Method and apparatus for user authentication

Patent metadata

Field	Value
Publication number	US-9712524-B2
Application number	US-201514623845-A
Country	US
Kind code	B2
Filing date	Feb 17, 2015
Priority date	Feb 19, 2014
Publication date	Jul 18, 2017
Grant date	Jul 18, 2017

Abstract

An electronic device is provided including a biometric sensor, a memory, and a processor configured to: initiate a transaction with a server; receive an authentication request from the server; retrieve a biometric template stored in a secure portion of the memory in response to the authentication request; capturing a biometric sample using the biometric sensor; comparing the biometric template with the biometric sample; and transmitting to the server a message indicating an outcome of the comparison.

First claim

What is claimed is:

1. A method of performing authentication using biometric information by an electronic device, the method comprising:
initiating, by a secure virtual core, a transaction with a server;
receiving a biometric authentication request from the server;
retrieving, by the secure virtual core, a biometric information stored in a secure portion of a memory in response to the biometric authentication request;
acquiring, by a biometric sensor at least one biometric attribute of a user and outputting biometric information of the user;
determining, in the secure virtual core, whether the acquired biometric information is matched to the retrieved biometric information;
transmitting a message including an outcome of the determining to the server,
wherein the memory is partitioned into a general portion and the secure portion being not accesible by a general virtual core,
wherein the message is encrypted through a preset method, wherein an encryption program is received from an external device to encrypt the message if the electronic device does not support the preset encryption method, and wherein the electronic device comprises at least one processor including at least the general virtual core and the secure virtual core.

2. The method of claim 1 , further comprising when the biometric information of the user is acquired, extracting biometric template from the biometric information of the user;
decrypting the retrieved biometric information; and
comparing the extracted biometric template and the decrypted biometric information to determine whether the information matches each other.

3. The method of claim 1 , wherein the message transmitted to the server includes one or more of a match score, trial times, an account when the matching is linked with the account, information indicating which hand and which finger correspond to biometric information if the biometric information is a fingerprint, authentication time information, an authentication value of the electronic device, position information of the electronic device, network information, a temporary password generated, and a predetermined value by which an authentication result can be identified.

4. The method of claim 3 , wherein the generated temporary password is a common function value between the electronic device and the server.

5. An apparatus for performing authentication using biometric information, the apparatus comprising:
at least one processor comprising at least a general virtual core and a secure virtual core;
a biometric sensor configured to acquire information regarding at least one biometric attribute of a user and output biometric information corresponding to the acquired biometric attribute;
a memory partitioned into a secure portion and a general portion, the secure portion for storing the biometric information and the secure portion being not accesible by the general virtual core;
a biometric information communication module operated on the secure virtual core is configured to provide authentication information to a server; and
a biometric information processing module operated on the secure virtual core is configured to:
in response to a request for security authentication, retrieve the biometric information stored in the secure portion of the memory,
acquire a biometric information of the user using the biometric sensor,
determine whether the acquired biometric information is matched to the retrieved biometric information, and
transmit an outcome of the determining to the server,
wherein the message is encrypted through a preset method, and
wherein the biometric information processing module receives a encryption program to encrypt the message if biometric information processing module does not support the preset encryption method.

6. The apparatus of claim 5 , wherein, the biometric information processing module is configured to extract biometric template from the biometric information of the user, and decrypts the retrieved biometric information, if the biometric information processing module acquires the biometric information of the user, and the biometric information processing module compares the extracted biometric template and the decrypted biometric information to determine whether the information matches each other.

7. The apparatus of claim 5 , wherein the message transmitted to the server includes one or more of a match score, trial times, an account when the matching is linked with the account, information indicating which hand and which finger correspond to biometric information if the biometric information is a fingerprint, authentication time information, an authentication value of an electronic device, position information of the electronic device, network information, a temporary password generated, and a predetermined value by which an authentication result can be identified.

8. The apparatus of claim 7 , wherein the generated temporary password is a common function value between the electronic device and the server.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Chang Moonsoo
• Kim Taeho
• You Heejun
• Lee Yangsoo

Classifications

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title