System, portable device and method for digital authenticating, crypting and signing by generating short-lived cryptokeys

CA 02462266 2010-11-03

SYSTEM, PORTABLE DEVICE AND METHOD FOR DIGITAL AUTHENTIFICATING, CRYPTING AND SIGNING BY GENERATING SHORTLIVED CRYPTOKEYS

The present invention regards a system, a portable device and a method for digital authentication, encryption and signing by generation of temporary but consistent and repeatable encryption keys.

PREAMBLE

Authentication and transactions that are carried out by means of hand-held devices such as mobile telephones are becoming an increasing part of out lives. An example of this is the increasing use of mobile telephones to perform services that are invoiced directly in the telephone bill

One of the challenges associated with today's systems is the fact that the authentication of the user is tied to a portable device. If an unauthorised person were to gain access to this, products and services may be purchased which are then charged to the owner of the device.

Newer forms of authentication/encryption, e.g. so-called smartcards, also link authentication and encryption to the physical device, with these being based on personal encryption keys stored in the card. If such a device were also to get into the hands of an unauthorised person, there is a risk that the encryption key may be exposed, thus allowing others to claim rightful ownership of the device.

Alternative solutions on the market store sensitive information in a central unit instead of in the portable device. The weakness of such a solution is that it requires a secure online connection to the central unit. This may be costly and may also introduce new security risks. In addition, it would be very serious for such a system if the central unit were to be subjected to a successful attack on security and so corrupt all central information.

CA 02462266 2004-03-30

02763126

S. 04/33

FRF) protector

TIL 00498923994465

16-12-2003

1S-DÉS-2003 17:35

PCI 1 N 0 0 2 / ο δ 3 5 2

The object of the present invention is to provide a system and a method for digital authentication, encryption and signing, which system increases the security for the user by never storing sensitive information such as identity, unique codes or encryption keys, thus making it harder for this to end up in unauthorised hands.

This is provided by means of a system, a portable device and a method respectively, of the type mentioned by way of introduction, the characteristics of which are stated in Claims 1,11 and 16 respectively. Further characteristics of the invention are stated in die remaining dependent claims.

With the present invention, temporary but consistent and repeatable digital keys are generated. The keys are connected uniquely to each user, and are generated by means of a set of input parameters (of which one parameter is typically a biometric input). Ute keys are never stored, but exist in a temporary memory only for as long as they are required, which with today’s technology may mean a fraction of a second.

The keys generated may be used for a number of purposes, including but not limited to:

• authentication • encryption r digital signing

Keys are here taken to mean one or more digital numerical codes of an arbitrary length.

Encryption keys are taken to mean any form of means thatmay be used to render a message indecipherable for a third party, and which may be used to make a message readable to an authorised person.

A message or a document should here be interpreted in the widest possible sense, as any form of information to be sent from a sender.

Authentication is taken to mean that the user is somehow identified as being the person he/she claims to be.

FfflPf.7P i t: 16/12/9003 16:33 ^MENDED SHEET* ^âfipt'lnr7:461 P.004

02763126

S.05Z33

16-12-2003

CA 02462266 2004-03-30

16-DES-2003 17:36 FRA protector TIL 0049S9239944S5

<img file="CA2462266C_D0001.tif" />

Digital signing means using keys connected to one’s identity in order to sign a digital document and assume the same obligations as those entailed by signing a paper version of the same document with a pen.

Biometric input means any form of input that may identify a person, such as fingerprints, retina, DNA, facial topography and voice; but other biometric characteristics that are unique to a person but which have so far not been used commercially, may also be implicit in the term.

COMPARISON WITH EXISTING TECHNOLOGIES

On the market and in the literature, there are several known methods of digital authentication, encryption and signing.

Common to conventional encryption methods is the fact that:

i) the users are allocated secret keys (pre-generated);

ii) die secret keys are stored in an encrypted state in a local or central storage medium; and in) the user must provide a password or a fingerprint in order to gain access to hi/her secret keys every time they are to be used.

The present invention is characterised in that:

i) the users' secret keys are generated from, a set of input parameters linked to each user, typically a combination of biometric inputs, a password and die serial number of a mobile telephone or a smartcard;

ii) die secret keys are never stored, but generated on-the-fly at 1he user’s initiative;

iii) the user must produce the correct set of parameters every time the secret keys are to be generated; and iv) the keys generated are the same every time, provided the input parameters are the same.

Fnipf .zei t : 16/12/2003 1fi:3d

“.461 P.005

16-12-2003

<img file="CA2462266C_D0002.tif" />

<img file="CA2462266C_D0003.tif" />

J.W

Γ' —

CA 02462266 2004-03-30

<img file="CA2462266C_D0004.tif" />

02763126

The present invention introduces a system and a methodology for encryption which can be combined with existing standards for Public Key Infrastructure (PKI) and established, recognised methods of encryption, such as RS A, which has the advantage of being based on algorithms and methods that have undergone decades of testing and 5 validation by a unified international scientific community.

Seen in relation to conventional encryption systems, the present invention provides improved security for the user by never storing the secret keys and only allowing the right user to generate them.

Seen in relation to conventional encryption systems that make use of biometry, the present invention introduces the benefit of not needing to store bio-input anywhere, which is essential, among other things with regard to privacy protection.

In the following, a description is given of existing technologies that make use of biometry, but which diSer from the present invention.

Authentication by means of fingerprints

Several data systems today have a log-in procedure that entails presenting a correct fingerprint in order to gain access to a computer and the associated network resources, 20 This is implemented by each user having a pre-registered “original” or “template” with

------- which the fingerprint presented is compared. If the user presents a fingerprint that is similar enough”, the user is considered to be authorised. The flaw in this method is primarily the fact that bio-input has to be stored, which makes it possible for it to fall into the wrong hands.

Signing of digital documents by means of fingerprints

Today, all signing of documents takes place by means of pre-generated keys. These are stored in a storage medium, and can only be used by producing the correct password or fingerprint. When the literature states that a document is signed electronically by 30 means of a fingerprint”, this is done by the fingerprint giving access to stored keys, which axe then used to sign the document. This method has the following weaknesses:

1. Sensitive bio-input must be stored.

Empf.nr.:461 P.006 ^-AMENDED SHEET *«« . . .. , ». . j

Empf.zeit:16/12/2003 16:34

02763126

S. 07^33

CA 02462266 2004-03-30 protector

TIL 00493923994465

<img file="CA2462266C_D0005.tif" />

16-12-2003

IS—DES—2003 17:3? FRA

PCT I N 0 0 2

2, The encryption key is stored and therefore open to an attack.

Admission control by means of an electronic signature

Admission control by means of an electronic signature that links bio-input, user information and hardware attributes, is known from W0-A1 9965175, which describes a system that combines biometric input, user data and hardware ID. A signed combination of all inputs is stored, in the hand-held unit The keys that are used for signing are allocated by means of conventional methods. When a user is to be authorised, all user inputs are retrieved and signed with the allocated key. If the result is similar enough to the stored “original”, foe user is authorised. This technology was developed in order to verify rightful ownership of a portable device that carries privileges, such as e.g. a key card. By storing bio-information in the card, it becomes possible to confirm the user as foe rightful owner of the card. Thus the purpose of this technology is completely different from foe present invention.

Biometric encryption

Mytec Technologies uses biometric inputs to encrypt a pre-generated secret key. The encrypted key is then stored in foe portable device. The secret key may be regenerated by presenting the correct biometric input (US patent 6 219 794 and US patent 5 680 20 460). This method has foe following weaknesses:

1. Sensitive parts of foe bio-input must be stored.

2. The encryption key is stored in an encrypted form, but is open to an attack.

Bodo

A German patent has proposed a method that generates private keys directly from a fingerprint (DE 42 43 908). The proposed method has several weaknesses that render it unsuitable for practical use. Two of foe most important weaknesses are:

1. Bodo does not address the problem of how to handle natural variations in the bio-input. This is foe fundamental problem-thàt has to be solved for this method.

Thus for practical purposes, fois method is considered useless (ref. chapter 22 in

ICSA Guide to Cryptography, Randall K. Nichols, McGraw-Hill, 1999).

Enipf.zeit :16/12/2003 16:34

AUIJJDH) SHF I I ’ LfflPT.nr^v..^J461 P.007

02763126

S. 08/33...................“

16-12-2003

CA 02462266 2004-03-30

1S-DE5-2003 17:37 FRR protector TIL 00493923394465

<img file="CA2462266C_D0006.tif" />

2. The Bodo method is unable to handle compromised keys. A bio-input has a unique connection to a given private key. If the key were to be compromised, its bio-input would not be usable for generation of new and different encryption keys, which is incompatible with international standards for the use of private keys.

SYSTEM DESCRIPTION

In the following, the invention will be described in greater detail through a description, of the system with reference to the figures, in which:

Fig. 1 shows a block diagram of the system for digital authentication, encryption and signing;

Fig. 2 schematically shows an example of digital signing in wireless networks;

Fig. 3 schematically shows an example of a code calculator; and

Fig. 4 schematically shows an example of the invention used by an all-round key (master key).

Fig. 1 shows an analogue or digital system that receives user input and through use of software and hardware generates an encrypted and signed message.

The hardware required to implement the solution may be based on existing solutions currently on the market

Software and algorithms required to implement the solution may be based on existing known techniques and algorithms.

In the figure, the invention is illustrated in the form of a block/flow diagram that differentiates between input, where the values that form the basis for the generation of encryption keys are input, a hardware/software part HW/SW, and output data, cf. the bottom of the figure.

Enpf-zeit:16/12/2003 16:35 'AMI.RI Ή) SHLf I i Znr ; : 461 P .008

<img file="CA2462266C_D0007.tif" />

TIL 00498923994465

16-1 o.iQS

16-DES-2003 17:37

CA 02462266 2004-03-30

FRA protector

PET / N 0 0 2 / 0 0 3 5 2

Input

Reference number 101 denotes a key input. A typical example of such an input may be some form of biometry, such as e.g. fingerprints, voice, retina, iris, DNA or other biometric characteristics.

Reference number 102 denotes an analogue or digital user code. This is typically an alphanumeric password. The user is free to select this, but the same password must be used every time the keys are to be generated.

Reference number 104 denotes a digital document such as defined in chapter 1.

HW/SW

Reference number 105 denotes a sensor, which may be a sensor that is knownper se and which can read a key input, typically a biometric input, and convert this into a data 15 format that can be read and used by the device 106 for generation of keys.

Thus the sensor 105 may be one that generates a 3D digital representation of a finger, based on measurements of capacitance.

When using DNA ss the biometric data, the device 105 is an analysis device that provides the DNA code of the sample, which can be converted into a data format that may be read and used by the device 106 for generation of encryption keys.

In addition to key input and user co.de, a system input 103 may be supplied. System inputs are often stored in the system (generally a portable device) during manufacture or through an initiation process. The system input (103) consists of information, that is specific to each individual version of the hardware used or is unique to each individual user. Examples of this may be the serial number of a smart card, the PUK. code of a mobile telephone, stored random bit string or insensitive user specific information.

³⁰

The device 106 generates encryption keys at the user’s initiative. The generated keys are uniquely connected to input 101,102,103 and 105 by:

AMENDED SHEET)

P»009

Enipf -zei t : 16/12/2003 16:35

16-12-2003

16—DES-2003 17=38

02763126

S.10x33 ' ”

TIL 00498923994465

<img file="CA2462266C_D0008.tif" />

CA 02462266 2004-03-30

ERR protector

<img file="CA2462266C_D0009.tif" />

<img file="CA2462266C_D0010.tif" />

1. the same keys being generated every time the same set of input parameters are presented, or by

2. the generated keys forming a unique series of numbers, finite or infinite,

The keys generated in the device 106 are used in a device 107 for digital signing/ encryption. A typical example of such signing/encryption would be the RS A public key technology, which at present is considered to be one of the most secure technologies for this.

Output data

Data 108 transmitted from the hardware device is typically both encrypted and signed. This means that only the recipient should be able to read the message, while at the same time allowing the recipient to verify that the sender is who he/she claims to be.

DESCRIPTION OF THE INVENTION

4.1 GENERAL METHOD

Thepresent invention introduces a generic method for generation of encryption keys uniquely connected to each user by means of biometry.

The general method of the present invention is: ’

a) To define an n-dimensional characteristic vector fq(n) from key input (101), so that/?fn) is unique to each user and repeatable even in the case of natural variations in the analogue input 101.

b) To detcnnine/çfnj from the user’s key input

c) To generate one or more prime numbers uniquely defined by fq(n) and a predefined prime number generator G.

d) To determine one or more encryption keys for the user, uniquely defined by function K, using generated prime numbers as input The function K will be uniquely defined by the type of encryption technology being used,

e) The encryption keys are ready for use.

BiPf.7eit:16/12/9003 16:35

[AMENDED SHE! I

- ‘~tmpf.*nr.:461 P.010

16-12-2003

16-DES-2003 17:38

CA 02462266 2004-03-30

FRfi protector

TIL 00488923994465

<img file="CA2462266C_D0011.tif" />

02763126

PCT/NOO2/O0352

4.2 Method of public key encryption

a) Define an n-dimensional characteristic vector/^ from key input (101), so that Jq(n) is unique to each user and repeatable even in the event of natural variations in the analogue input 101.

b) User initiation

1. Determine/?/^ from user’s key input

2. Generate two prime numbers p and q from a pre-defined prime number generator G and/ç(n) as input.

3. Determine user’s private and public key from a function K and the prime numbers p and q.

4. Record a connection between the public key and the user in a central register.

c) Application

1. Determine fq(n) from user’s key input

2. Generate two prime numbersp and q from a pre-defined prime number generator G andj^frç) as input

3. Determine user’s private and public keys from a function K and the prime numbers p and q.

4. The keys are ready for use.

4.3 Extraction of characteristics

A number of different known methods of extracting characteristics from the key input may successfully be used in the present invention. This includes well known work in the area of fingerprint analysis, as well as conventional techniques &amp;om image processing, signal processing, statistics aud mathematics.

However, a prerequisite of the present invention is that the natural variations in the analogue input 101 (key input) must not generate different characteristics every time.

&gt;

Le. the characteristics determined must be consistent and repeatable in spite of natural 30 variations from one sample to the next.

Fmpf _7pi + : 1R/17/%IilR 1fi:35

FaMENPED SHEEP

-----* tinPT~nr1Jt461 P.011

There are two main solutions to this problem. One is to find characteristics that are inherently robust against natural variations in the key input This is the most demanding \c- _CA 02462266 2004-03-30

16-DES-2003 17:33 FRA protector TIL 00493923994465

<img file="CA2462266C_D0012.tif" />

<img file="CA2462266C_D0013.tif" />

<img file="CA2462266C_D0014.tif" />

<img file="CA2462266C_D0015.tif" />

<img file="CA2462266C_D0016.tif" />

<img file="CA2462266C_D0017.tif" />

<img file="CA2462266C_D0018.tif" />

<img file="CA2462266C_D0019.tif" />

<img file="CA2462266C_D0020.tif" />

<img file="CA2462266C_D0021.tif" />

way. An alternative is to «se a quantification technique in order to convert an analogue signal into a digital, repeatable signai By achieving this, many more characteristics can be used to implement the present invention. Such a generic quantification technique is described in 4.5.

<img file="CA2462266C_D0022.tif" />

4.4 Generation of prime numbers and encryption keys

The general method refers to a prime number generator G. A number of different known prime number generators below is a simple version of G, which may be used to generate 1024 bit RS A encryption keys.

a) Run fq(n) through a hash, function where the output is two unique hash values hl and h2, both of which have a length of 512 bits.

b) For each of the hash values, look for the nearest prime number by incrementing the hash value by the value of 1 until a prime number has been found. This yields two prime numbers termed p and q.

c) The function K for generation of a public and a private key for RS A is defined by:

o Public key PU=p*q o Private key PR is a vector with the elements/? and q,PR=[p,q]

4.5 Conversion of a variable analogue signal Into a repeatable digital signal One of the greatest challenges in all uses of biometry for authentication and encryption is how to convert an analogue and variable input into a repeatable, consistent digital signal without losing die characteristics of the analogue signal· An efficient way of solving this is described below.

Instead of converting the entire key ϊηρηζ e.g, a finger print image, we convert a characteristic vector that represents the most important characteristics of the key input This characteristic vector is processed according to the method described below, so as to render it robust against natural variations in the key input.

Step 1: Preanalysis:

AME NDt'U ^!'.|-ΙΠ î I p_Q₁₂

EmPf ,zei t : 16/12/2003 16:36

16-12-2003

16—DES-2003 17:33

TIL 00498923994465

CA 02462266 2004-03-30

FRR protector

02763126

S. 13Z33 ......

<img file="CA2462266C_D0023.tif" />

a) Select π suitable characteristics/^) of the key input

b) Perform an analysis of a representative selection of relevant key inputs.

c) For each characteristic, spEt the sample space into intervals in such a way as to take into account the desire for characteristics from two different key inputs to end up in different intervals, while characteristics from the same key input end up in the same interval.

Step 2: User initiation:

a) Determine a cutting vector/72(h) from m samples of/?h) in user’s input.

b) Determine a correction vector v(n) in a manner such that each element of /m(n)+v(h) end up in the middle ofthe nearest interval.

c) Store v(n) in a manner such as to make it available when the user’s encryption keys are to be generated.

Step 3; Conversion:

a) Determine/^) from the key input.

b) Determine/v(h) M(ⁿ) + vfa)

c) The converted characteristic vector fq(n) is determined in such a way that each, element identifies the interval in which the corresponding element of fv(n) is located.

4.6 Storing v(n)

The method in 4.5 calls for somewhere to store a correction vector v(n) for each user. An obvious place to store this is locally in the portable device, as a system input (103) 25 such as shown in Figi.

Note that v(k) does not contain information that in any way can be used to reconstruct the original key input or the user’s encryption key. Thus storing v(n) in the portable device does not involve a security risk for foe user.

The present invention propose an alternative method of storing v(n) for those cases where foe generated encryption keys are used in a public key regime. Use of the method described below allows v(n) and/or other information of interest to be integrated with .AMENDFD SHEET

.........P.013

Empf.zeit:16/12/2003 16:36

16-12-2003

CA 02462266 2004-03-30

16-DES-2003 17:39 FRR protector TIL 0049B923994465

02763126 |

5.14X33

PCTI H 0 0 2 I 0 0 3 5 2 the public key without reducing the security in the system. The example below makes use of the RS A public key technique.

Step 1: User initiation:

a) Determine/fnJ, v(n) and/gfnj for the user as above.

b) The user’s private key PR and public key PU are both functions of the prime numbers p and q.

c) Set the requirements for PU such that a global pre-defined function Y with PU as the input yields v(h), Y(PU) = v(n.)

<img file="CA2462266C_D0024.tif" />

e) Select a new prime number q such that Y(PU) ~ v(n).

Step 2: Generation of private key:

a) Determine v(n), Y(PU) * v(n).

b) Determine/^ from key input (101).

c) Determinefq(n) and v(n) as above.

d) O^etnàimpüotB.fq(n).

e) Determine 7 from public key Pt/— pq.

j) User’s private key PR = [p,qj.

4.7 Stored system attribute

As described in 3, a stored system attribute is an optional input The benefit of not using input 103 is that the portable device becomes completely user independent. This is a feature offered by no other conventional methods.

The advantage of the user being dependent on a particular portable device is that the security is increased, as an abuser will actually be dependent on being able to get his bands on the right portable device.

AF ιΙ_ΝΗΓΓ&gt; .Hi-Fi

........ tmPTinr::461 P.014

Empf .zei t : 16/12/2003 16:36

6-12-2003

16-DES-2003 17=39 FRA

CA 02462266 2004-03-30 protector

TIL 0049S9239944S5

Ο ’763126 S. ro/j-j

<img file="CA2462266C_D0025.tif" />

Another benefit of using a stored system attribute in the generation of encryption keys is that the amount of input information increases, which reduces the requirements for unique information in the key input (101).

5 CHARACTERISTICS OF THE INVENTION

5.1 Does not store sensitive information

The strength of the present invention lies in the fact that no sensitive information regarding the user is stored anywhere, neither centrally nor in the portable device.

Conventional techniques store information containing:

1. Sensitive information regarding the user’s biometry and/or,

2. encryption keys.

Such stored information may be abused in order to find sensitive user biometry or the user’s secret keys. The present invention does not store any sensitive information, and is 15 therefore more attractive than those technologies which have so far been known, both when it comes to privacy protection and security.

5.2 User independent portable devices

The present invention allows secure authentication and signing by means of general,χ user independent portable devices.

User independent portable devices maybe very useful fam a user’s point of view. If person A were to lose or forget his portable device, he will still be able to authenticate 25 himself or generate digital signatures by borrowing person. B’s portable device.

User independent devices can be made on the basis of the system described in 3, by selecting one of the following methods:

1. Use only the biometric key input (101) as input to the generation of encryption keys.

2. Use the biometric key input (101) and a system attribute (103) hidden in. the user’s public key as input to the generation of encryption keys.

^AMENDED SHEET!

P.015

Enpf.zeit:16/12/2003 16:36

CA 02462266 2004-03-30

IS—DES—2003 17:33 FRfl protector TIL 00498323334465

<img file="CA2462266C_D0026.tif" />

02763126

<img file="CA2462266C_D0027.tif" />

3. One of the above alternatives, but where a secret user’s code (102) is also used as input to the generation of encryption keys in order to further increase security.

5.3 Variable security clearance

Using combinations of one or more of the input parameters achieves variable security clearance in one and the same system. This is very useful when it comes to differentiating between tasks with different security requirements. Consequently, the user may only have to present one of the input parameters for simple tasks, while being required to present all the inputs for more demanding tasks.

The different security levels offered are achieved by combining one or more of the input parameters describedin 3. The following describes some examples of how the input <img file="CA2462266C_D0028.tif" /> • Level 1 : Stored system attribute, which gives the lowest security.

Level 2: Alphanumeric code, which gives a security level one degree higher than the lowest level· • Level 3: Alphanumeric code and stored system attribute, which gives a security

<img file="CA2462266C_D0029.tif" />

• Level 4: Biometric input, which gives a security level three degrees higher than the lowest security.

• Level 5: Biometric input and stared system attribute, which gives a security level four degrees higher than the lowest security.

• Level 6: Biometric input and alphanumeric code, which gives a security level five degrees higher than the lowest security.

Level 7: Biometric input, alphanumeric code and stored system attribute, which gives the highest security.

Conventional systems are not able to offer a variable security clearance in one and the same system.

[amended si ieet------...._Wpf:nrtJ₄₆₁ p_₀₁₆

Empf-zeit:16/12/2003 16:37

<img file="CA2462266C_D0030.tif" />

TIL 00498923994465

6-1 £L-&lt;CUUO _CA 02462266 2004-03-30

1S-DÉS—2003 17:39 FRO protector

02763126 *5« 1 I /

<img file="CA2462266C_D0031.tif" />

5.4 Multiple digital key sets

The system described in 3 is very well suited for multiple key sets connected to each person by varying one of the input parameters. Examples of how such different key sets may be used includes one set being connected to a person as a private individual, 5 another being connected to the user as an employee in a company, and a third being connected to privileges earned in a customer relationship. One or more of these key parameters may also be anonymous in the sense that the user’s identity is not directly connected to the key set This finds several important uses within the area of privacy

A user distinguishes between different key sets by varying one or more of the input parameters. An example of this may be for the user to have one password for each key set. Alternatively, the user has one hand-held device far each key set. The user may also vary several of the input parameters simultaneously, for instance by one key set being connected uniquely to the left index finger, password number one and a red hand-held device, while the second key set is connected to the right index finger, password numb er two and a blue hand-held device.

Conventional systems do not have the same flexibility as the present invention, which 20 would allow them to offer multiple key sets in one and the same system.

5.5 Dynamic changes in digital key sets

The system described in 3 also allows dynamic changes in a digital key set without 25 requiring the user to go through a new process of registration.

If the user alters the password, the biometric input, the method of extracting characteristics from biometric input, or changes the hardware device, the key will change as a consequence of this.

If the user communicates the change in a secure manner to central servers, the user can dynamically update one or more of his key sets.

Fmpf.zeit:16/19/9003 16:37 lAMENI)! f&gt; SlILf J:' ^U rmp't.'nr7:461 P.Û17

Γ· ~

16-12-2003

CA 02462266 2004-03-30 .16

027.33 i 2G

<img file="CA2462266C_D0032.tif" />

A practical use for this is when there is a wish to change one’s password. Alternatively, the portable device may be broken, necessitating a replacement.

When changes are communicated centrally, it is obviously important that this be carried out in a secure manner. There are several known techniques that ensure secure updating.

One technique is to have a special secret key that is split up and divided among friends. How many friends this special secret key has been distributed among, and exactly who they are, is only known to the user. Consequently, the user is the only one who can produce the special secret key that is required in order to validate a change in the key set on the central server.

Conventional systems can not offer a dynamic change in key sets, such as offered by the present invention.

EXAMPLE SYSTEM 1 - DIGITAL SIGNING IN WIRELESS NETWORKS

This example describes one application of the present invention for digital signing of messages in wireless networks, cf. Fig. 2. The user uses a mobile telephone with an integrated system such as described in Figure 1, where:

• Reference number 101 indicates the placing of the user’s right index Sager.

• Reference number 102 indicates the input of an alphanumerical password.

Reference number 103 indicates die serial number of the mobile telephone.

Reference number 104 indicates input of the message to be signed.

• The device 105 is a stripe sensor that generates a 3D fingerprint image based on capacitance measurements.

• Block 106 indicates an algorithm for generation of RSA keys. Information is extracted from the fingerprint (3D) through a combination of Wavelet transformation and eigenvalues. This data is used in a prime number algorithm for generating RSA keys.

• Block 107 illustrates conventional RSA encryption/ decryption.

IaMFNDED SIH LI

-t' :.4aa

Empf.zeit:16/12/2003 16:37

Empf.nr.:461 P.018

CA 02462266 2004-03-30 protector

TIL 00498923994465

16-12-2003

16-DES-2003 17:40 FRA

02763126

s. 19/-33

PCT I N 0 0 I I 0 0 1 5 2 • Block 108 indicates the signed version of the message 104.

All users will initially register their public RS A key in a central server. The public RS A key is generated during registration by means of hardware and software (based on Fg. 1) 5 integrated into the user’s mobile telephone. When registering, the user will also produce another form of identification (traditional) in order to prove that he/she is who he/she claims to be.

When registration has been carried out, all users can easily enter into and sign agreements between themselves. For instance, a user may fill in a loan application on the Internet and sign it by moving his finger across the stripe sensor on his mobile telephone. The user’s private RS A key is then generated in the device 106, existing for the fraction of a second it takes for the software in the mobile telephone to sign the loan application in the device 107. The application is addressed uniquely to the lender by encrypting it with the lenders public key, which can be found by looking it up in a central server (see Fig. 2).

The wireless connection in Fig. 2 between the mobile telephones and the mobile telephones and tile central server may be Bluetooth and/or GSM. The communication 20 across this wireless connection may be protected by means of standard encryption technology such as e.g. Secure Socket Layer (SSL).

The above described system provides much better security than conventional systems. The user’s private RSA key is not stored anywhere, and will therefore not get lost even 25 if the user were to lose his mobile telephone. An unauthorised user will find it very costly and demanding to generate the private key. More specifically, it would require access to:

1. The user’s fingerprints.

2. The correct 3D image of the user’s fingerprints (estimated from 1).

3. The user’s password.

4. The serial number of the user’s mobile telephone.

5. An algorithm for generating keys.

'AMI NDED SHEETr p_₀₁₉

EmPf.7eit: 16/12/2003 16:38 r· CA 02462266 2004-03-30

PCI I N 0 0 2 I

16-12-2003

02763126

..............

0 3

This makes unauthorised use very difficult

EXAMPLE SYSTEM 2 - CODE CALCULATOR

This example describes an application of the present invention which in terms of functionality is similar to today’s code calculators used to authorise users Internet banks, cf. Fig. 3.

All users have a portable device in accordance with Fig. 1, where;

• Reference number 101 denotes the user’s iris. ' « Alphanumeric code 102 is not used in this example.

« Reference number 103 denotes the serial number of the code calculator.

· Reference number 104 in this example denotes an alphanumeric challenge from the hanlc.

• The sensor 105 in this case is an iris camera.

• Block 106 in this case is a pseudo-random algorithm that generates a unique, finite series of numbers for each set of input parameters.

· » Block 107 in this example denotes logic that combines the challenge from the bank 104 and block 106 in order to respond to the challenge.

• Block 108 in this example denotes an alphanumeric response to the challenge 104 from the bank.

All users are initially registered with their bank with a secret series of numbers by means of their hand-held device. The series of numbers is generated from a pseudorandom algorithm 106 on the basis of inputs 101-103.

The series of numbers is not stored anywhere else but in the bank, but is generated on30 the-fly by the user in a portable device every time it becomes necessary to authenticate oneself to the bank. This reduces the risk of unauthorised persons gaining access to the user’s secret series of numbers.

[AMEND'. D ΊΙII'[-I

Bipf.zeit: 16/12/2003 16:38

Empf.nr.:461 P.020

16-DE8—2003 17M1 FRA protector

TIL 00498923994465

16-12-2003

CA 02462266 2004-03-30 ’/j ;i?_ti

S. 21/33

<img file="CA2462266C_D0033.tif" />

Authentication of the user takes place through the bank generating random challenges to which only a person with the correct series of numbers has the correct response. A number of methods of doing this are known. One simple example is for the bank to challenge the user to state digit number x, y and z in the user’s series of numbers (the bank never requests the same number in the series twice). If the user provides the correct response (output 108), the user is authorised.

The term encrypted connection is taken to mean a fixed or wireless connection encrypted by means of a conventional encryption protocol such as Secure Socket Layer (SSL). The terminal may be a personal computer (PC), a personal digital assistant (PDA), or a mobile telephone. The code calculator may be a hand-held device based on the system described in 1. In the event of the terminal being a PDA or a mobile telephone, die hand-held device may be an integrated part of the terminal.

EXAMPLE SYSTEM 3 - MASTER KEY

This example describes a portable device, a master key (all-round key) that by use of the user’s fingerprints electronically operates electronic locks/switches for which, die . 20 user is authorised, of. Fig. 4.

The master key is based on the system described in Fig. 1, where:

• Reference number 101 denotes the user’s right thumb.

· Alphanumeric code 102 and serial number 103 are not used in this example.

• Reference number 104 denotes an encrypted challenge from the Iock/switch to be operated, • The sensor 105 in this example is a fingerprint sensor.

• Block 106 denotes an algorithm for generation of RSApublic/private key pairs.

· Block 107 denotes a conventional RSA decryption /encryption.

« Block 108 denotes an encrypted response to the challenge from the electronic lock/switch.

tAMFNDFD SHEFT cmPT.nr.:461.P.O21

Empf.zeit:16/12/2003 16:38

1 2-/ IG T

16-DE5-2003 17:41

FRR

CA 02462266 2004-03-30 protector TIL 00498923994465

PCI / N 0 0 2 /

<img file="CA2462266C_D0034.tif" />

The master key and the lock/switch to be operated contain a wireless communication module based on technology such as Bluetooth. The lock/switch contains a list of authorised users.

When the user activates the master key by pressing on the fingerprint sensor, the user’s public RSA key is transmitted. If the public RSA key matches a registered user in the lock/switch, a random test code is transmitted back, encrypted with the user’s public RSA key (104). The user decrypts the test code with his private RSA key and encrypts it with the public RSA key of the lock/switch before returning it (output 1 OS). The lock/switch decrypts the received response with its private RSA key, and if the test code received is correct, the user is authorised.

The master keymay be freely shared and used by several persons, but a user will only be able to operate locks for which he/she is authorised, hence the term all-round key, a key for all locks and for all persons.

There is no risk involved if the master key gets into the wrong hands, as it contains no information that specific to the user or the locks/switches for which the user is

--20-· authorised. —....................,....„.. ........... ..............

The only way to operate locks/switches for which one is not authorised is to manage to find an authorised user’s private RSA key, which will be a very costly and time consuming process.Î

To further complicate any unauthorised operation of locks/switches, it is possible in the, course the process of generation of the user’s key pair to also demand, a password (102)’ and/or the serial number ¢103) of the master key, in addition to the fingerprints (108).j !

9 APPLICATIONS

The present invention represents a significant innovation by tying biometry and cryptography together in a completely new way. When using the present invention, f^MENDEDSHEETï ^’^w.rCTl P.022

Empf.zei t:16/12/2003 16:38

CA 02462266 2004-03-30

16-12-2003

16-DES-2B03 17:41 e

FRR protector

TIL 00498923994455

02763126

5.25/33

<img file="CA2462266C_D0035.tif" />

there is no need to stare user sensitive information, which is a benefit both in terms of privacy protection and security.

The present invention is compatible with existing standards of public key infrastructure (PKI), and may therefore be used in all areas where PKI is used or may conceivably be used.

However, the application of the present invention is not limited to the PKI fields of application. The present invention may be used in any situation where some form of 10 authentication is required.

The following is a list of some obvious applications:

• electronic transactions • electronic formations of contract · electronic casework • physical admission control (buildings, vehicles and other areas where electronically controlled locks are appropriate) • logical access control (access to computers, networks, privilege-based network . services) . .

' · electronic identification papers

I AMI Nlh ί&gt; .III I I.

®î?nrÎ461 P.023

Euipf .zei t : 16/12/2003 16:39