BR112017016468A2 - método e sistema para gerenciar com segurança dados biométricos, e, produto de programa de computador. - Google Patents

método e sistema para gerenciar com segurança dados biométricos, e, produto de programa de computador.

Info

Publication number
BR112017016468A2
BR112017016468A2 BR112017016468-0A BR112017016468A BR112017016468A2 BR 112017016468 A2 BR112017016468 A2 BR 112017016468A2 BR 112017016468 A BR112017016468 A BR 112017016468A BR 112017016468 A2 BR112017016468 A2 BR 112017016468A2
Authority
BR
Brazil
Prior art keywords
biometric data
biometric
seed value
computer program
program product
Prior art date
Application number
BR112017016468-0A
Other languages
English (en)
Inventor
Joseph O'regan Alan
Nelson Huxham Horatio
Original Assignee
Visa International Service Association
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Visa International Service Association filed Critical Visa International Service Association
Publication of BR112017016468A2 publication Critical patent/BR112017016468A2/pt

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3231—Biological data, e.g. fingerprint, voice or retina
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/068—Authentication using credential vaults, e.g. password manager applications or one time password [OTP] applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys

Abstract

são fornecidos sistemas e métodos para gerenciar com segurança dados biométricos. em um método conduzido em um elemento de segurança que é diretamente ligado a uma entrada biométrica, dados biométricos são recebidos diretamente da entrada biométrica. uma assinatura biométrica baseada nos dados biométricos é obtida. um valor de semente que é específico para os dados biométricos é acessado por meio da obtenção do valor de semente dos dados biométricos ou da assinatura biométrica. a assinatura biométrica é codificada usando um algoritmo ofuscado e o valor de semente para gerar um token que é emitido para o armazenamento seguro dentro do elemento de segurança ou transmissão segura para um servidor seguro para registro ou autenticação dos dados biométricos. a obtenção do valor de semente dos dados biométricos ou assinatura biométrica pode ser repetida de maneira confiável para se obter o mesmo o valor de semente.
BR112017016468-0A 2015-02-11 2016-02-10 método e sistema para gerenciar com segurança dados biométricos, e, produto de programa de computador. BR112017016468A2 (pt)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
ZA201500962 2015-02-11
ZA2015/00962 2015-02-11
PCT/IB2016/050696 WO2016128906A1 (en) 2015-02-11 2016-02-10 Systems and methods for securely managing biometric data

Publications (1)

Publication Number Publication Date
BR112017016468A2 true BR112017016468A2 (pt) 2018-04-10

Family

ID=56615478

Family Applications (1)

Application Number Title Priority Date Filing Date
BR112017016468-0A BR112017016468A2 (pt) 2015-02-11 2016-02-10 método e sistema para gerenciar com segurança dados biométricos, e, produto de programa de computador.

Country Status (7)

Country Link
US (2) US10313317B2 (pt)
EP (1) EP3257194B1 (pt)
CN (2) CN107251477B (pt)
AU (1) AU2016217549B2 (pt)
BR (1) BR112017016468A2 (pt)
RU (1) RU2718226C2 (pt)
WO (1) WO2016128906A1 (pt)

Families Citing this family (44)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016128906A1 (en) 2015-02-11 2016-08-18 Visa International Service Association Systems and methods for securely managing biometric data
KR101728310B1 (ko) * 2015-06-03 2017-04-19 윤태식 휴대폰 실시간 공유 보안 관리시스템
US10608823B2 (en) * 2016-06-24 2020-03-31 Fujitsu Limited Cryptographic primitive for user authentication
FR3058292B1 (fr) * 2016-10-31 2019-01-25 Idemia Identity And Security Procede de fourniture d'un service a un utilisateur
EP3316549B1 (fr) * 2016-10-31 2023-10-11 Idemia Identity & Security France Procédé de contrôle d'identité d'un utilisateur au moyen d'une base de données publique
JP7064093B2 (ja) * 2017-02-21 2022-05-10 フィンガープリント カーズ アナカタム アイピー アクティエボラーグ 高信頼性鍵サーバ
EP3586257B1 (en) * 2017-02-22 2022-10-26 Fingerprint Cards Anacatum IP AB Biometrics-based remote login
US10693644B2 (en) * 2017-06-23 2020-06-23 International Business Machines Corporation Single-input multifactor authentication
WO2019022658A1 (en) * 2017-07-27 2019-01-31 Fingerprint Cards Ab METHODS AND APPARATUS FOR AUTHENTICATING A USER OF A CLIENT DEVICE ON A SECURE COMMUNICATION CHANNEL BASED ON BIOMETRIC DATA
EP3682357B1 (en) 2017-09-13 2022-03-09 Fingerprint Cards Anacatum IP AB Methods and devices of enabling authentication of a user of a client device over a secure communication channel based on biometric data
US10812259B2 (en) * 2017-10-31 2020-10-20 International Business Machines Corporation Self-assembly based random number generator
WO2019094071A1 (en) * 2017-11-07 2019-05-16 Visa International Service Association Biometric validation process utilizing access device and location determination
US10305690B1 (en) * 2017-11-29 2019-05-28 Fingerprint Cards Ab Two-step central matching
US10805288B2 (en) * 2017-11-30 2020-10-13 Oath Inc. Authenitcation entity for user authentication
US10891840B2 (en) 2018-02-23 2021-01-12 Capital One Services, Llc Systems and methods for monitoring components of and detecting an intrusion into an automated teller machine
US11449746B2 (en) 2018-04-10 2022-09-20 Assured Information Security, Inc. Behavioral biometric feature extraction and verification
US10769260B2 (en) 2018-04-10 2020-09-08 Assured Information Security, Inc. Behavioral biometric feature extraction and verification
US10769259B2 (en) * 2018-04-10 2020-09-08 Assured Information Security, Inc. Behavioral biometric feature extraction and verification
ES2937234T3 (es) 2018-04-23 2023-03-27 Amadeus Sas Método de autenticación biométrica, sistema y programa informático
US11134071B2 (en) * 2018-04-23 2021-09-28 Oracle International Corporation Data exchange during multi factor authentication
KR20210006329A (ko) * 2018-04-25 2021-01-18 아이피컴 게엠베하 앤 코. 카게 원격 생체 식별
US11093771B1 (en) * 2018-05-04 2021-08-17 T Stamp Inc. Systems and methods for liveness-verified, biometric-based encryption
US11496315B1 (en) 2018-05-08 2022-11-08 T Stamp Inc. Systems and methods for enhanced hash transforms
EP3570239A1 (fr) * 2018-05-15 2019-11-20 Thales Dis France SA Procédé et système d'enrôlement autonome pour détenteur de dispositif biométrique
KR102511365B1 (ko) * 2018-08-24 2023-03-17 삼성전자주식회사 생체 정보를 인증하는 방법 및 장치
US10951609B2 (en) 2018-11-05 2021-03-16 International Business Machines Corporation System to effectively validate the authentication of OTP usage
US11301586B1 (en) 2019-04-05 2022-04-12 T Stamp Inc. Systems and processes for lossy biometric representations
US10885173B2 (en) 2019-06-04 2021-01-05 Nant Holdings Ip, Llc Content authentication and validation via multi-factor digital tokens, systems, and methods
CN110365763B (zh) * 2019-07-11 2021-11-23 北京蜜莱坞网络科技有限公司 一种数据同步方法、装置、设备及存储介质
US11316842B2 (en) 2019-07-23 2022-04-26 Cyberark Software Ltd. Identity verification based on electronic file fingerprinting data
US10862689B1 (en) 2019-07-23 2020-12-08 Cyberark Software Ltd. Verification of client identities based on non-distributed data
KR20210012186A (ko) * 2019-07-24 2021-02-03 삼성전자주식회사 보안 스위치를 이용하여 개인 정보를 보호하는 전자 장치 및 방법
US11570155B2 (en) * 2019-07-25 2023-01-31 Everything Blockchain Technology Corp. Enhanced secure encryption and decryption system
US11321445B2 (en) 2019-10-01 2022-05-03 Visa International Service Association Delegated biometric authentication
KR102232963B1 (ko) * 2019-10-28 2021-03-29 주식회사 메디블록 블록체인 네트워크에서 비대면 인증을 지원하는 방법, 시스템 및 비일시성의 컴퓨터 판독 가능 기록 매체
WO2021212009A1 (en) * 2020-04-16 2021-10-21 Mastercard International Incorporated Systems, methods, and non-transitory computer-readable media for secure biometrically-enhanced data exchanges and data storage
EP4173224A1 (en) * 2020-05-28 2023-05-03 Lee, David Kye Liang Generation of encryption keys using biometrics
US11601279B2 (en) 2020-06-12 2023-03-07 Capital One Services, Llc Systems and methods for payment authentication
US11715105B2 (en) * 2020-08-25 2023-08-01 Mastercard International Incorporated Payment authentication using OS-based and issuer-based authenticator applications
US11601418B2 (en) * 2020-10-14 2023-03-07 Bank Of America Corporation System for increasing authentication complexity for access to online systems
US20220121730A1 (en) * 2020-10-20 2022-04-21 Mastercard International Incorporated Digital Rights Management Platform
US11947642B1 (en) 2021-08-17 2024-04-02 Wells Fargo Bank, N.A. Apparatuses, methods, and computer program products for proactive offline authentication
WO2023022728A1 (en) * 2021-08-20 2023-02-23 Visa International Service Association Method and system for generating a secret key using non-communicating entities
CN115001714B (zh) * 2022-07-15 2024-03-19 中国电信股份有限公司 资源访问方法及装置、电子设备、存储介质

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6845453B2 (en) * 1998-02-13 2005-01-18 Tecsec, Inc. Multiple factor-based user identification and authentication
US7620818B2 (en) * 2004-12-07 2009-11-17 Mitsubishi Electric Research Laboratories, Inc. Biometric based user authentication and data encryption
US20070245152A1 (en) * 2006-04-13 2007-10-18 Erix Pizano Biometric authentication system for enhancing network security
WO2008027165A2 (en) * 2006-08-28 2008-03-06 Sandisk Corporation Memory device for cryptographic operations and method for interacting therewith
US8417960B2 (en) 2006-09-06 2013-04-09 Hitachi, Ltd. Method for generating an encryption key using biometrics authentication and restoring the encryption key and personal authentication system
US8078885B2 (en) 2007-07-12 2011-12-13 Innovation Investments, Llc Identity authentication and secured access systems, components, and methods
CN100589385C (zh) * 2007-08-28 2010-02-10 浙江大学 基于数字签名的计量值认证方法
US20110047377A1 (en) * 2009-08-19 2011-02-24 Harris Corporation Secure digital communications via biometric key generation
EP2512061A1 (en) * 2011-04-15 2012-10-17 Hanscan IP B.V. System for conducting remote biometric operations
US20130173926A1 (en) * 2011-08-03 2013-07-04 Olea Systems, Inc. Method, Apparatus and Applications for Biometric Identification, Authentication, Man-to-Machine Communications and Sensor Data Processing
FR2979044B1 (fr) * 2011-08-09 2013-08-30 Morpho Procede de gestion et de controle de donnees de differents domaines d'identite organises en ensemble structure
US9270671B2 (en) * 2012-11-14 2016-02-23 International Business Machines Corporation Biometric-based wireless device association
US9218473B2 (en) * 2013-07-18 2015-12-22 Suprema Inc. Creation and authentication of biometric information
WO2016128906A1 (en) 2015-02-11 2016-08-18 Visa International Service Association Systems and methods for securely managing biometric data

Also Published As

Publication number Publication date
EP3257194A4 (en) 2018-10-03
US10313317B2 (en) 2019-06-04
EP3257194A1 (en) 2017-12-20
CN107251477A (zh) 2017-10-13
US20170264599A1 (en) 2017-09-14
CN107251477B (zh) 2021-01-12
CN112528258A (zh) 2021-03-19
AU2016217549A1 (en) 2017-06-22
RU2718226C2 (ru) 2020-03-31
EP3257194B1 (en) 2020-04-15
US20190260721A1 (en) 2019-08-22
RU2017131519A (ru) 2019-03-12
US10681025B2 (en) 2020-06-09
WO2016128906A1 (en) 2016-08-18
RU2017131519A3 (pt) 2019-09-09
AU2016217549B2 (en) 2020-01-23

Similar Documents

Publication Publication Date Title
BR112017016468A2 (pt) método e sistema para gerenciar com segurança dados biométricos, e, produto de programa de computador.
BR112017005824A2 (pt) método, e, dispositivo móvel.
CO2019013817A2 (es) Sistema y método para la identificación biométrica
WO2016073047A3 (en) Environment-aware security tokens
BR112018016810A2 (pt) método e sistema implementado por computador para criptografia de dados em um dispositivo eletrônico, dispositivo eletrônico e programa de computador
AU2015200905B9 (en) Method and system for providing an efficient vulnerability management and verification service
SG10201709367UA (en) System of enclaves
WO2017027648A8 (en) System and methods to ensure asset and supply chain integrity
BR112018016819A2 (pt) método e sistemas para proteger um recurso digital controlado utilizando uma tabela de dispersão e livro-razão distribuídos e um blockchain
BR112018008742A8 (pt) ?método para autenticação biométrica, e, computador gerenciador de identidade?
WO2016076934A3 (en) Verification system for secure transmission in a distributed processing network
BR112017009869A2 (pt) sistema para gerenciamento de inventário
BR112015021754A2 (pt) sistemas e métodos de transação segura
BR112017014632A2 (pt) ?método implementado por computador, e, sistema de computador?
BR112017003412A2 (pt) preservação de proteção de dados com política
BR112015017718A2 (pt) ofuscar dados de rastreio
BR112016021120A2 (pt) Método e dispositivo de gerenciamento de dados confidenciais; método e sistema de autenticação segura
WO2017058408A3 (en) Protect non-memory encryption engine (non-mee) metadata in trusted execution environment
BR112016029790A2 (pt) sistemas e métodos para sinalizar informações para conjuntos de camadas em um conjunto de parâmetros
BR112016025340A8 (pt) configurar fluxos de trabalho em um dispositivo anfitrião que opera em um sistema de controle de processo
GB2545838A (en) Hypervisor and virtual machine protection
EP2947594A3 (en) Protecting critical data structures in an embedded hypervisor system
BR112018071634A2 (pt) utilização de região isolada de segurança baseada em hardware para impedir pirataria e fraude em dispositivos eletrônicos
BR112015032258A8 (pt) Método implementado por computador para segurança de operações em sistemas de autenticação e autorização utilizando informações biométricas, sistema de comunicação para segurança de operações em sistemas de autenticação e autorização utilizando informações biométricas, e, produto de programa de computador
WO2016109152A8 (en) Secure event log management

Legal Events

Date Code Title Description
B06U Preliminary requirement: requests with searches performed by other patent offices: procedure suspended [chapter 6.21 patent gazette]
B11B Dismissal acc. art. 36, par 1 of ipl - no reply within 90 days to fullfil the necessary requirements