Method and device for parameterising a device for performing banking operations
A method for parameterising a device for performing banking operations in which biometric data of the holder of the device for performing banking operations are used to authenticate the user of the device. The present invention: activates a plurality of commands using identifiers of a standard relating to banking transactions available for effecting commands not predefined by the standard; creates, from an identifier of the standard relating to banking transactions available for effecting commands not predefined by the standard, in the device for performing banking operations, a container able to store reference biometric data of a user of the device for performing banking operations; and stores reference biometric data, using an identifier of the standard relating to banking transactions available for effecting commands not predefined by the standard, in the container of reference biometric data of the user of the device for performing banking operations.
1. A method incorporating a device for performing banking operation in which biometric data of a user of the device for performing banking operation are used to authenticate the user of the device for performing banking operation, wherein the method comprises:
activating, in the device for performing banking operation by a module for activating the biometric function implemented in the device for performing banking operation, a biometric data functionality for authenticating the user of the device for performing banking operation, the activating by the module for activating the biometric function being performed by setting a parameter to a first value and when the parameter is positioned at the first value, then functionality of authentication by biometric data is activated and it is then possible to parameterise the application for authenticating of a bearer by at least a verification of biometric data, and when the parameter is positioned at a second value that is different from the first value, the device for performing banking operation behaves as a device for performing banking operations where authentication is performed by using a candidate authentication code;
activating a plurality of commands, wherein a standard relates to the banking operation, wherein the standard has first identifiers or subsets of first identifiers reserved by the standard for identifying all data a creation of which is necessary for a correct functioning of a specific banking application, wherein the standard specifies a subset of second identifiers not already reserved and thus left available after the first identifiers of the subsets of the first identifies have been reserved by the standard, the identifiers used for activating the plurality of commands being identifiers of the subset of the second identifiers left available,
creating in the device for performing the banking operation, a container able to store reference biometric data of the user of the device for performing the banking operation,
storing reference biometric data in the container of reference biometric data of the user of the device for performing the banking operation.
2. The method according to claim 1 , wherein the method further comprises the steps of:
receiving candidate biometric data for the banking operation,
comparing the candidate biometric data with a reference biometric data, and
authorising or rejecting the banking operation according to the comparison.
3. The method according to claim 1 , wherein the method further comprises the step of storing, in the device for performing banking operations, instructions able to process at least one of the following commands: verification of biometric data without enciphering, verification of biometric data with enciphering, unblocking an error counter, reading an error counter.
4. The method according to claim 1 , wherein the method further comprises the step of storing, in the device for performing banking operation, instructions able to process the recording of biometric data subsequently to the supply of the device for performing banking operation to the user of the device.
5. The method according to claim 1 , wherein, in a case of rejection of the banking operation, the method further comprises a step of incrementing a rejection counter.
6. The method according to claim 5 , wherein the method further comprises comparing the value of the rejection counter with a predetermined value and, if the value of the rejection counter is equal to the predetermined value, selecting another method for authenticating the user of the device and, where applicable, rejecting any banking operation as long as an updating of the rejection counter is not made.
7. The method according to claim 5 , wherein, when the rejection counter is updated, the method further comprises a step of updating in the container new reference biometric data of the user of the device for performing banking operations.
8. The method according to claim 1 , wherein, if biometric data functionality is not activated, the method comprises:
receiving the candidate authentication code for a banking operation,
comparing the candidate authentication code for the banking operation with a reference code stored in the device for performing banking operation, and
authorising or rejecting the banking operation according to the comparison of the candidate authentication code with the reference code.
9. A non-transitory information carrier storing a computer program thereon, said program containing instructions for implementing the method according to claim 1 when the instructions are loaded onto and executed by a computer system.
10. A device for performing banking operation in which biometric data of a user of the device for performing banking operation are used to authenticate the user of the device for performing banking operation, wherein the device comprises circuitry arranged for:
activating, in the device for performing banking operation by a module for activating the biometric function implemented in the device for performing banking operation, a biometric data functionality for authenticating the user of the device for performing banking operation, the activating by the module for activating the biometric function being performed by setting a parameter to a first value and when the parameter is positioned at the first value, then functionality of authentication by biometric data is activated and it is then possible to parameterise the application for authenticating of a bearer by at least a verification of biometric data, and when the parameter is positioned at a second value that is different from the first value, the device for performing banking operation behaves as a device for performing banking operations where authentication is performed by using a candidate authentication code;
creating, in the device for performing the banking operation, a container able to store reference biometric data of the user of the device for performing the banking operation,
storing reference biometric data, in the container of reference biometric data of the user of the device for performing the banking operation.
11. A chip card comprising the device for performing banking operations according to claim 10 .