Patent ID: 8301902

Claim:
A method for communicating a privacy policy associated with a biometric reference template, said method comprising: assigning in a first attribute a first identifier, said first identifier uniquely identifying a biometric reference template created for a type of biometric data collected, said biometric reference template comprising the biometric data, said biometric data being a digital form of a biometric sample collected from a part of an individual's body, said assigning the first identifier being performed by a processor of a computer system; said processor defining in a second attribute a second identifier, said second identifier uniquely identifying a privacy policy that indicates a level of protection to be provided by a relying party requesting access to said biometric reference template, said second identifier including an accept-reject provision for said privacy policy for controlling proper use and handling of said biometric data; said processor cryptographically binding said biometric reference template to said privacy policy; and said processor transmitting, responsive to a request received from said relying party, said second identifier along with an accept-reject provision for said privacy policy associated with said biometric reference template for controlling said proper use and handling of said biometric data, wherein based on a response received from said relying party to said accept-reject provision for said privacy policy, said biometric reference template is either transmitted or not transmitted to said relying.