Steganographic image encoding of biometric template information on a card

1. A method comprising:

communicating, by an application executing on a processor circuit of a computer device and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

performing at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receiving a steganographic image to authenticate a user associated with the computer device, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by:

certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

2. The method of claim 1 , further comprising:

authenticating the user using the steganographic image.

3. The method of claim 2 , the method further comprising:

comparing a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

4. The method of claim 1 , wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises:

receiving, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key; and

subsequent to the verification of the digital signature, receiving a message that the user has been authenticated at the third-party device.

5. The method of claim 1 , wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key;

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

6. The method of claim 1 , wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises:

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key;

determining if a transaction associated with the communication with the third-party device exceeds a monetary threshold amount; and

if the transaction exceeds the monetary threshold amount, perform an additional security confirmation measure, and

if the transaction does not exceed the monetary threshold amount, receive a message that the user has been authenticated at the third-party device.

7. The method of claim 6 , wherein the third-party device includes a fingerprint scanning device, and wherein the additional security confirmation measure comprises:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

8. The method of claim 6 , wherein the third-party device includes a fingerprint scanning device and a fingerprint scanning device, and wherein the additional security confirmation measure comprises:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user;

transmitting both the scanned fingerprint template and the received fingerprint template to a server;

comparing, at the server, the scanned fingerprint template to the received fingerprint template for a match; and

receiving, at the third-party device and from the server, an indication confirming the match.

9. The method of claim 1 , wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

in response to the communication, scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user;

transmitting both the scanned fingerprint template and the received fingerprint template to a server;

comparing, at the server, the scanned fingerprint template to the received fingerprint template for a match; and

if the scanned fingerprint template and the received fingerprint template match, then initiate a verification transaction comprising:

receiving, by the application and from the contactless card, a public key of a key pair of the contactless card;

instructing, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receiving the digital signature from the card;

verifying the digital signature using the public key; and

subsequent to the verification of the digital signature, receiving a message that the user has been authenticated at the third-party device.

10. The method of claim 1 , further comprising:

storing the steganographic image on a server.

11. The method of claim 10 , wherein the third-party device includes a digital reader and a fingerprint scanning device, and wherein performing the at least one verification operation comprises:

determining, by the application executing on the processor circuit, that a user has initiated a transaction with the third-party device in order to identify the user;

receiving, by the application, encrypted data from the communications interface of the contactless card, the encrypted data generated based a cryptographic algorithm and a diversified key, the diversified key stored in a memory of the contactless card and generated based on a master key and a counter value stored in the memory of the contactless card;

receiving, by the application from the server, verification of the encrypted data, the server to decrypt the encrypted data based on the cryptographic algorithm and the diversified key stored in a memory of the server to verify the encrypted data, the diversified key stored in the memory of the server generated based on a master key and a counter value stored in the memory of the server; and

receiving, by the application from the server, the steganographic image from the server.

12. The method of claim 11 , further comprising:

scanning a finger of the user associated with the fingerprint template using the fingerprint scanning device to extract a scanned fingerprint template from the user; and

comparing the scanned fingerprint template to the received fingerprint template for a match.

13. An apparatus, comprising:

a processor circuit; and

a memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

communicate, by an application executing on the processor circuit and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

perform at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receive a steganographic image to authenticate a user, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by: certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

14. The apparatus of claim 13 , the memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

authenticate the user using the steganographic image.

15. The apparatus of claim 14 , the memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

compare a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

16. The apparatus of claim 13 , wherein the third-party device includes a digital reader, and wherein the instructions to perform the at least one verification operation comprise instructions which when executed by the processor circuit cause the processor circuit to:

receive, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instruct, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receive the digital signature from the card;

verify the digital signature using the public key; and

subsequent to the verification of the digital signature, receive a message that the user has been authenticated at the third-party device.

17. A non-transitory computer-readable storage medium comprising computer-readable instructions executable by a processor circuit to cause the processor circuit to:

communicate, by an application executing on the processor circuit and using near field communication (NFC), with a contactless card, the contactless card having a radio frequency identification (RFID) chip, and the contactless card being within an NFC range of a digital reader associated with a third-party device;

perform at least one verification operation by the application and in communication with the contactless card; and

responsive to performing the at least one verification operation and in communication with the contactless card, receive a steganographic image to authenticate a user, wherein the steganographic image includes a government issued identification of the user steganographically encoded with a fingerprint template of the user, wherein the steganographic image is created by:

certifying the image of the identification of the user as authentic at a verification device; and

creating the steganographic image at the verification device after certification.

18. The computer-readable storage medium of claim 17 , comprising instructions executable by the processor circuit to cause the processor circuit to:

authenticate the user using the steganographic image.

19. The computer-readable storage medium of claim 18 , comprising instructions executable by the processor circuit to cause the processor circuit to:

compare a first application user credential with a stored second application user credential, the stored second application user credential being associated with a user identity, wherein the performing of the at least one verification operation is responsive finding a match between the first application user credential and the stored second application user credential.

20. The computer-readable storage medium of claim 17 , wherein the third-party device includes a digital reader, and wherein performing the at least one verification operation comprises instructions executable by the processor circuit to cause the processor circuit to:

receive, by the application from the contactless card, a public key of a key pair of the contactless card and a user identification, the user identification including the steganographic image;

instruct, by the application, generation of a digital signature by the card using a private key of the key pair of the card;

receive the digital signature from the card;

verify the digital signature using the public key; and

subsequent to the verification of the digital signature, receive a message that the user has been authenticated at the third-party device.