Patent ID: 9405891
Filing Date: 2016-08-02
CPC Classification: G06F,H04L

Claim Text:
1. A method for use in authentication, the method comprising: obtaining, by an electronic apparatus, a biometric input including a plurality of biometric attributes, the biometric input comprising an image of a user's face; selecting, by the electronic apparatus, a portion of the image that comprises an attribute of the user's face, the selection of the portion based on a separate selection at an authentication server that renders the selected portion active for authentication and non-selected portions inactive for authentication; processing, by the electronic apparatus, the attribute associated with the portion; generating, by the electronic apparatus, a passcode from a cryptographic key; based on the attribute associated with the portion and the passcode, generating, by the electronic apparatus, a composite authentication code, wherein the composite authentication code comprises multiple parts that facilitate authentication, one part comprising the processed attribute and another part comprising the generated passcode; and outputting, by the electronic apparatus, the composite authentication code for use in authentication; wherein the electronic apparatus is a device which stores the cryptographic key and which runs a soft token application; wherein generating the passcode from the cryptographic key includes deriving, as the passcode, a one-time use password (OTP) based on the cryptographic key using the soft token application, the OTP being valid during a respective time window and invalid outside that respective time window; wherein the device is equipped with a biometric application; wherein the method further comprises processing, by the device, the attribute associated with the portion using the biometric application.