BIOMETRIC AUTHENTICATION SYSTEM
An apparatus, method and program product for enabling biometric authentication that includes receiving a biometric submission ( 82 ) at a biometric device ( 60 ), and in response to an authentication of the submission ( 92 ), providing a cryptographic credential ( 68 ) from a computer ( 15, 30 ) to the biometric device ( 60 ) for use in a subsequent cryptographic purpose ( 100 ). In this manner, the biometric device ( 60 ) may subsequently mimic properties of a smart card.
1 . A method of using a biometric to control access to a resource, the method comprising:
receiving a biometric submission at a biometric device;
comparing the biometric submission to a stored biometric record;
determining if there is an acceptable match between the biometric submission and the stored biometric record, and;
in response to the acceptable match, initiating storage at the biometric device of a credential stored at a computer in communication with the biometric device.
2 . The method of claim 1 , further comprising using the credential at the biometric device for a subsequent cryptographic purpose.
3 . The method of claim 1 , further comprising encrypting the biometric submission.
4 . The method of claim 3 , wherein encrypting the biometric submission further comprises digitally signing the biometric submission.
5 . The method of claim 1 , further comprising verifying at the computer that the biometric device is a trusted device.
6 . The method of claim 1 , further wherein initiating the storage of the credential further comprises the computer initiating the storage.
7 . The method of claim 1 , further comprising receiving a user ID.
8 . The method of claim 1 , further comprising updating the credential stored at the computer.
9 . An apparatus, comprising:
a biometric device configured to receive a biometric submission; and
a computer in communication with the biometric device and storing a credential associated with a user, the computer further comprising a program resident in a memory, the program configured to initiate storage at the biometric device of the credential in response to an acceptable match between the biometric submission and a stored biometric record.
10 . The apparatus of claim 9 , wherein the computer is local to the biometric device.
11 . The apparatus of claim 9 , wherein the computer is remote from the biometric device.
12 . The apparatus of claim 9 , wherein the credential stored at the biometric device is used for a subsequent cryptographic purpose.
13 . The apparatus of claim 9 , wherein the program is further configured to encrypt the biometric submission.
14 . The apparatus of claim 9 , wherein the program is further configured to digitally sign the biometric submission.
15 . The apparatus of claim 9 , wherein the program is further configured to verify that the biometric device is a trusted device.
16 . The apparatus of claim 9 , wherein the program is further configured to audit actions of a user attempting to use at least one of the biometric device and the computer to gain access to a resource.
17 . The apparatus of claim 9 , wherein the credential is one of a plurality of credentials associated with a plurality of users.
18 . The apparatus of claim 9 , wherein the program is further configured to update the credential.
19 . The apparatus of claim 9 , wherein the program is further configured to maintain a list of trusted devices within a memory.
20 . A program product, comprising:
program code resident within a computer in communication with a biometric device configured to receive a biometric submission, the program code configured to initiate storage at the biometric device of a credential also stored at the computer in response to an acceptable match between the biometric submission and a stored biometric record; and
a signal bearing medium bearing the program code.