Filing Information

Inventor(s)	David S. Abdallah · Barry W. Johnson ·
Assignee(s)	None listed in document.  View assignee updates
Correspondent	COOLEY GODWARD KRONISH LLP;ATTN: PATENT GROUP ·
Application Number	US12190061
Filing date	08/12/2008
Publication date	02/05/2009
Predicted expiration date	08/06/2023
U.S. Classifications	713/186  ·
International Classifications	H04L932  ·
Kind Code	A1

Patent Family

Abstract

A method and system for securely enrolling personal identity credentials into personal identification devices. The system of the invention comprises the manufacturer of the device and an enrollment authority. The manufacturer is responsible for recording serial numbers or another unique identifier for each device that it produces, along with a self-generated public key for each device. The enrollment authority is recognized by the manufacturer or another suitable institution as capable of validating an individual before enrolling him into the device. The enrollment authority maintains and operates the appropriate equipment for enrollment, and provides its approval of the enrollment. The methods described herein discuss post-manufacturing, enrollment, backup, and recovery processes for the device.

Independent Claims | See all claims (2)

1. 1.-14. (canceled)
2. 15. A method, comprising: generating, at a personal identification device, a symmetric biometric key; encrypting a portion of the symmetric biometric key based on a private key associated with the personal identification device and a public key associated with a party to produce an encrypted biometric key portion; and sending the encrypted biometric key portion such that the encrypted biometric key can be stored in an electronic storage repository, the encrypted biometric key portion configured to be decrypted based on a private key associated with the party.