OFF-DEVICE BIOMETRIC ENROLMENT

1 . A method of enrolling an authorised user onto a biometrically-authorisable device having an on-board fingerprint sensor, the method comprising:

capturing a representation of a fingerprint of the authorised user using a fingerprint sensor on an enrolment terminal that is separate from the biometrically-authorisable device, the fingerprint sensor of the enrolment terminal being larger than the fingerprint sensor of the biometrically-authorisable device;

generating a plurality of fingerprint templates from the captured fingerprint representation, wherein each fingerprint template defines an area of the fingerprint corresponding to the size of the fingerprint sensor of the biometrically-authorisable device; and

transmitting the plurality of fingerprint templates for storage on the biometrically-authorisable device.

2 . A method according to claim 1 , wherein the biometrically-authorisable device is configured to authenticate a bearer of the device when a fingerprint captured by the fingerprint sensor of the biometrically-authorisable device matches at least one of the plurality of fingerprint templates.

3 . A method according to claim 1 , wherein the plurality of fingerprint templates is generated from only the captured representation.

4 . A method according to claim 1 , wherein at least two of the plurality of templates respectively cover areas of the fingerprint that partially overlap one another.

5 . A method according to claim 1 , wherein the plurality of fingerprint templates are non-uniformly distributed across the captured fingerprint representation.

6 . A method according to claim 1 , wherein generating the plurality of fingerprint templates comprises:

identifying at least one region of interest within the representation of the fingerprint, and

generating the plurality of fingerprint templates such that the area of interest is captured by a greater number of the fingerprint templates than an area of lesser interest.

7 . A method according to claim 6 , wherein the area of interest comprises at least one of:

a distinctive features of the fingerprint, such as a whorl of the fingerprint; and

an area of the fingerprint having a higher likelihood of regions of being captured by the fingerprint sensor of the biometrically-authorisable device than the area of lesser interest, such as the centre of the fingerprint.

8 . A method according to claim 1 , wherein the plurality of fingerprint templates each comprise minutiae data.

9 . A method according to claim 1 , wherein the plurality of fingerprint templates is transmitted from the enrolment terminal to the biometrically-authorisable device via a wide-area network, and preferably via the internet.

10 . A method according to claim 9 , wherein the plurality of fingerprint templates is transmitted from the enrolment terminal to a device provider, and wherein the device provider stores the plurality of fingerprint templates on the biometrically-authorisable device prior to issuing the biometrically-authorisable device to the user.

11 . A method according to claim 1 , wherein the plurality of fingerprint templates is transmitted directly from the enrolment terminal to the biometrically-authorisable device.

12 . A method according to claim 1 , wherein the plurality of fingerprint templates is transmitted from the enrolment terminal to the biometrically-authorisable device in encrypted form, and wherein a decryption key to decrypt the plurality of fingerprint templates is stored on the biometrically-authorisable device.

13 . A system for enrolling an authorised user onto a biometrically-authorisable device having an on-board fingerprint sensor, the system comprising:

an enrolment terminal that is separate from the biometrically-authorisable device, the enrolment terminal comprising a fingerprint sensor for capturing a representation of a fingerprint of the authorised user, and the fingerprint sensor of the enrolment terminal being larger than the fingerprint sensor of the biometrically-authorisable device,

wherein the system is configured to determine a size of the on-board fingerprint sensor of the biometrically-authorisable device and to generate a plurality of fingerprint templates from the captured fingerprint representation based at least in part on the size of the on-board fingerprint sensor of the biometrically-authorisable device, wherein each fingerprint template defines an area of the fingerprint corresponding to the size of the fingerprint sensor of the biometrically-authorisable device, and wherein the system is configured to communicate the plurality of fingerprint templates for storage on the biometrically-authorisable device.

14 . A system according to claim 13 , wherein the system comprises an enrolment processing unit for generating the plurality of fingerprint templates and a communications interface for communicating the plurality of fingerprint templates to the biometrically-authorisable device, wherein the enrolment processing unit preferably includes a secure processing environment.

15 . A system according to claim 14 , wherein the communicating of the plurality of fingerprint templates to the biometrically-authorisable device is performed directly from the enrolment processing unit.

16 . A system according to claim 14 , wherein the enrolment processing unit is configured to operate remotely from the biometrically-authorisable device, the enrolment processing unit is configured to communicate the templates to the biometrically-authorisable device indirectly via a network, and wherein the enrolment processing unit is preferably located in a secure location.

17 . A system according to claim 13 , wherein the fingerprint sensor of the enrolment terminal has a higher resolution than the fingerprint sensor of the biometrically-authorisable device.

18 . A system according to claim 13 , wherein system is configured to generate the plurality of fingerprint templates such that they are non-uniformly distributed across the captured fingerprint representation.