초록 ▼

Biometric identification is combined with digital certificates for electronic authentication as biometric certificates. The biometric certificates are managed through the use of a biometric certificate management system. Biometric certificates may be used in any electronic transaction requiring auth

Biometric identification is combined with digital certificates for electronic authentication as biometric certificates. The biometric certificates are managed through the use of a biometric certificate management system. Biometric certificates may be used in any electronic transaction requiring authentication of the participants. Biometric data is pre-stored in a biometric database of the biometric certificate management system by receiving data corresponding to physical characteristics of registered users through a biometric input device. Subsequent transactions to be conducted over a network have digital signatures generated from the physical characteristics of a current user and from the electronic transaction. The electronic transaction is authenticated by comparison of hash values in the digital signature with re-created hash values. The user is authenticated by comparison against the pre-stored biometric certificates of the physical characteristics of users in the biometric database.

대표청구항 ▼

[ What is claimed is:] [1.]1. A method for authenticating an electronic transaction involving a user, comprising the steps of:registering a user, including the steps of:receiving a registration set of physical characteristics of the user at a biometric input device;generating registration biometric

[ What is claimed is:] [1.]1. A method for authenticating an electronic transaction involving a user, comprising the steps of:registering a user, including the steps of:receiving a registration set of physical characteristics of the user at a biometric input device;generating registration biometric data corresponding to the registration set of physical characteristics;generating a biometric certificate from the registration biometric data, user input data, a public key of the user, and a digital signature; andstoring the biometric certificate in a biometric database;transmitting an electronic transaction over a network, the electronic transaction including transaction biometric data, transaction first data, and a digital signature generated from the transaction biometric data and the transaction first data, the step of transmitting including the steps of:receiving a current set of physical characteristics of the user;generating the transaction biometric data from the current set related to the physical condition of the user;generating a first hash value signal from the transaction first data and the transaction biometric data;generating the digital signature from the hash value and a private key signal of the user;transmitting the digital signature over the network; andtransmitting the transaction biometric data and the transaction first data over the network; andauthenticating the electronic transaction, including the steps of:receiving the digital signature, the transaction biometric data and the transaction first data from the network;retrieving user identification (ID) data from the transaction first data;retrieving a biometric certificate, corresponding to the user ID data, from the biometric database;extracting the registration biometric data and the user public key from the biometric certificate;decrypting the digital signature using the user public key to retrieve the first hash value from the digital signature;generating a second hash value from the transaction biometric data and the transaction first data;comparing the first hash value to the second hash value using a first classifier;generating a first validation signal to authenticate the transmission of the transaction first data and the transaction biometric data based on the comparison by the first classifier;comparing the registration biometric data and the transaction biometric data using a second classifier; andgenerating a second validation signal to authenticate the user based on the comparison by the second classifier.