Data encryption and smartcard storing encrypted data

• US 9,235,698 B2
• Filed: 04/25/2014
• Issued: 01/12/2016
• Est. Priority Date: 08/30/2013
• Status: Expired due to Fees

• Current Assignee: Cylon Global Technology Inc.
• Original Assignee: Cylon Global Technology Inc.
• Inventors: Webber, Glenn, Courtney, Eamonn, Cole-Courtney, Jacqueline
• Primary Examiner(s): Le, Chau
• Assistant Examiner(s): Jamshidi, Ghodrat
• Application Number:
  US14/261,993
• Publication Number:
  US 20150067348A1
• Time in Patent Office: 627 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A data encryption and decryption process, particularly for use in smart cards, in which the data is encrypted using an encryption key derived from a fingerprint template. The fingerprint template is stored, in unencrypted form, in a memory which, apart from the fingerprint template, is filled or substantially filled with random data values thereby to conceal the fingerprint template. The template may be broken up into components stored in disparate locations in the memory to further increase security. Decryption is performed by, firstly, carrying out scanning a fingerprint to obtain a new template, comparing the new template with the previously stored template and, if there is a match, regenerating the encryption key from the previously stored template. The regenerated encryption key is then used to decrypt the data.

Claims

1. A smart card comprising:

a fingerprint reader;

a processor circuit configured to perform an encryption process in which an item of electronic information is encrypted and a decryption process in which the item of encrypted electronic information is decrypted; and

a memory circuit storing the item of encrypted electronic information, wherein;

(a) the processor circuit is configured to perform the encryption by;

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in the memory circuit which also contains other data values thereby to conceal the first fingerprint template,

(iii) deriving an encryption key from the first fingerprint template,

(iv) encrypting the first fingerprint template with the encryption key and storing the resulting encrypted first fingerprint template in the memory circuit in encrypted form; and

(v) encrypting said information by an encryption algorithm which utilizes said encryption key, and

(b) the processor circuit is further configured to perform the decryption by;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from the first fingerprint template,

(iv) encrypting the first fingerprint template utilizing the regenerated encryption key and comparing the resulting encrypted fingerprint template with the stored first fingerprint template in encrypted form, and

(v) decrypting the encrypted information utilizing the regenerated encryption key.

2. The smart card according to claim 1, in which said item of information comprises a personal identification number and the processor circuit is further configured to make said unencrypted personal identification number available for a personal identification number verification process following a successful said decryption operation.

3. The smart card according to claim 2, wherein the or each item of information includes further information additional to the personal identity number.

4. The smart card according to claim 1, which is operable to perform a plurality of said encryption processes each in relation to respective different item of electronic information and each utilizing a respective different finger, whereby each different item of electronic information may be encrypted and decrypted utilizing a respective different finger.

5. The smart card according to claim 4, wherein each said item of information comprises a personal identity number, and the processor circuit is further configured to make the respective decrypted personal identification number available for a personal identification number verification process following a successful decryption operation thereof.

6. The smart card according to claim 1, wherein said other data comprises random or pseudorandom numbers.

7. The smart card according to claim 1, wherein the or each first fingerprint template is broken up into a multiplicity of components which are stored in disparate locations in said memory circuit.

8. An electronic process for encrypting and decrypting information in electronic form, comprising:

(i) deriving a first fingerprint template from a finger;

(ii) storing the first fingerprint template in unencrypted form in a memory circuit which also contains other data values thereby to conceal the first fingerprint template;

(iii) deriving an encryption key from the first fingerprint template;

(iv) encrypting the first fingerprint template with the encryption key and storing the resulting encrypted first fingerprint template in the memory circuit in encrypted form;

(v) encrypting said information by an encryption algorithm which utilizes said encryption key;

(vi) storing said encrypted information in the memory circuit;

(vii) deriving a second fingerprint template from a finger;

(viii) performing a matching process to match the second fingerprint template with the stored first fingerprint template;

(ix) if the matching process is successful, regenerating the encryption key from the first fingerprint template;

(x) encrypting the first fingerprint template utilizing the regenerated encryption key and comparing the resulting encrypted fingerprint template with the stored first fingerprint template in encrypted form; and

(xi) decrypting the encrypted information utilizing the regenerated encryption key.

9. The process of claim 8, wherein the other data comprises random or pseudorandom numbers.

10. The process of claim 8, wherein the first fingerprint template is broken up into components which are stored in disparate locations in the memory circuit.

11. A smart card comprising:

a fingerprint reader;

a processor circuit configured to perform an encryption process in which an item of electronic information is encrypted and a decryption process in which the item of encrypted electronic information is decrypted; and

a memory circuit storing the item of encrypted electronic information, wherein;

(a) the processor circuit is configured to perform the encryption by;

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in the memory circuit which also contains other data values thereby to conceal the first fingerprint template, the storing comprising breaking up the first fingerprint template into a multiplicity of components and storing the components in disparate locations in the memory circuit,

(iii) deriving an encryption key from the first fingerprint template, and

(iv) encrypting the information by an encryption algorithm which utilizes the encryption key, and

(b) the processor circuit is further configured to perform the decryption by;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from the first fingerprint template, and

(iv) decrypting the encrypted information utilizing the regenerated encryption key.

12. The smart card of claim 11, wherein the other data comprises random or pseudorandom numbers.

13. An electronic process for encrypting and decrypting information in electronic form, comprising:

deriving a first fingerprint template from a finger;

storing the first fingerprint template in unencrypted form in a memory circuit which also contains other data values thereby to conceal the first fingerprint template, the storing comprising breaking up the first fingerprint template into a multiplicity of components and storing the components in disparate locations in the memory circuit;

deriving an encryption key from the first fingerprint template;

encrypting said information by an encryption algorithm which utilizes said encryption key;

storing said encrypted information;

deriving a second fingerprint template from a finger;

performing a matching process to match the second fingerprint template with the stored first fingerprint template;

if the matching process is successful, regenerating the encryption key from the first fingerprint template; and

decrypting the encrypted information utilizing the regenerated encryption key.

14. The process of claim 13, wherein the other data comprises random or pseudorandom numbers.

15. A smart card comprising:

a fingerprint reader;

a processor circuit configured to perform an encryption process in which an item of electronic information is encrypted and a decryption process in which the item of encrypted electronic information is decrypted; and

a memory circuit storing the item of encrypted electronic information, wherein;

(a) the processor circuit is configured to perform the encryption by;

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in the memory circuit which also contains other data values thereby to conceal the first fingerprint template,

(iii) deriving an encryption key from the first fingerprint template, and

(iv) encrypting the information by an encryption algorithm which utilizes the encryption key, and

(b) the processor circuit is further configured to perform the decryption by;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from only the first fingerprint template, and

(iv) decrypting the encrypted information utilizing the regenerated encryption key.

16. An electronic process for encrypting and decrypting information in electronic form, comprising:

deriving a first fingerprint template from a finger;

storing the first fingerprint template in unencrypted form in a memory circuit which also contains other data values thereby to conceal the first fingerprint template;

deriving an encryption key from the first fingerprint template;

encrypting said information by an encryption algorithm which utilizes said encryption key;

storing said encrypted information;

deriving a second fingerprint template from a finger;

performing a matching process to match the second fingerprint template with the stored first fingerprint template;

if the matching process is successful, regenerating the encryption key from only the first fingerprint template; and

decrypting the encrypted information utilizing the regenerated encryption key.