Patent ID: 8239685

Claim:
A biometric authentication method performed at a client, comprising: generating a first one-time authentication template from biometric information of a user using one-time transform information received from the user; requesting authentication of the first one-time authentication template from a server; receiving a status of the authentication generated by the server by comparing the first one-time authentication template with a one-time registration template stored at the server; and if the status of the authentication indicates that the authentication is successful: updating the one-time transform information using a first one-time transform key that is equal to a second one-time transform key used by the server to update the one-time registration template stored at the server; updating the first one-time transform key using a first random key that is equal to a second random key used by the server to update the second one-time transform key; and storing the updated one-time transform information, and the updated first one-time transform key at the client for use when the client next requests authentication from the server.