Patent ID: 7805614

Claim:
A method for utilizing a BIOTOKEN, wherein the BIOTOKEN includes a processor, biometric reader, a memory, and a communications interface, for secure identification comprising: upon detecting a null value in a secure storage of private keys, generating and validating a public/private asymmetric key pair containing a public key and a private key; transmitting the public key and a unique serial number of the BIOTOKEN to an initialization point when the private key is detected in the memory at power up of the BIOTOKEN; collecting biometric data from a user; temporarily storing the biometric data in the memory on the BIOTOKEN; creating a first data packet including a random number and the collected biometric data; encrypting the first data packet using a symmetric key; encrypting the symmetric key using the private key so that the first data packet can be decrypted only by the public key; creating a second data packet including the encrypted first data packet, the encrypted symmetric key and the unique serial number; issuing a public certificate containing the unique serial number of the BIOTOKEN; transmitting the second data packet to the initialization point; immediately deleting the biometric data and the public key from the memory after transmission so that the biometric data and the public key do not remain on the BIOTOKEN after initialization; and during enrollment, cryptographically binding the unique serial number, the biometrics and the public certificate.