Source: https://patents.google.com/patent/US9979709B2/en
Timestamp: 2019-06-19 17:50:31
Document Index: 36437515

Matched Legal Cases: ['Application No. 60', 'Application No. 2004', 'Application No. 2004', 'Application No. 03767206', 'Application No. 2', 'Application No. 2', 'Application No. 2']

US9979709B2 - Methods for secure restoration of personal identity credentials into electronic devices - Google Patents
US9979709B2
US9979709B2 US14/849,473 US201514849473A US9979709B2 US 9979709 B2 US9979709 B2 US 9979709B2 US 201514849473 A US201514849473 A US 201514849473A US 9979709 B2 US9979709 B2 US 9979709B2
US14/849,473
US20160065373A1 (en
2015-09-09 Priority to US14/849,473 priority patent/US9979709B2/en
2016-03-03 Publication of US20160065373A1 publication Critical patent/US20160065373A1/en
2018-05-22 Publication of US9979709B2 publication Critical patent/US9979709B2/en
This application is a continuation of co-pending U.S. patent application Ser. No. 13/932,642, filed Jul. 1, 2013, which is a continuation of U.S. patent application Ser. No. 13/287,471, filed Nov. 2, 2011, entitled “Methods for Secure Restoration of Personal Identity Credentials into Electronic Devices”, now issued as U.S. Pat. No. 8,478,992, which is a continuation of U.S. patent application Ser. No. 12/190,064, filed Aug. 12, 2008, entitled “Methods for Secure Restoration of Personal Identity Credentials into Electronic Devices”, now issued as U.S. Pat. No. 8,055,906, which is a divisional of U.S. patent application Ser. No. 10/635,762, filed Aug. 6, 2003, entitled “Methods for Secure Enrollment and Backup of Personal Identity Credentials into Electronic Devices,” now issued as U.S. Pat. No. 7,590,861, which claims priority to U.S. Patent Application No. 60/401,399 filed Aug. 6, 2002 entitled, “A Secure Enrollment Process for a Biometric Personal Authentication Device”, each of which is herein incorporated by reference in their entireties.
This application is related to U.S. patent application Ser. No. 12/190,058, filed Aug. 12, 2005, entitled “Methods for Secure Enrollment of Personal Identity Credentials into Electronic Devices”, now issued as U.S. Pat. No. 8,127,143 and U.S. patent application Ser. No. 12/190,061, filed Aug. 12, 2008, entitled “Methods for Secure Backup of Personal Identity Credentials for Electronic Devices,” now issued as U.S. Pat. No. 7,788,501; each of which is incorporated herein by reference in their entireties.
To use the PKI, an individual—Alice—applies for a digital certificate from as trusted authority. After a substantive background investigatory process, the trusted authority decides that Alice is who she claims to be and decides to issue a digital certificate. The certificate includes a public key, one half of an asymmetric key pair, which is assigned only to Alice. She retains the other half of the key pair, the private key. Due to the fundamental principles of public key cryptography, anything encrypted by the Alice's private key can only be decrypted using her public key, and vice versa. Alice is free to distribute the digital certificate and the public key to whomever she wishes.
The invention disclosed herein describes processes for securely enrolling personal identity credentials into devices with means for personal identification. For example, a handheld computer with a biometric sensor may use enrolled fingerprints to identify as user when he requests access to stored information. The enrollment of the fingerprint must tie the user definitively to the fingerprint so that future authorizations are valid.
The invention described herein provides a process for enrollment wherein a manufacturer of a personal identification device records serial numbers or another unique identifier for each device that it produces, along with a self-generated public key for each device. An enrollment authority is recognized by the manufacturer or another suitable institution as capable of validating an individual before enrolling him into the device—maintains and operates the appropriate equipment for enrollment, and provides its approval of the enrollment. In some embodiments, a biometric personal identification device (BPID) is verified that it is a legitimate device and that it has not been previously enrolled to another individual.
315 Provide user with a digital certificate containing the primary devices public key
404 Decrypt the second part and the digital signature with the controllers private key
receiving, by a personal identification device, a signature associated with a biometric encryption key from a party, the signature having been decrypted by the party based on a private key associated with the party, wherein the biometric encryption key was previously split into a first section and a second section, the first section and second sections each encrypted using a different key;
verifying, by the personal identification device, a validity of the signature based on a public key associated with a first personal identification device;
decrypting, by the personal identification device, the encrypted first and second sections of the biometric encryption key; and
combining, by the personal identification device, the decrypted first section of the biometric encryption key and the decrypted second section of the biometric encryption key to restore the biometric encryption key when the validity of the signature is verified.
2. The computer-implemented method of claim 1, wherein the second section of the biometric encryption key was decrypted by the party using the private key associated with the party.
3. The computer-implemented method of claim 1, wherein the first section of the biometric encryption key was decrypted using a passcode entered by a user.
4. The computer-implemented method of claim 3, wherein the passcode was entered by the user on a second personal identification device.
decrypting, by a second personal identification device, biometric data associated with the first personal identification device.
receiving the biometric data associated with the first personal identification device from one of: the party, an electronic storage repository, or a persistent storage medium.
storing the biometric data associated with the first personal identification device in the second personal identification device.
8. The method of claim 1, wherein the personal identification is one of the first personal identification device, or a second personal identification device.
9. A non-transitory computer-readable medium programmed with executable instructions that, when executed by a processing system comprising at least one hardware processor, perform operations comprising:
10. The non-transitory computer-readable medium of claim 9, wherein the second section of the biometric encryption key was decrypted by the party using the private key associated with the party.
11. The non-transitory computer-readable medium of claim 9, wherein the first section of the biometric encryption key was decrypted using a passcode entered by a user.
12. The non-transitory computer-readable medium of claim 11, wherein the passcode was entered by the user on a second personal identification device.
16. A system comprising a personal identification device having a memory coupled to at least one hardware processor, the memory comprising processor-executable instructions that, when executed by the at least one hardware processor, perform operations comprising:
receiving, by the personal identification device, a signature associated with a biometric encryption key from a party, the signature having been decrypted by the party based on a private key associated with the party, wherein the biometric encryption key was previously split into a first section and a second section, the first section and second sections each encrypted using a different key;
17. The system of claim 16, wherein the second section of the biometric encryption key was decrypted by the party using the private key associated with the party.
18. The system of claim 16, wherein the first section of the biometric encryption key was decrypted using a passcode entered by a user.
19. The system of claim 18, wherein the passcode was entered by the user on a second personal identification device.
US14/849,473 2002-08-06 2015-09-09 Methods for secure restoration of personal identity credentials into electronic devices Active US9979709B2 (en)
US20160065373A1 US20160065373A1 (en) 2016-03-03
US9979709B2 true US9979709B2 (en) 2018-05-22
WO1999006238A1 (en) 1997-08-01 1999-02-11 Renault Agriculture Method for controlling an internal combustion engine
US20140344583A1 (en) 2002-08-06 2014-11-20 Privaris, Inc. Methods for secure enrollment and backup of personal identity credentials into electronic devices
Davida, G. et al., "On Enabling secure applications through off-line biometric Identification," Security and Privacy, May 3, 1998. Proceedings of the 1998 IEEE Symposium, pp. 146-157.
English Translation of Office Action for Japanese Patent Application No. 2004-526454, dated Apr. 13, 2010, 3 pages.
English Translation of Office Action for Japanese Patent Application No. 2004-526454, dated Jul. 14, 2009, 5 pages.
European Search Report for European Patent Application No. 03767206.0 dated Jul. 4, 2011, 3 pages.
Final Office Action for U.S. Appl. No. 10/635,762, dated Aug. 20, 2008, 19 pages.
Final Office Action for U.S. Appl. No. 12/190,058, dated Apr. 27, 2010, 16 pages.
Final Office Action for U.S. Appl. No. 12/190,058, dated Mar. 31, 2011, 16 pages.
Final Office Action for U.S. Appl. No. 12/190,064, dated Aug. 17, 2010, 10 pages.
Final Office Action for U.S. Appl. No. 13/932,642, dated Jan. 7, 2015, 24 pages.
Fumlko Komatsu, PKI Handbook, Japan, Soft Research Center Inc., Nov. 25, 2000, pp. 105-108.
International Search Report for PCT/US2003/024472 dated Nov. 20, 2003, 2 pagss.
Isobe, Y. et al., "Development of personal authentication system using fingerprint with digital signature technologies," Proceedings of the 34th Hawaii International Conference on System Sciences, Jan. 3, 2001, pp. 4039-4047
Lee, S.K. et al. (Apr. 1985). "A Multi-Touch Three Dimensional Touch-Sensitive Table." Proceedings of CHI: ACM Conference on Human Factors in Computing Systems, pp. 21-25.
Non Final Office Action for U.S. Appl. No. 14/995,081, dated Oct. 20, 2016, 23 pages.
Non-Final Office Action for U.S. Appl. No. 10/635,762, dated Jan. 8, 2008, 18 pages.
Non-Final Office Action for U.S. Appl. No. 10/635,762, dated Jul. 11, 2007, 10 pages.
Non-Final Office Action for U.S. Appl. No. 12/190,058, dated Sep. 14, 2010, 17 pages.
Non-Final Office Action for U.S. Appl. No. 12/190,058, dated Sep. 2, 2009, 5 pages.
Non-Final Office Action for U.S. Appl. No. 12/190,061, dated Sep. 1, 2009, 5 pages.
Non-Final Office Action for U.S. Appl. No. 12/190,064, dated Sep. 2, 2009, 5 pages.
Non-Final Office Action for U.S. Appl. No. 12/560,254, dated Sep. 17, 2010, 12 pages.
Non-Final Office Action for U.S. Appl. No. 13/210,022, dated May 10, 2012, 16 pages.
Non-Final Office Action for U.S. Appl. No. 13/287,471, dated May 9, 2012, 5 pages.
Non-Final Office Action for U.S. Appl. No. 13/932,642, dated Jun. 6, 2014, 22 pages.
Non-Final Office Action for U.S. Appl. No. 14/445,853, dated Mar. 25, 2015, 12 pages.
Notice of Allowance fo U.S. Appl. No. 10/635,762, dated May 12, 2009, 9 pages.
Notice of Allowance for U.S. APpl. No. 12/190,058, dated Oct. 13, 2011, 7 pages.
Notice of Allowance for U.S. Appl. No. 12/190,061, dated Mar. 25, 2010, 13 pages.
Notice of Allowance for U.S. Appl. No. 12/190,064, dated Jun. 24, 2011, 12 pages.
Notice of Allowance for U.S. Appl. No. 12/560,254, dated Apr. 4, 2011, 7 pages.
Notice of Allowance for U.S. Appl. No. 13/210,022, dated Nov. 23, 2012, 2012, 8 pages.
Notice of Allowance for U.S. Appl. No. 13/287,471, dated Feb. 27, 2013. 15 pages.
Notice of Allowance for U.S. Appl. No. 13/849,985, dated Apr. 30, 2014, 9 pages.
Notice of Allowance for U.S. Appl. No. 13/932,642, dated Jun. 3, 2015, 9 pages.
Notice of Allowance for U.S. Appl. No. 14/445,853, dated Oct. 13, 2015, 5 pages.
Notice of Allowance for U.S. Appl. No. 14/995,081, dated Mar. 16, 2017, 5 pages.
Office Action for Canadian Patent Application No. 2,494,299, dated Oct. 13, 2011. 2 pages.
Office Action for Canadian Patent Application No. 2,494,299, dated on Jul. 31, 2008, 3 pages.
Office Action for Canadian Patent Application No. 2,494,299, dated on Jul. 7, 2010, 3 pages.
Rubine, D.H. (May 1992). "Combining Gestrues and Direct Manipulation," CHI '92, pp. 659-660.
Schneier, Bruce, "Applied Cryptography; Protocols, Algorithms, and Source Code in C," Second Edition, 1996, John Wiley & Sons, Inc. pp. 31-34.
Westerman, W. (Spring 1999). "Hand Tracking, Finder Identification, and Chordic Manipulation on a Multi-Touch Surface," A Dissertation Submitted to the Faculty of the University of Delaware in Partial Fulfillment of the Requirements for the Degree of Doctor of Philosophy in Electrical Engineering, 364 pages.