Bio-cryptography: secure cryptographic protocols with bipartite biotokens
View Patent ↗Techniques, systems and methods are described relating to combining biometric and cryptographic techniques to support securely embedding data within a token and subsequent biometrically-enabled recovery of said data. Various transformation approaches are described that provide a secure means for transforming a stored or live, secure biometric-based identity token, embedding data into such tokens and biometric-based matching to both verify the user's identity and recover the embedded data. Security enhancements to a range of existing protocols are described using the techniques. Systems using novel protocols based on these techniques are described.
1. A digital key embedding biometric-based authentication method for authenticating users, and/or authenticating data, and/or verifying the data/sender/receiver for a message and/or secure key transmission/storage, said digital key embedding biometric-based authentication method comprising the steps of:
encoding a biometric data to form a biotoken, wherein the biotoken has a stable portion and an unstable portion, wherein the stable portion has a repeatable value;
computing a bipartite biotoken by transforming the biotoken of a user, wherein the bipartite biotoken is a combination of the digital key and the biotoken;
transferring the bipartite biotoken;
receiving the transferred bipartite biotoken; and
deriving the digital key from the bipartite biotoken and a matching biotoken associated with the user.
2. The method of claim 1 , wherein the step of computing the bipartite biotoken is performed at a client where the user is located.
3. The method of claim 1 , wherein the step of computing the bipartite biotoken is performed at a server.
4. The method of claim 3 , wherein the biotoken is stored at the server where the user is enrolled.
5. The method of claim 4 , wherein the biotoken is computed at a client by scanning the biometric.
6. The method of claim 5 , wherein the biometric is not stored.
7. The method of claim 1 , wherein the digital key is stored as the coefficients of a polynomial.
8. The method of claim 7 , further including the step of:
evaluating the polynomial at a plurality of locations derived from the biotoken;
wherein the bipartite biotoken does not include the plurality of locations.
9. A digital key embedding biometric-based authentication method for authenticating users, and/or authenticating data, and/or verifying the data/sender/receiver for a message and/or secure key transmission/storage, said digital key embedding biometric-based authentication method comprising the steps of:
receiving, at a first party, a bipartite biotoken from a second party and a claimed identity, wherein the bipartite biotoken is a combination of a key and a biotoken, wherein the biotoken has an encrypted portion and an unencrypted portion, wherein the encrypted portion is a repeatable value;
determining, at the first party, if the key can be recovered from the bipartite biotoken using a matching biotoken associated with the claimed identity;
when the key can be recovered from the bipartite biotoken using the matching biotoken associated with the claimed identity, authenticating both parties.
10. The method of claim 9 , further including the steps of;
transmitting the key to the second party;
determining if the key from the first party is the same as a key generated at the second party;
when the key from the first party is the same as the key generated at the second party, authenticating the first party.
11. The method of claim 9 , wherein the second party generates a one time key and combines it with the biotoken to create the bipartite biotoken.
12. The method of claim 11 , wherein the biotoken is created by encoding a biometric data of a user.
13. The method of claim 9 , wherein the step of determining if the key can be recovered includes determining a plurality of coefficients of a polynomial.
14. The method of claim 11 , wherein the step of generating the bipartite biotoken includes the step of hashing portions of the biotoken.
15. A digital key embedding biometric-based authentication method for authenticating users, and /or authenticating data, and/or verifying the data/sender/receiver for a message and/or secure key transmission/storage, said digital key embedding biometric-based authentication method comprising the steps of:
transferring a transaction ID from an embedding party to a matching party;
transforming a match biotoken using the transaction ID and an embed data to form a bipartite biotoken at the embedding party, wherein the match biotoken has a stable portion and an unstable portion;
transferring the bipartite biotoken from the embedding party to the matching party;
converting a biometric sample into a probe biotoken at the matching party;
recovering the embedded data using the probe biotoken, the transaction ID and the bipartite biotoken at the matching party.
16. The method of claim 15 , wherein the biometric sample includes at least one fingerprint.
17. The method of claim 15 , wherein the biometric sample includes an image of part of a face.
18. The method of claim 15 , wherein the step of transforming the match biotoken into the bipartite biotoken includes the step of storing the embedded data as coefficients of a polynomial.
19. The method of claim 18 , further including the step of:
evaluating the polynomial at a plurality of locations derived from the match biotoken;
wherein the bipartite biotoken does not include the plurality of locations.
20. The method of claim 15 , further including the step of: transferring the embedded data from the matching party to the embedding party.