associated with the individual

• US 8,959,364 B2
• Filed: 12/28/2009
• Issued: 02/17/2015
• Est. Priority Date: 01/09/2009
• Status: Active Grant

• Current Assignee: Genkey Netherlands BV
• Original Assignee: Genkey Netherlands BV
• Inventors: Kevenaar, Thomas Andreas Maria, Lemma, Aweke Negash
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US13/142,751
• Publication Number:
  US 20110271120A1
• Time in Patent Office: 1,877 Days
• Field of Search: 713/186, 713/189
• US Class Current: 713/189
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The invention relates to a method for verifying the identity of an individual by employing biometric data features associated with the individual, which method provides privacy of said biometric data features, comprising at least the steps of: a) for enrollment purposes deriving a first biometric template from at least a first set of first biometric data features associated with said individual, and b) for identity verifying purposes deriving a further biometric template from at least a further set of said first biometric data features associated with said individual, and c) comparing said further biometric template with said first biometric template. The invention also relates to a system for verifying the identity of an individual by employing biometric data features associated with the individual, which system at least comprises: an enrollment means and a verifying means, wherein said enrollment means are arranged in deriving a first biometric template data, said first biometric template data being secret and associated with a first set of first biometric data features of said individual, and in receiving a further set of first biometric data features of said individual, and in deriving a further biometric template data associated with said further set of first biometric data, and wherein said verifying means are arranged in comparing the first biometric template data with the further biometric template data to check for correspondence, wherein the identity of the individual is verified if correspondence exists.

Claims

1. A method for verifying the identity of an individual by employing biometric data features associated with the individual in a biometric storage device, which method provides privacy of said biometric data features, comprising the steps of:

a) enrolment, including deriving a first biometric template from at least a first set of first biometric data features associated with said individual and providing privacy of said first biometric data features, and

b) verifying identity, including deriving a further first biometric template from at least a further set of said first biometric data features associated with said individual, and

c) comparing said further first biometric template with said first biometric template;

d) encrypting at least a second biometric template associated with a set of second biometric data features of said individual using the first biometric template being derived in step a) and in addition step b) comprises the steps of;

e) using said further first biometric template associated with said further set of said first biometric data features for decrypting said encrypted second biometric template being derived in step d) and

f) deriving a further second biometric template from at least a further set of said second biometric data features associated with said individual, and

g) comparing said further second biometric template with said decrypted second biometric template.

2. Method according to claim 1, characterized by the step of

h) deriving an encrypting data key from said first biometric template for encrypting said at least second biometric template.

3. Method according to claim 1, wherein step e) further comprises the step of

i) deriving a decrypting data key from said further biometric template for decrypting said encrypted second biometric template.

4. Method according to claim 1, characterized by the step of j) storing said at least one encrypted second biometric template.

5. System for verifying the identity of an individual by employing biometric data features associated with the individual maintained on non-transitory computer readable storage medium, which system comprises:

an enrolment computer, and

a verifying computer,

wherein said enrolment computer is arranged in receiving a first set of first biometric data features being presented by said individual to said enrolment means and, in deriving a first biometric template data, said first biometric template data being associated with a said first set of first biometric data features of said individual and providing privacy of said first biometric data features, and in receiving a further set of first biometric data features of said individual, and in deriving a further biometric template data associated with said further set of first biometric data, and

wherein said verifying computer is arranged in comparing the first biometric template data with the further biometric template data to check for correspondence, wherein the identity of the individual is verified if correspondence between said first and said further biometric template data exists, wherein said enrolment computer is arranged in receiving a first set of second biometric data features being presented by said individual to said enrolment computer and, in deriving a second biometric template data, said second biometric template data being associated with said first set of second biometric data features of said individual and providing privacy of said second biometric data features and wherein the system further comprises encrypting/decrypting module arranged for encrypting at least said second biometric template data associated with said first set of second biometric data features of said individual using the first biometric template and wherein, during verification, said encrypting/decrypting module are further arranged for decrypting said encrypted second biometric template data using said further first biometric template data associated with said further set of first biometric data and said enrolment computer are arranged in receiving a further set of second biometric data features of said individual, and in deriving a further second biometric template data associated with said further set of second biometric data, and said verifying computer is arranged in comparing the decrypted second biometric template data with the further second biometric template data associated with said further set of second biometric data to check for correspondence, wherein the identity of the individual is verified if correspondence exists.

6. System according to claim 5, characterized in that said encrypting/decrypting module is arranged in deriving an encrypting data key from said first biometric template data for encrypting said at least second biometric template data.

7. System according to claim 5, characterized in that said encrypting/decrypting module is arranged in deriving a decrypting data key from said further biometric template data for decrypting said encrypted second biometric template data.

8. System according to claim 5, characterized in that said encrypting/decrypting module is arranged in storing said at least one encrypted second biometric template data at said storage means.