Granted Patent B2

US 12,301,566 · App. 18/394,883 · Granted May 13, 2025

Inventors: Phillip H. Griffin (Raleigh, NC); Jeffrey J. Stapleton (O'Fallon, MO)

Assignee: Wells Fargo Bank, N.A.

H04L63/0861H04L9/3242H04L9/3247H04L63/061H04L63/0807H04L63/083

Abstract

Claims (36)

1. A method, comprising:

generating a first cryptographic key using a first knowledge factor corresponding to an identifier identifying a signing party;

decrypting a biometric electronic signature authenticated key exchange (“BESAKE”) token using the first cryptographic key, wherein the BESAKE token is encrypted using a second cryptographic key derived using a second knowledge factor;

determining a biometric sample and the second knowledge factor from the decrypted BESAKE token; and

authenticating the signing party in response to determining that the biometric sample matching a biometric reference template and in response to verifying a timestamp corresponding to the BESAKE token.

2. The method of claim 1 , wherein the BESAKE token is decrypted via a same encryption algorithm used by the signing party to encrypt the BESAKE token.

3. The method of claim 1 , further comprising:

sending a request to a biometric service provider (“BSP”) computing system, the request comprising the biometric sample; and

receiving a value indicating whether the biometric sample matches the biometric reference template associated with the identifier.

4. The method of claim 1 , wherein the BESAKE token comprises a record for the biometric sample, the record is encrypted using the second cryptographic key.

5. The method of claim 1 , wherein the signing party is authenticated in response to determining that the second knowledge factor matching the first knowledge factor.

6. The method of claim 1 , wherein the second knowledge factor fails to match the first knowledge factor.

7. A system, comprising at least one memory and at least one processor, wherein the at least one processor is configured to:

generate a first cryptographic key using a first knowledge factor corresponding to an identifier identifying a signing party;

decrypt a biometric electronic signature authenticated key exchange (“BESAKE”) token using the first cryptographic key, wherein the BESAKE token is encrypted using a second cryptographic key derived using a second knowledge factor;

determine a biometric sample and the second knowledge factor from the decrypted BESAKE token; and

authenticate the signing party in response to determining that the biometric sample matching a biometric reference template and in response to verifying a timestamp corresponding to the BESAKE token.

8. The system of claim 7 , wherein the BESAKE token is decrypted via a same encryption algorithm used by the signing party to encrypt the BESAKE token.

9. The system of claim 7 , wherein the at least one processor is further configured to:

sending a request to a biometric service provider (“BSP”) computing system, the request comprising the biometric sample; and

receiving a value indicating whether the biometric sample matches the biometric reference template associated with the identifier.

10. The system of claim 7 , wherein the BESAKE token comprises a record for the biometric sample, the record is encrypted using the second cryptographic key.

11. The system of claim 7 , wherein the signing party is authenticated in response to determining that the second knowledge factor matching the first knowledge factor.

12. The system of claim 7 , wherein the second knowledge factor fails to match the first knowledge factor.

13. At least one non-transitory processor readable medium comprising processor-readable instructions, such that, when executed, causes at least one processor to:

generate a first cryptographic key using a first knowledge factor corresponding to an identifier identifying a signing party;

decrypt a biometric electronic signature authenticated key exchange (“BESAKE”) token using the first cryptographic key, wherein the BESAKE token is encrypted using a second cryptographic key derived using a second knowledge factor;

determine a biometric sample and the second knowledge factor from the decrypted BESAKE token; and

authenticate the signing party in response to determining that the biometric sample matching a biometric reference template and in response to verifying a timestamp corresponding to the BESAKE token.

14. The non-transitory processor readable medium of claim 13 , wherein the BESAKE token is decrypted via a same encryption algorithm used by the signing party to encrypt the BESAKE token.

15. The non-transitory processor readable medium of claim 13 , wherein the at least one processor is further caused to:

sending a request to a biometric service provider (“BSP”) computing system, the request comprising the biometric sample; and

receiving a value indicating whether the biometric sample matches the biometric reference template associated with the identifier.

16. The non-transitory processor readable medium of claim 13 , wherein the BESAKE token comprises a record for the biometric sample, the record is encrypted using the second cryptographic key.

17. The non-transitory processor readable medium of claim 13 , wherein the signing party is authenticated in response to determining that the second knowledge factor matching the first knowledge factor.

18. The non-transitory processor readable medium of claim 13 , wherein the second knowledge factor fails to match the first knowledge factor.

Assignments (1)

Continuity (6)

References Cited (54)