Patent ID: 8527777

Claim:
A method for proving to a verifier of a data processing system that a prover satisfies a condition imposed by the verifier, the method comprising: holding in memory of the prover at least one cryptographic credential having encoded therein a biometric template characteristic of the prover and a set of prover attributes such that each of said template and attributes are bound to a common secret value of the prover; making a biometric measurement of the prover; and at the prover, communicating with the verifier to make a cryptographic proof demonstrating (a) possession of said at least one cryptographic credential, (b) that said biometric measurement matches the biometric template encoded in said at least one credential, and (c) that the set of prover attributes encoded in said at least one credential satisfies said condition imposed by the verifier; wherein the cryptographic proof is made without revealing the template or said at least one credential to the verifier.