System, method and program product for recording creation of a cancelable biometric reference template in a biometric event journal record

• US 9,298,902 B2
• Filed: 02/12/2009
• Issued: 03/29/2016
• Est. Priority Date: 02/12/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Griffin, Phillip H.
• Primary Examiner(s): SHAIFER HARRIMAN, DANT B
• Application Number:
  US12/370,350
• Publication Number:
  US 20100205660A1
• Time in Patent Office: 2,602 Days
• Field of Search: 726/6
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

A system, method and program product for recording the creation of a cancelable biometric reference template in a biometric event journal record. The method includes providing a base biometric reference template having a unique base reference template identifier that uniquely identifies base biometric data collected for an individual, applying a data transform function having a first function key value to the base biometric reference template to create one cancelable biometric reference template and recording the one cancelable biometric reference template in a biometric event journal record. The method further includes creating additional cancelable biometric reference templates using different function key values of the data transform function. The method further includes encrypting the data transform function and the function key value applied to the base biometric reference template. The method further includes signing the cancelable biometric reference template and signing the biometric event journal with a digital signature.

Claims

1. A method for recording creation of a cancelable biometric reference template, said method comprising:

creating, by a processor of a computer system, a base biometric reference template, said creating comprising inserting, into the base biometric reference template, a unique base biometric reference template identifier that uniquely identifies base biometric data collected for an individual, the base biometric data, and a biometric type indicator providing an indication of a portion of the individual'"'"'s body used for collecting the base biometric data;

said processor applying a data transform function having a function key value to the base biometric reference template to create a cancelable biometric reference template; and

said processor recording the cancelable biometric reference template in a biometric event journal record.

2. The method of claim 1, said method further comprising:

said processor signing the cancelable biometric reference template with a digital signature.

3. The method of claim 1, said method further comprising:

after said recording, said processor signing the biometric event journal record with a digital signature.

4. The method of claim 1, said method further comprising:

said processor encrypting the data transform function applied to the base biometric reference template; and

said processor encrypting the function key value.

5. The method of claim 1, said method further comprising:

said processor inserting into the biometric event journal record;

the biometric reference template, the cancelable biometric reference template, the data transform function, and the data transform function key value.

6. A process for deploying computing infrastructure comprising integrating computer-readable code into a computer system, wherein said the code in combination with said computer system is capable of performing a method for recording creation of a cancelable biometric reference template, said method comprising:

creating, by a processor of the computer system, a base biometric reference template, said creating comprising inserting, into the base biometric reference template, a unique base biometric reference template identifier that uniquely identifies base biometric data collected for an individual, the base biometric data, and a biometric type indicator providing an indication of a portion of the individual'"'"'s body used for collecting the base biometric data;

said processor applying a data transform function having a function key value to the base biometric reference template to create a cancelable biometric reference template; and

said processor recording the cancelable biometric reference template in a biometric event journal record.

7. The process of claim 6, said method further comprising:

said processor signing the cancelable biometric reference template with a digital signature.

8. The process of claim 6, said method further comprising:

after said recording, said processor signing the biometric event journal record with a digital signature.

9. The process of claim 6, said method further comprising:

said processor encrypting the data transform function applied to the base biometric reference template; and

said processor encrypting the function key value.

10. The process of claim 6, said method further comprising:

said processor inserting into the biometric event journal record;

the biometric reference template, the cancelable biometric reference template, the data transform function, and the data transform function key value.

11. A computer system comprising a processor, a memory coupled to the processor, and a computer readable storage device coupled to the processor, said storage device containing program code configured to be executed by the processor via the memory to implement a method for recording creation of a cancelable biometric reference template, said method comprising:

said processor creating a base biometric reference template, said creating comprising inserting, into the base biometric reference template, a unique base biometric reference template identifier that uniquely identifies base biometric data collected for an individual, the base biometric data, and a biometric type indicator providing an indication of a portion of the individual'"'"'s body used for collecting the base biometric data;

said processor applying a data transform function having a function key value to the base biometric reference template to create a cancelable biometric reference template; and

said processor recording the cancelable biometric reference template in a biometric event journal record.

12. The computer system of claim 11, said method further comprising:

said processor signing the cancelable biometric reference template with a digital signature.

13. The computer system of claim 11, said method further comprising:

after said recording, said processor signing the biometric event journal record with a digital signature.

14. The computer system of claim 11, said method further comprising:

said processor encrypting the data transform function applied to the base biometric reference template; and

said processor encrypting the function key value.

15. The computer system of claim 11, said method further comprising:

said processor inserting into the biometric event journal record the biometric reference template, the cancelable biometric reference template, the data transform function, and the data transform function key value.

16. A computer program product, comprising a computer readable storage device having a computer readable program code stored therein, said program code configured to be executed by a processor of a computer system to implement a method for recording creation of a cancelable biometric reference template, said method comprising:

said processor creating a base biometric reference template, said creating comprising inserting, into the base biometric reference template, a unique base biometric reference template identifier that uniquely identifies base biometric data collected for an individual, the base biometric data, and a biometric type indicator providing an indication of a portion of the individual'"'"'s body used for collecting the base biometric data;

said processor applying a data transform function having a function key value to the base biometric reference template to create a cancelable biometric reference template; and

said processor recording the cancelable biometric reference template in a biometric event journal record.

17. The computer program product of claim 16, said method further comprising:

said processor signing the cancelable biometric reference template with a digital signature.

18. The computer program product of claim 16, said method further comprising:

after said recording, said processor signing the biometric event journal record with a digital signature.

19. The computer program product of claim 16, said method further comprising:

said processor encrypting the data transform function applied to the base biometric reference template; and

said processor encrypting the function key value.

20. The computer program product of claim 16, said method further comprising:

said processor inserting into the biometric event journal record the biometric reference template, the cancelable biometric reference template, the data transform function, and the data transform function key value.