Method and electronic device for authenticating a user

Patent metadata

Field	Value
Publication number	US-12019719-B2
Application number	US-201917056042-A
Country	US
Kind code	B2
Filing date	Jun 18, 2019
Priority date	Jun 19, 2018
Publication date	Jun 25, 2024
Grant date	Jun 25, 2024

Abstract

The present disclosure generally relates to a method for authenticating a user using an electronic device, where the electronic device comprises a biometric sensing system as well as a first, a second and a third control unit. The present disclosure also relates to a corresponding electronic device and to a computer program product.

First claim

The invention claimed is:

1. A method of authenticating a user using an electronic device, the electronic device comprising:
a fingerprint sensor configured to acquire a fingerprint pattern of the user,
a first computer processor connected to the fingerprint sensor and adapted to provide a computational processing environment having a first security level for computational processing,
a second computer processor arranged in communication with the first computer processor and adapted to provide a computational processing environment having a second security level for computational processing, wherein the second computer processor is a general processor for the electronic device that is configured to at least partly control a display screen of the electronic device, and
a third computer processor arranged in communication with the second computer processor and adapted to provide a computational processing environment having a third security level for computational processing, wherein the second security level is lower than the first and the third security level and the method comprises the steps of:
acquiring a fingerprint pattern using the fingerprint sensor and the first computer processor,
determining, using the first computer processor, a first set of features indicative of the fingerprint pattern, wherein the first set of features is based on a first depiction of the fingerprint pattern,
forming, using the first computer processor, a protected representation of the first set of features,
providing the fingerprint pattern and the protected representation of the first set of features to the second computer processor,
determining, using the second computer processor, a second set of features indicative of the fingerprint pattern, wherein the second set of features is based on a second depiction of the fingerprint pattern, the second depiction being at least partly different than the first depiction,
providing the protected representation of the first set of features and the second set of features to the third computer processor,
extracting, at the third computer processor, the first set of features from the protected representation of the first set of features, thereby forming an extracted representation of the first set of features, and
authenticating, at the third computer processor, the user based on a fingerprint template arrangement representative for the biometric fingerprint pattern of the user, the extracted representation of the first set of features, and the second set of features, wherein the fingerprint template arrangement is stored with a memory associated with the third computer processor.

2. The method according to claim 1 , wherein the step of extracting the protected representation of the first set of features comprises providing a challenge from the third computer processor to the first computer processor.

3. The method according to claim 2 , wherein the challenged is relayed through the second computer processor.

4. The method according to claim 1 , wherein the step of forming the protected representation of the first set of features comprises including a timestamp with the protected representation of the first set of features.

5. The method according to claim 4 , wherein the step of authenticating the user is further dependent on the timestamp.

6. The method according to claim 1 , wherein the first and the third computer processor is adapted to provide a secure processing environment.

7. The method according to claim 1 , wherein the fingerprint template arrangement comprises a first (T vf ) and a second (T vh ) fingerprint template portion.

8. The method according to claim 7 , wherein:
the first fingerprint template portion (T vf ) corresponding to a structure of the extracted representation of the first set of features, and
the second fingerprint template portion (T vh ) corresponding to a structure of the second set of features.

9. The method according to claim 7 , wherein the user is authenticated based both on a first comparison between the extracted representation of the first set of features and the first fingerprint template portion and a second comparison between the second set of features and the second fingerprint template portion.

10. The method according to claim 9 , wherein the user is authenticated if the both the first and the second comparison is indicated as successful.

11. The method according to claim 1 , further comprising the steps of:
forming, using the second computer processor, a protected representation of the second set of features, and
extracting, at the third computer processor, the second set of features from the protected representation of the second set of features, thereby forming an extracted representation of the second set of features.

12. The method according to claim 11 , wherein the protected representation of the second set of features is formed using a key being different from a key used for forming the protected representation of the first set of features.

13. The method according to claim 1 , wherein the first set of features is determined from a sub-section of the fingerprint pattern.

14. The method according to claim 1 , wherein first computer processor and the third computer processor shares a symmetric integrity protection key (K) for protecting and extracting of the first set of features.

15. The method according to claim 1 , wherein first computer processor and the third computer processor are adapted to apply a scheme based on asymmetric cryptography for integrity protection of at least one of the first and the second set of features.

16. The method according to claim 1 , wherein the step of first set of features comprises determining a ridge flow from the fingerprint pattern.

17. The method according to claim 1 , wherein the first depiction of the fingerprint pattern is at a first resolution and the second depiction of the fingerprint pattern is at a second resolution, wherein the first resolution is lower than the second resolution.

18. The method according to claim 1 , wherein the first depiction of the fingerprint pattern comprises a sub-section of the fingerprint pattern generated by a cropping process, a decimation process, and/or a truncation process.

19. An electronic device, comprising:
a fingerprint sensor configured to acquire a fingerprint pattern of the user,
a first computer processor connected to the fingerprint sensor and adapted to provide a computational processing environment having a first security level for computational processing, and
a second computer processor arranged in communication with the first computer processor and adapted to provide a computational processing environment having a second security level for computational processing, wherein the second computer processor is a general processor for the electronic device that is configured to at least partly control a display screen of the electronic device, wherein the electronic device is adapted to:
acquire a fingerprint pattern using the fingerprint sensor and the first computer processor,
determine, using the first computer processor, a first set of features indicative of the fingerprint pattern, wherein the first set of features is based on a first depiction of the fingerprint pattern,
form, using the first computer processor, a protected representation of the first set of features,
provide the fingerprint pattern and the protected representation of the first set of features to the second computer processor,
determine, using the second computer processor, a secon

Assignees

• Fingerprint Cards Ab
• Fingerprint Cards Anacatum Ip Ab

Inventors

• Tuneld Mats
• Gehrmann Christian
• Setterberg Eric

Classifications

• G06V40/53

  Measures to keep reference information secret, e.g. cancellable biometrics · CPC title

• G06V40/10

  Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands · CPC title

• G06V40/1365

  Matching; Classification · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• H04L9/3271

  using challenge-response · CPC title