Patent ID: 6317834
Filing Date: 2001-11-13
Classification: G06F,G07C,H04L

Abstract:
A method for the secure handling of data, comprising the steps of:(a) acquiring a biometric database of personal identifiers and data comprising:(i) acquiring an enrollment biometric sample;(ii) acquiring an enrollment record identifier;(iii) acquiring encryption key generation data;(iv) creating a biometric model from said enrollment biometric sample;(v) creating a first encryption key from said encryption key generation data;(vi) performing an encryption operation on said biometric model to yield an encrypted biometric model;(vii) storing a biometric record in said database wherein said record is comprised of said encrypted biometric model and said record identifier,(b) verifying the identity of a user desiring access to a secured resource, comprising the steps of:(i) acquiring a current biometric sample;(ii) a current record identifier;(iii) a decryption key generation data;(iv) identifying a matching biometric record whose enrollment record identifier matches the current record identifier;(v) creating a decryption key from said decryption key generation data;(vi) performing a decryption operation on said matching biometric record to extract a decrypted biometric model from said record; and(vii) comparing said decrypted biometric model with the current biometric sample to verify the identity of the user for authorizing access to the secured resource.