Method and apparatus for authenticating biometric information

Patent metadata

Field	Value
Publication number	US-11194895-B2
Application number	US-201916549824-A
Country	US
Kind code	B2
Filing date	Aug 23, 2019
Priority date	Aug 24, 2018
Publication date	Dec 7, 2021
Grant date	Dec 7, 2021

Abstract

A terminal, a server, and a system for authenticating biometric information and a biometric information authentication method are provided. A method, performed by a terminal, of registering biometric information includes: transmitting a registration request and biometric capability information of the terminal to a server; receiving biometric capability information of the server from the server; acquiring a user's biometric information based on the biometric capability information of the server; acquiring a pseudonymous identifier (PI) and auxiliary data (AD) based on the user's biometric information; and transmitting the PI and the AD to the server.

First claim

What is claimed is:

1. A method, performed by a terminal, of registering biometric information, the method comprising:
transmitting a registration request and biometric capability information of the terminal, which comprises information about biometric technologies supported by the terminal, to a server;
receiving biometric capability information of the server from the server, wherein the biometric capability information of the server comprises information about a biometric technology supported by the terminal among a plurality of biometric technologies supported by the server;
selecting a biometric technology from the plurality of biometric technologies supported by the server;
acquiring a user's biometric information based on the selected biometric technology;
acquiring a pseudonymous identifier and auxiliary data based on the user's biometric information; and
transmitting the pseudonymous identifier and the auxiliary data to the server.

2. The method of claim 1 , wherein:
the biometric capability information comprises information about at least one biometric technology; and
the information about the at least one biometric technology comprises an item of the at least one biometric technology and information about an algorithm performed to obtain a template.

3. The method of claim 2 , wherein:
the biometric capability information of the server includes information about at least one biometric technology supported by the terminal, the biometric technology being selected from among biometric technologies supported by the server based on the biometric capability information of the terminal.

4. The method of claim 1 , wherein
selecting a biometric technology from the plurality of biometric technologies supported by the server comprises:
presenting a plurality of biometric technologies to a user, based on the biometric capability information of the server, and
receiving, from the user, an input of selecting one of the plurality of biometric technologies, and
wherein acquiring the user's biometric information, based on the biometric capability information of the server comprises acquiring the user's biometric information based on the selected biometric technology.

5. The method of claim 1 , wherein:
the receiving of the biometric capability information of the server from the server comprises receiving, from the server, a public key certificate of the server, wherein the public key certificate of the server is issued by a certificate authority.

6. The method of claim 5 , further comprising:
encrypting, based on the public key certificate of the server, the pseudonymous identifier and the auxiliary data with the public key certificate of the server,
wherein the transmitting of the pseudonymous identifier and the auxiliary data to the server comprises transmitting the encrypted pseudonymous identifier and the encrypted auxiliary data to the server.

7. The method of claim 5 , wherein:
the receiving of the biometric capability information of the server from the server comprises receiving challenge information from the server, wherein the challenge information includes information generated by the server to verify a reliability and integrity of information transmitted from the terminal.

8. The method of claim 7 , further comprising:
encrypting, based on the public key certificate, the pseudonymous identifier, the auxiliary data, and the challenge information by using the public key certificate of the server,
wherein the transmitting of the pseudonymous identifier and the auxiliary data to the server comprises transmitting the encrypted pseudonymous identifier, the encrypted auxiliary data, and the encrypted challenge information to the server.

9. The method of claim 1 , wherein:
the terminal transmits or receives information to or from the server by using a transport layer security channel.

10. A terminal for authenticating a user by using biometric information, the terminal comprising:
an input/output interface configured to transmit or receive information;
a biometric information inputter configured to acquire the biometric information from the user; and
a biometric information client,
wherein the input/output interface is further configured to:
transmit a registration request and biometric capability information of the terminal, which comprises information about biometric technologies supported by the terminal, to a server, and
receive biometric capability information of the server from the server to transmit the biometric capability information of the server to the biometric information client,

wherein the biometric capability information of the server comprises information about a biometric technology supported by the terminal among a plurality of biometric technologies supported by the server, and
wherein the biometric information client is configured to:
control the biometric information inputter to:
select a biometric technology from the plurality of biometric technologies supported by the server
acquire the biometric information of the user based on the selected biometric technology,
acquire a pseudonymous identifier and auxiliary data based on the biometric information of the user, and
transmit the pseudonymous identifier and the auxiliary data to the server via the input/output interface.

11. The terminal of claim 10 , wherein:
the biometric capability information comprises information about at least one biometric technology; and
the information about the at least one biometric technology comprises an item of the at least one biometric technology and information about an algorithm performed to obtain a template.

12. The terminal of claim 11 , wherein:
the biometric capability information of the server includes information about at least one biometric technology supported by the terminal, the biometric technology being selected from among biometric technologies supported by the server based on the biometric capability information of the terminal.

13. The terminal of claim 10 , wherein:
the biometric information client is further configured to:
control the biometric information inputter to present a plurality of biometric technologies to the user, based on the biometric capability information of the server and acquire; and
when an input of selecting one of the plurality of biometric technologies is received from the user, acquire the biometric information based on the selected biometric technology.

14. The terminal of claim 10 , wherein:
the biometric information client is further configured to receive a public key certificate of the server via the input/output interface, wherein the public key certificate of the server is issued by a certificate authority.

15. The terminal of claim 14 , wherein:
the biometric information client is further configured to encrypt, based on the public key certificate of the server, the pseudonymous identifier and the auxiliary data with the public key certificate of the server; and
transmit the encrypted pseudonymous identifier and the encrypted auxiliary data to the server via the input/output interface.

16. The terminal of claim 14 , wherein:
the biometric information client is further configured to receive challenge information from the server, wherein the challenge information includes information generated by the server to verify a reliability and integrity of information transmitted from the terminal.

17. The terminal of claim 16 , wherein:
the biometric information client is further configured to encrypt, based on the public key certificate of the server, the pseudon

Assignees

• Samsung Electronics Co Ltd

Inventors

• Ryu Youngsun
• Lee Duckey
• Yoon Kangjin

Classifications

• G06V40/12

  Fingerprints or palmprints · CPC title

• G06V40/18

  Eye characteristics, e.g. of the iris · CPC title

• G06V40/15

  Biometric patterns based on physiological signals, e.g. heartbeat, blood flow · CPC title

• G06V40/10

  Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands · CPC title

• G06V40/16

  Human faces, e.g. facial parts, sketches or expressions · CPC title