Biometric authentication system with encrypted models

Claim 3

The method of claim 1 , wherein said biometric model is comprised of a plurality of statistical parameters.

Claim 4

The method of claim 1 , wherein when no matching biometric record is identified, the user is denied access to the secured resource.

Claim 5

The method of claim 1 , wherein the comparison step further comprises: generating a statistical equivalence score; and testing said statistical equivalence score against a pre-determined threshold to determine whether to grant said user access to said secured resource.

Claim 6

The method of claim 1 , wherein the step of acquiring an enrollment biometric sample is obtained indirectly from one or more user supplied input responses.

Claim 7

The method of claim 1 , wherein the step of acquiring a current biometric sample is obtained indirectly from one or more user supplied input responses.

Claim 8

The method of claim 1 , wherein the step of acquiring an enrollment biometric sample is derived directly from a user supplied bio-characteristic.

Claim 9

The method of claim 1 , wherein the step of acquiring a current biometric sample is derived directly from a user supplied bio-characteristic.

Claim 10

The method of claim 1 , further comprising: (a) creating a re-encryption key; (b) performing an encryption operation on said decrypted biometric model to yield a re-encrypted biometric model, said encryption operation using said re-encryption key as input; and (c) replacing said record in the biometric database with said re-encrypted biometric model.

Claim 11

The method of claim 1 , wherein said encryption key generation data is a secret user supplied password.

Claim 12

The method of claim 1 , wherein said encryption key generation data includes a series of answers provided by said user to a series of challenge questions.

Claim 13

The method of claim 1 , wherein the step of generating a first encryption key further comprises: collecting a subset of user provided answers to challenge questions, wherein said subset is comprised of those answers whose index corresponds to each integer from a first challenge list; and concatenating said collected answers to form said first encryption key.

Claim 14

The method of claim 1 , further comprising: encrypting a series of answers to a series of challenge questions; storing said encrypted answers as part of said biometric record; and storing said challenge list as part of said biometric record.

Claim 15

The method of claim 12 , where the integers which comprise the first challenge list are randomly generated.

Claim 16

The method of claim 1 , wherein said encryption key generation data comprises a randomly selected first encryption key.

Claim 17

The method of claim 15 , wherein the step of storing the biometric record further comprises: dividing the randomly selected first encryption key into a plurality of n shares, where n equals the number of challenge questions; combining each of said n shares of said first encryption key with one of the answers to said series of challenge questions thereby forming combined key shares; and storing said plurality of combined key shares.

Claim 18

The method of claim 1 , wherein the step of creating a decryption key from said decryption key generation data further comprises: retrieving combined key shares from an encrypted biometric record; retrieving a challenge list from said biometric record; asking the user challenge questions whose index corresponds to integers from said challenge list; collecting the answers to said challenge questions; and deriving said decryption key by combining said retrieved combined key shares with said answers.

Claim 19

The method according to claim 1 , wherein said encryption key generation data comprises answers to one or more challenge questions directed to a bio-characteristic of said user.

Claim 20

The method according to claim 1 , wherein said first encryption key is a random number with magnitude greater than 127 bits.

Claim 21

The method according to claim 1 , further comprising: encrypting said biometric model using said first encryption key; encrypting answers to a series of challenge questions using said first encryption key; encrypting said first encryption key with a second encryption key; storing said encrypted biometric model and said encrypted answers in one of a first and second database; and storing said encrypted first encryption key in one of a first and second database, wherein the database is different from the selected database from the previous storing step.

Claim 22

The method according to claim 20 , further comprising: creating a new challenge list after a successful decryption operation on an encrypted biometric record; creating a new encryption key using decrypted answers to challenge questions corresponding to said new challenge list; and re-encrypting said first encryption key with the new encryption key.

Claim 23

A program storage device readable by a computer, tangibly embodying a program of instructions executable by the computer to perform method steps for secure handling of data, the method comprising the steps of: (a) acquiring a biometric database of personal identifiers and data comprising: acquiring an enrollment biometric sample, an enrollment record identifier, and encryption key generation data; creating a biometric model from said enrollment biometric sample; creating a first encryption key from said encryption key generation data; performing an encryption operation on said biometric model to yield an encrypted biometric model; storing a biometric record in said database wherein said record is comprised of said encrypted biometric model and said record identifier, (b) verifying the identity of a user desiring access to a secured resource, comprising the steps of: acquiring a current biometric sample, a current record identifier, and a decryption key generation data; identifying a matching biometric record whose enrollment record identifier matches the current record identifier; creating a decryption key from said decryption key generation data; performing a decryption operation on said matching biometric record to extract a decrypted biometric model from said record; and comparing said decrypted biometric model with the current biometric sample to verify the identity of the user for authorizing access to the secured resource.

Claim 24

A program storage device readable by a computer, tangibly embodying a program of instructions executable by the computer to perform method steps for secure handling of data, the method comprising the steps of: (a) acquiring a biometric database of personal identifiers and data comprising: acquiring an enrollment biometric sample, an enrollment record identifier, and encryption key generation data; creating a biometric model from said enrollment biometric sample; creating a first encryption key from said encryption key generation data; performing an encryption operation on said biometric model to yield an encrypted biometric model; storing a biometric record in said database wherein said record is comprised of said encrypted biometric model and said record identifier, (b) verifying the identity of a user desiring access to a secured resource, comprising the steps of: acquiring a current biometric sample, a current record identifier, and a decryption key generation data; identifying a matching biometric record whose enrollment record identifier matches the current record identifier; creating a decryption key from said decryption key generation data; performing a decryption operation on said matching biometric record to extract a decrypted biometric model from said record; and comparing said decrypted biometric model with the current biometric sample to verify the identity of the user for authorizing access to the secured resource.