Method and system for securing user access, data at rest and sensitive transactions using biometrics for mobile devices with protected, local templates
Biometric data are obtained from biometric sensors on a stand-alone computing device, which may contain an ASIC, connected to or incorporated within it. The computing device and ASIC, in combination or individually, capture biometric samples, extract biometric features and match them to one or more locally stored, encrypted templates. The biometric matching may be enhanced by the use of an entered PIN. The biometric templates and other sensitive data at rest are encrypted using hardware elements of the computing device and ASIC, and/or a PIN hash. A stored obfuscated Password is de-obfuscated and may be released to the authentication mechanism in response to successfully decrypted templates and matching biometric samples. A different de-obfuscated password may be released to authenticate the user to a remote or local computer and to encrypt data in transit. This eliminates the need for the user to remember and enter complex passwords on the device.
1. A mobile device comprising:
at least one processor configured to execute software applications;
software included in at least one storage area;
at least one sensor configured to acquire biometric data, wherein the biometric data includes at least one of: a fingerprint image, a facial image, an iris image, and a voice;
wherein said mobile device configured to:
capture an identity verification credential from the user;
biometrically enroll the identity of the user by capturing one or more biometric samples representing one or more biometric modalities, from the at least one sensor, and calculating one or more biometric templates;
securely store the one or more biometric templates in a hardware protected manner without persistent storage of the biometric template in a non-secured manner;
and;
wherein, upon subsequent mobile device enablement, responsive to a successful match of one or more subsequent biometric samples to one or more of the securely stored biometric templates release access to one or more protected function of the mobile device.
2. The mobile device of claim 1 , wherein the secure storing of the one or more biometric templates comprises encryption of the one or more biometric templates using at least one hardware rooted key.
3. The mobile device of claim 1 where the user identity verification credential includes a numeric or alphanumeric PIN.
4. The mobile device of claim 1 wherein the protected function comprises at least one of the following:
conducting a payment transaction on behalf of the user;
allowing the user to view or change secure information stored on a local computer, or the remote computer.
5. The device of claim 1 where the data of the biometric sample are manipulated to allow the data to be effectively used for matching despite being submitted at varying angles or at substantially any angle.
6. The device of claim 1 wherein the at least one processor is configured to operate with a secure co-processor that enables at least in part the secure storage of biometric templates and the secure co-processor processes the subsequent biometric samples to determine if there is a match of the one or subsequent biometric samples to one or more of the the securely stored biometric templates.
7. The device of claim 1 wherein the co-processor is used to create at least one hardware rooted encryption key and the secure storage of biometric templates comprising encryption of the one or more biometric templates with the at least one hardware rooted encryption key.
8. The device of claim 1 wherein the co-processor operates with a trusted cryptographically authenticated firmware component.
9. The device of claim 1 , wherein the secure storing of the one or more biometric templates comprising storing the one or more of biometric templates in a hardware secured portion of mobile device memory.
10. The mobile device of claim 1 , where, in the event the said one or more subsequent biometric samples do not match the one or more biometric templates, the mobile device performs failure actions according to a defined policy.
11. The mobile device of claim 1 wherein the protected function comprises releasing a securely stored password for a web site.
12. The mobile device of claim 1 wherein the protected function comprises allowing user to use a software application on the mobile device.
13. A mobile device comprising:
at least one processor;
software contained in at least one storage area;
at least one sensor configured to acquire biometric data, wherein the biometric data includes at least one of: a fingerprint image, a facial image, an iris image, and a voice;
wherein, said mobile device configured to implement biometric template security and acquisition functions including:
capture an identity verification credential from the user;
biometrically enroll the identity of the user by capturing one or more biometric samples representing one or more biometric modalities, from the at least one sensor, and calculating one or more biometric templates;
securely store the one or more biometric templates in a hardware-secured portion of the mobile device memory without persistent storage of the biometric template in a non-secured manner;
and
wherein, upon subsequent mobile device enablement, responsive to a successful match of one or more subsequent biometric samples to one or more of the securely stored biometric templates release access to a protected function of the mobile device.
14. The mobile device of claim 13 where the user identity verification credential includes a numeric or alphanumeric PIN.
15. The mobile device of claim 14 where the said protected function includes one or more of the following:
conducting a payment transaction on behalf of the user without the user having to enter a verification credential;
allowing the user to view or change secure information stored on one of a local, or a remote computer without having to enter a verification credential; and
automatically submitting a verification credential to a secure computer or website to allow the user to gain access without the user having to re-enter the verification credential.
16. The device of claim 13 where the data of the biometric samples are manipulated to allow the data to be effectively used for matching despite being submitted at varying angles or at substantially any angle.
17. The device of claim 13 , wherein the device is configured to learn more about the user's biometrics as they change over time.
18. The device of claim 13 wherein the at least one processor is configured to operate with a co-processor that accesses the hardware-secured portion of mobile device memory in a manner that it can be accessed only by a trusted software on the co-processor.
19. The device of claim 18 wherein the co-processor is used to create an encryption key.
20. The device of claim 13 wherein the co-processor operates with a secure firmware component.
21. The device of claim 13 , wherein one or more of an unencrypted biometric templates are stored in the hardware-secured portion of mobile device memory.
22. The device of claim 13 , wherein the device automatically calculates updated biometric templates from new biometric samples.
23. The device of claim 22 , wherein upon calculation of an updated biometric template, the device automatically:
stores the updated biometric template in the hardware-secured portion of the mobile device memory.
24. The device of claim 23 , wherein the stored updated biometric template is encrypted.
25. The device of claim 13 , where, in the event the match is not successful, the mobile device performs failure actions according to a defined policy.
26. A method for allowing access to a computing device comprising:
providing a mobile device with at least one processor;
providing at least one storage area within the mobile device;
using at least one biometric sensor, wherein the at least one biometric sensor include at least one of: a fingerprint image sensor, a facial image sensor, an iris image sensor, and a voice print sensor;
using at least one processor, and software contained within the one or more storage areas, wherein, upon enablement of said computing device, and prior to executing at least some of the software, the software causes said processor to:
capture an identity verification credential from the user;
biometrically enroll the identity of the user by capturing one or more biometric samples representing one or more biometric modalities, from one or more of the biometric sensors, and calculating one or more biometric templates;
encrypt the biometric templates using an algorithm and a hardware rooted key;
store the one or more biometric templates in a secure portion of computing device memory; and
wherein, upon subsequent device enablement, commencing processing, responsive to one or both of a successful match of an identity verification credential entered by the user to the previously captured user identity verification credential, and the successful match of one or more subsequent biometric samples to one or more of the biometric templates.
27. The method of claim 26 , further comprising encrypting a portion of computing device memory space with the at least one processor.
28. The method of claim 26 wherein the said processing includes:
capturing one or more biometric samples from the user;
communicating encrypted features calculated from the said biometric samples to said local, remote, and local and a remote computer and;
responsive to a successful match by the remote computer of the biometric features calculated from the biometric samples with a decrypted biometric template stored on a local computer, authorizing one of said local, or remote computers to perform one or both of the following:
conduct a payment transaction on behalf of the user;
allow the user to view or change secure information stored on one of said local, remote, and a local and remote computer.
29. The method of claim 28 wherein the remote computer is a cloud-based computer.
30. The method of claim 26 further comprising manipulating biometric sample data to allow the data to be used for effective matching despite being submitted at varying angles of acquisition or at substantially any angle.
31. The method of claim 26 , further comprising learning more about the user's biometrics as they change over time.
32. The method of claim 26 further comprising configuring the at least one processor to operate with a co-processor that operates on encrypted data.
33. The method of claim 32 further comprising creating an encryption key with the co-processor.
34. The device of claim 33 further comprising determining if there is a match with a stored biometric template using the co-processor.
35. The method of claim 26 further comprising the co-processor operating with a secure firmware component.
36. The method of claim 26 , further comprising storing one or more of an unencrypted biometric template in a secure portion of computing device memory.
37. The method of claim 26 , further comprising automatically calculating updated biometric templates from new biometric samples.
38. The method of claim 37 , wherein upon calculation of an updated biometric template, the device automatically:
encrypts the updated biometric templates using an algorithm and a hardware rooted key; and
stores the updated biometric template in a secure portion of computing device memory.
39. The method of claim 38 , wherein the stored updated biometric template is encrypted.
40. The method of claim 26 , further comprising performing failure actions according to a defined policy in the event the said one or more subsequent biometric samples do not match the decrypted one or more biometric templates.