Biometric authentication and identification

1. A method of authenticating a user to an electronic device in a communication network, comprising:

obtaining a biometric characteristic of the user,

transmitting, to a social networking service, information that specifies at least one primary user of the device,

receiving, from the social networking service, information that specifies a group of persons who have a social relationship with the at least one primary user,

obtaining information that specifies a result from a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons, the result indicating whether or not the user is authenticated to the electronic device.

2. The method of claim 1 , wherein

the transmission of information that specifies at least one primary user of the device comprises transmission of at least one limiting parameter for limiting the number of persons in the specified group of persons.

3. The method of claim 2 , wherein the transmission of at least one limiting parameter comprises transmission of a number that specifies the maximum number of persons in the specified group of persons.

4. The method of claim 2 , wherein the transmission of at least one limiting parameter comprises transmission of information that specifies types of relationships between the at least one primary user and persons in a social network of the user.

5. The method of claim 2 , wherein the transmission of at least one limiting parameter comprises transmission of information that specifies at least one characteristic parameter relating to the performance of the device in obtaining the biometric characteristic of the user.

6. The method of claim 5 , wherein the transmission of information that specifies at least one characteristic parameter relating to the performance of the device in obtaining the biometric characteristic of the user comprises transmission of information related to any of a false acceptance rate and a false rejection rate.

7. The method of claim 2 , comprising determining, depending on the obtained information of the result of the biometric matching, whether or not the user is authenticated to access a user desired service 104 ).

8. The method of claim 7 , wherein the transmission of at least one limiting parameter comprises transmission of at least one limiting parameter that is obtained from a provider of the desired service.

9. The method of claim 1 , comprising:

transmitting, to an identity provider, information of the specified group of persons,

receiving, from the identity provider, biometric characteristics of the persons in the specified group of persons, and

wherein the obtaining of information that specifies a result from a biometric matching operation comprises performing the matching operation.

10. The method of claim 9 , wherein:

the reception, from the identity provider, of biometric characteristics of persons in the social network comprises reception of secure biometric templates and helper data associated with the secure biometric templates, and

the matching operation comprises utilizing the secure biometric templates and the helper data.

11. The method of claim 1 , comprising:

transmitting, to an identity provider, the biometric characteristic of the user and information of the specified group of persons, and wherein the obtaining of information that specifies a result from a biometric matching operation comprises:

receiving information, from the identity provider, that specifies a result from a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons.

12. The method of claim 11 , comprising:

receiving, from the identity provider, helper data related to biometric templates that are associated with the persons in the specified group of persons,

generating biometric templates using the helper data and the biometric characteristic of the user, and

transmitting the generated biometric templates to the identity provider.

13. Electronic device comprising biometric input means, processing and communication circuitry that are configured to authenticating a user to the electronic device in a communication network, the circuitry being configured to:

obtain a biometric characteristic of the user,

transmit, to a social networking service, information that specifies at least one primary user of the device,

receive, from the social networking service, information that specifies a group of persons who have a social relationship with the at least one primary user, and

obtain information that specifies a result from a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons; the result indicating whether or not the user is authenticated to the electronic device.

14. A non-transitory computer readable media comprising software instructions that, when executed in a processing unit, performs a method of authenticating a user in relation to an electronic device in a communication network, the method comprising:

obtaining a biometric characteristic of the user,

transmitting, to a social networking service, information that specifies at least one primary user of the device,

receiving, from the social networking service, information that specifies a group of persons who have a social relationship with the at least one primary user, and

obtaining information that specifies a result from a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons, the result indicating whether or not the user is authenticated to the electronic device.

15. A method of enabling authentication of a user in a communication network, comprising:

receiving information that specifies at least one primary user,

receiving a biometric characteristic of the user,

obtaining information that specifies a group of persons who have a social relationship with the at least one primary user, and

performing a biometric matching operation with the biometric characteristic of the user and biometric characteristics or persons in the specified group of persons, the result indicating whether or not the user is authenticated.

16. Apparatus comprising processing and communication circuitry that are configured to enable authentication of a user in a communication network, the circuitry being configured to:

receive information that specifies at least one primary user,

receive a biometric characteristic of the user,

obtain information that specifies a group of persons who have a social relationship with the at least one primary user, and

perform a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons, the result indicating whether or not the user is authenticated.

17. A non-transitory computer readable media comprising software instructions that, when executed in a processing unit, performs a method of enabling authentication of a user in a communication network, the method comprising:

receiving information that specifies at least one primary user,

receiving a biometric characteristic of the user,

obtaining information that specifies a group of persons who have a social relationship with the at least one primary user, and

performing a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons, the result indicating whether or not the user is authenticated.