Systems and methods for authenticating a biometric device using a trusted coordinating smart device
View Patent ↗Systems and methods for authenticating a biometric device using a trusted coordinating smart device in accordance with embodiments of the invention are disclosed. In one embodiment, a process for enrolling a configurable biometric device with a network service includes obtaining a device identifier (ID) of the configurable biometric device using a coordinating smart device, communicating the device ID from the coordinating smart device to a network service, communicating a first challenge based on a challenge-response authentication protocol from the network service to the coordinating smart device, communicating the first challenge and a response uniform resource locator (URL) from the coordinating smart device to the configurable biometric device, generating a first response to the first challenge and communicating the first response to the network service utilizing the response URL, receiving a secure channel key by the coordinating smart device from the network service, communicating the secure channel key from the coordinating smart device to the configurable biometric device, performing a biometric enrollment process using the configurable biometric device including capturing biometric information from a user, and creating a secure communication link between the configurable biometric device and the network service using the secure channel key when the first response satisfies the challenge-response authentication protocol.
1. A process for enrolling a configurable biometric device with a network service using a coordinating smart device comprising:
obtaining a device identifier (ID) of the configurable biometric device using the coordinating smart device;
communicating the device ID of the configurable biometric device from the coordinating smart device to the network service using a secure communications link;
communicating at least one challenge from the network service to the coordinating smart device, where the at least one challenge is generated based on a challenge-response authentication protocol;
communicating the at least one challenge from the coordinating smart device to the configurable biometric device;
obtaining a response network address by the configurable biometric device from the coordinating smart device;
generating a response to each challenge of the at least one challenge and communicating each response to the network service by the configurable biometric device utilizing the response network address;
receiving a secure channel key by the coordinating smart device from the network service when a predetermined number of the at least one challenge is satisfied by the respective response from the configurable biometric device according to the challenge-response authentication protocol;
communicating the secure channel key from the coordinating smart device to the configurable biometric device;
performing a biometric enrollment process using the configurable biometric device including capturing biometric information from a user; and
creating a secure communication link between the configurable biometric device and the network service using the secure channel key.
2. The method of claim 1 , wherein the challenge-response authentication protocol is a zero-knowledge protocol (ZKP) and the first challenge is generated based on an identifier of the configurable biometric device.
3. The method of claim 1 , wherein obtaining a unique device identifier (ID) of the configurable biometric device using a coordinating smart device comprises scanning a visual tag on the configurable biometric device using a camera on the coordinating smart device.
4. The method of claim 1 , wherein obtaining a unique device identifier (ID) of the configurable biometric device using a coordinating smart device comprises reading a radio frequency tag on the configurable biometric device using radio frequency reader circuitry on the coordinating smart device.
5. The method of claim 1 , further comprising verifying the local presence of the configurable biometric device to the coordinating smart device.
6. The method of claim 1 , further comprising authenticating a user on the coordinating smart device to create the secure communications link between the coordinating smart device and the network service.
7. The method of claim 1 , wherein the coordinating smart device is part of a key-chained cloud service (KCS) and the method further comprises associating the configurable biometric device with the coordinating smart device and the user associated with the coordinating smart device.
8. The method of claim 1 , wherein obtaining a response network address by the configurable biometric device from the coordinating smart device comprises communicating a response network address from the coordinating smart device to the configurable biometric device using a different communication medium than obtaining a device identifier (ID) of the configurable biometric device using a coordinating smart device.
9. The method of claim 1 , wherein obtaining a response network address by the configurable biometric device from the coordinating smart device comprises communicating a response network address from the coordinating smart device to the configurable biometric device utilizes a coded audio signal.
10. The method of claim 1 , wherein obtaining a response network address by the configurable biometric device from the coordinating smart device comprises communicating a response network address from the coordinating smart device to the configurable biometric device utilizes a coded light signal.
11. The method of claim 1 , obtaining a response network address by the configurable biometric device from the coordinating smart device comprises communicating a response network address from the coordinating smart device to the configurable biometric device utilizes a coded radio frequency signal.
12. The method of claim 1 , wherein obtaining a response network address by the configurable biometric device from the coordinating smart device comprises communicating a response network address from the coordinating smart device to the configurable biometric device utilizes a coded radio frequency signal.
13. The method of claim 1 , further comprising sending a plurality of additional challenges from the network service to the coordinating smart device to the configurable biometric device and responding to the additional challenges by the configurable biometric device, allowing a predetermined number of failures, before validating the configurable biometric device and creating a secure communication link.
14. The method of claim 1 , further comprising enrolling a second device with the network service and providing control of the second device using the configurable biometric device.
15. The method of claim 1 , further comprising sending a challenge to at least one other biometric device other than the configurable biometric device, enrolling the at least one other biometric device with the network service, and all enrolled biometric devices are required to activate a feature of the network service.