Method of identifying a user by means of modified biometric characteristics, and a database for implementing the method

• US 9,286,454 B2
• Filed: 11/02/2005
• Issued: 03/15/2016
• Est. Priority Date: 11/29/2004
• Status: Active Grant

• Current Assignee: IDEMIA Identity and Security France SAS (Advent International Corporation)
• Original Assignee: Morpho (Advent International Corporation)
• Inventors: Didier, Bernard, Chabanne, Herv, Rieul, Franois
• Primary Examiner(s): SCHMIDT, KARI L
• Application Number:
  US11/791,694
• Publication Number:
  US 20090106559A1
• Time in Patent Office: 3,786 Days
• Field of Search: 713/186
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/06 the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The present invention relates to a method of identifying a user, the method being implemented by means of a database containing personal data of users and containing for each user at least one unmodified biometric characteristic (E1,i), at least one biometric characteristic (E2,i) that has been modified and that is accessible from the unmodified biometric characteristic, and at least one item of identification data (D) that is accessible from a code identifying the modification that has implemented on the second biometric characteristic. The method comprises the steps of comparing first and second biometric characteristics (e1,i) read from the user with the characteristics in the database in order to determine (5) what modification has been implemented and to deduce therefrom the code identifying the modification; and extracting (6) the identification data by means of the code as deduced in this way. The invention also provides a database for implementing the method.

Claims

1. A method of identifying a user, comprising the steps of:

providing a storage memory containing a database of the personal data of users, containing for each user at least one unmodified first biometric characteristic, at least one second biometric characteristic that is accessible from the unmodified first biometric characteristic and that has been modified by at least one modification wherein the at least one modification is a geometrical transformation, and at least one item of identification data that is accessible from a code identifying the modification that has been implemented on the second biometric characteristic,

reading from the user a first biometric characteristic and comparing it with the unmodified first biometric characteristics that are stored in the database to rapidly determine whether the user has a reference in the database,

identifying the stored unmodified first biometric characteristic that corresponds to the user and determining that the user has the reference in the database, and further identifying the associated stored modified second biometric characteristic that corresponds to the user using the identified stored unmodified first biometric characteristic;

reading from the user a second biometric characteristic and comparing it with the modified second biometric characteristic to determine what modifications have been implemented between the second biometric characteristic and the modified second biometric characteristic;

determining the modifications that have been implemented between the second biometric characteristic and the modified second biometric characteristic, the modifications are tried out systematically in all possible combinations on the second biometric characteristic and a result of these combinations is compared with the modified second biometric characteristic to identify the result of a combination that matches the modified second biometric characteristic in order to identify a code corresponding to the successful combination that matches modified second biometric characteristic;

using the code to locate the at least one item of identification data corresponding to the user in the database; and

extracting the at least one item of identification data to identify the user.

2. A method according to claim 1, wherein the modified second biometric characteristic has been subjected to the combination of modifications, and wherein the code to the at least one item of identification data is constituted by the combination of codes identifying said modifications.

3. A method according to claim 1, wherein a reference to the field containing the modified second biometric characteristic is contained in the field containing the unmodified first biometric characteristic to identify the modified second biometric characteristic using the first biometric characteristic.

4. A method according to claim 1, wherein the at least one item of identification data is encrypted and wherein the code constitutes a key suitable for decrypting the at least one item of identification data.