System and method for secure biometric identification

• US 7,284,266 B1
• Filed: 03/21/2000
• Issued: 10/16/2007
• Est. Priority Date: 03/21/2000
• Status: Expired due to Term

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Morris, Martin, Senyei, Andrew, Calcagno, Jeff
• Primary Examiner(s): Barrón, Jr.; Gilberto
• Assistant Examiner(s): Simitoski; Michael J
• Application Number:
  US09/531,720
• Time in Patent Office: 2,765 Days
• Field of Search: 713/186, 713/159, 713/170, 705 61- 64, 382/115, 726/28
• US Class Current: 726/9
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system and method for secure biometric identification. The inventive system includes a mobile unit and a server. The mobile unit is adapted to receive biometric input and provide a first signal in response thereto. In the illustrative implementation, the mobile unit is a Personal Digital Assistant (PDA) and the biometric input is provided by a fingerprint sensor mounted thereon. A first transceiver is mounted on the PDA for transmitting the first signal and receiving a second signal in response thereto. The PDA is adapted to encrypt the first signal and decrypt the second signal. A secure device is mounted at the PDA. The secure device has two modes of operation: a first locked mode by which access thereto is prohibited and a second unlocked mode by which access thereto is enabled on receipt of the second signal. In the illustrative implementation, the secure device is an encrypted database for which the second signal is a decryption key. The server unit includes a second transceiver for receiving the first signal transmitted via the wireless link. The first and second transceivers are adapted to operate in accordance with the Bluetooth specification. The server is equipped with a system for authenticating the biometric data and providing the second signal in response thereto. The second signal is then communicated to the mobile unit where it is utilized to access the secure device, e.g., encrypted database.

Claims

1. A mobile unit for use in a system for secure biometric identification, comprising:

a biometric sensor that generates biometric data;

a central processing unit operatively coupled to said biometric sensor;

software running on said central processing unit;

a transceiver operatively coupled to said sensor; and

an encrypted database operatively coupled to said central processing unit,

wherein said biometric sensor and said transceiver are part of a card that is received by said mobile unit,

wherein said transceiver transmits biometric information that is based on said biometric data,

wherein said transceiver receives a cryptographic key in response to the said transmitted biometric information,

wherein said cryptographic key is used to provide a temporary decrypted version of said encrypted data on the mobile unit.

2. A system for secure biometric identification, comprising:

a handheld computer enabled device that receives a card, the card comprising a fingerprint sensor and a first wireless transceiver, said fingerprint sensor providing a first set of biometric data, said first wireless transceiver transmitting a first signal representative of said biometric data;

means disposed on said device for encrypting said biometric data;

in a computer system, a second wireless transceiver for receiving said first signal and providing a second signal in response thereto;

in a computer system, means for decrypting said second signal to provide said first set of biometric data;

in a computer system, means for authenticating said first set of biometric data and providing a third signal in response thereto, said means for authenticating including means for comparing said first set of biometric data to plural second sets of biometric data;

in a computer system, means for providing an encrypted decryption key, in response to said third signal, to means for decrypting said encrypted decryption key; and

in said device, a secure device in communication with said means for decrypting said encrypted decryption key and responsive to said decryption key,

wherein the secure device stores an encrypted database,

wherein said decryption key decrypts the encrypted database and generates a temporary working decrypted copy of said database.

3. The system of claim 2 wherein said first transceiver comprises a Bluetooth-enabled transceiver adapted to operate in accordance with a Bluetooth specification.

4. The system of claim 2 wherein said second transceiver comprises a Bluetooth-enabled transceiver.

5. The system of claim 2 wherein said means for comparing includes biometric matching software.

6. The system of claim 5 wherein said biometric matching software comprises fingerprint matching software.

7. The system of claim 2 wherein said decryption key comprises a public decryption key.

8. The system of claim 2 wherein said handheld device comprises a Personal Digital Assistant.

9. A system for secure biometric identification, comprising:

a computer-enabled device;

a biometric sensor mounted on a card that is received by said device;

a first central processing unit in communication with said sensor;

a first wireless transceiver mounted on said card and coupled to said first central processing unit;

a second wireless transceiver in communication with said first wireless transceiver;

a second central processing unit in communication with said second transceiver;

software running on said second central processing unit for authenticating a signal transmitted by said first transceiver and received by said second transceiver and providing a decryption key in response thereto; and

a secure device mounted on said computer-enabled device and responsive to said decryption key,

wherein said secure device stores an encrypted database that includes private data,

wherein said decryption key decrypts said encrypted database, and

wherein said decryption key is used by the secure device to decrypt and generate a temporary working decrypted copy of said database.

10. The system of claim 9 wherein said first transceiver comprises a Bluetooth-enabled transceiver.

11. The system of claim 9 wherein said second transceiver comprises a Bluetooth-enabled transceiver.

12. The system of claim 9 wherein said decryption key comprises a public decryption key.

13. The system of claim 9 wherein said computer-enabled device comprises a Personal Digital Assistant.