WO2005111915A2 - Procede de masquage d'une donnee numerique, telle que par exemple un empreinte biometrique - Google Patents
Procede de masquage d'une donnee numerique, telle que par exemple un empreinte biometrique Download PDFInfo
- Publication number
- WO2005111915A2 WO2005111915A2 PCT/EP2005/052151 EP2005052151W WO2005111915A2 WO 2005111915 A2 WO2005111915 A2 WO 2005111915A2 EP 2005052151 W EP2005052151 W EP 2005052151W WO 2005111915 A2 WO2005111915 A2 WO 2005111915A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- data
- masking
- security document
- masked
- minutiae
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
- G07C9/25—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition
- G07C9/257—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition electronically
Definitions
- PROCESS FOR MASKING DIGITAL DATA SUCH AS FOR EXAMPLE A BIOMETRIC FOOTPRINT. AND APPLICATION TO THE SECURITY OF A SECURITY DOCUMENT
- the invention relates to biometric identification and / or authentication systems. These systems manipulate biometric data of all types such as, for example, fingerprints, digital fingerprints of the eye, skin, face, or even voice.
- biometric fingerprints are increasingly envisaged to supplement user passwords or a manual signature, in particular for applications requiring a high level of security.
- a biometric fingerprint is a good complement to a password or a manual signature, insofar as a biometric fingerprint can hardly be stolen from its real owner and cannot either " be imitated, In return for this security and insofar as a biometric fingerprint cannot be replaced, it is essential to prevent direct access to this fingerprint in order to guarantee the safety of persons and the reliability of the fingerprint.
- biometric fingerprints of the same individual at different times. Firstly because it is very difficult to position, in a strictly identical manner but at different times, the same measuring instrument adapted to take up the said biometric fingerprint. Second, because the environment (temperature, humidity, etc.) and the general state of health (stress, skin disease, etc.) of the individual at the time the fingerprint is taken can disturb the result of the reading. .
- a first object of the invention is to propose a masking method using a new hash function, better suited for masking biometric fingerprints than the known hash functions.
- the masking method according to the invention is used to secure a biometric fingerprint.
- a second object of the • invention is a use of the masking process of the invention to secure a security document such as for example a bank check.
- p is a large prime number and the elements of the set of prime numbers are small.
- the above masking method is applied to a biometric fingerprint.
- the hashing function according to the invention is applied to this mixed data item to produce a masked data item.
- the real minutiae and the false minutiae are randomly mixed.
- the second object of the invention relates to a method for securing a security document, for example a bank check, during which, after obtaining a reference datum by masking a biometric fingerprint according to a process as described above, • we store said reference data on or in the security document, or • we associate with said reference data a barcode that we store on or in the security document , the reference data and the bar code also being stored in a table.
- a security document for example a bank check
- the function uses as parameters a set (q n , ..., qi) of small prime numbers, for example whole numbers of about 60 bits.
- the function also uses a parameter p, which is a large integer, for example around 1024 bits, p is preferably chosen such that 2 * q n 2t ⁇ p ⁇ 4 * q n ⁇ 2t, where t is a number of errors accepted.
- the function according to the invention is not very sensitive to errors, that is to say that, knowing two masked data m, ⁇ by this function, it is possible to say whether the corresponding clear data of origin b, ⁇ are identical, with a maximum of t errors.
- t is the number of bits of ⁇ different from the bits of b of the same rank, corresponding to the maximum number of errors accepted.
- a and ⁇ which are products of small prime numbers qi, are also small numbers, which further verify the relationship: a * ⁇ ⁇ ⁇ mod p. From this last equality and from the number ⁇ , it is then possible to find the numbers a and ⁇ .
- a decomposition of a and ⁇ into prime numbers finally allows factorizing a and ⁇ . Decomposition is facilitated by taking advantage of the fact that a and ⁇ break down in principle into small prime numbers. If a and ⁇ decompose on the set (q n - r qi), then we deduce that the original data b and ⁇ are identical, except at most t errors.
- the physical biometric fingerprint that one seeks to mask is a fingerprint characterized by a predefined number s of real minutiae.
- An actual minutiae is a detail of an imprint at a given point in the physical imprint, such as a line break, a fork on a line, etc.
- a minutia can be translated by a character string including information on the position and the form of the minutia.
- a set of false false minutiae is first added to the set of real minutiae, also defined by a character string but which do not correspond to a real minutiae of the physical footprint.
- the masked data m can then be stored in a database, on an identity card, in a memory of a smart card, etc.
- the masked data m can be used as reference data, for example to verify the identity of a person, in the following manner.
- An envisaged application of the masking method according to the invention aims to secure a security document such as for example a bank check.
- a security document such as for example a bank check.
- a biometric fingerprint of the owner of the security document is masked by a masking method as described above, to produce a reference datum.
- the reference data is stored on or in the security document, for example by printing.
- the reference datum is associated with a barcode
- the reference datum / associated barcode pair is stored in a database
- the barcode is memorized, for example by printing, on the security document.
- the verification can be done by any person, the data of reference being memorized directly on the document.
- the verification may be made by any person having access to the database, and who is not necessarily the person who receives the document.
- the barcode is produced according to known techniques, for example a one-dimensional barcode could be used, consisting of a series of vertical bars of variable thickness and spacing.
- the choice of the form of the barcode is in practice a function of the number of reference data to be stored, each reference data corresponding to different persons.
- the database in which the pairs of reference data / associated bar code are stored is accessible for verification only to a limited number of people, according to the desired level of security: access can for example be authorized for any person required to receive security documents or, more strictly, only to a certifying authority.
- the security document is a bank check and the owner's fingerprint is stored on the check in the form of a barcode.
- a merchant has a device for reading and masking an imprint provided with means for reading an imprint, masking it and then printing the associated masked data.
- the bank issuing the check alone has the right of access to the database in which the masked reference data (corresponding to the masked initial imprint) and the associated barcode are stored; this access allows him to verify that the imprint left by the person who presented the check to the merchant, and that the latter has masked and printed on the check, matches that of the owner of the check.
Landscapes
- Engineering & Computer Science (AREA)
- Human Computer Interaction (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Collating Specific Patterns (AREA)
- Measurement And Recording Of Electrical Phenomena And Electrical Characteristics Of The Living Body (AREA)
- Measurement Of The Respiration, Hearing Ability, Form, And Blood Characteristics Of Living Organisms (AREA)
- Storage Device Security (AREA)
Abstract
Description
Claims
Priority Applications (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| DK05749585.5T DK1747526T3 (da) | 2004-05-14 | 2005-05-11 | Fremgangsmåde til maskering af et digitalt dataelement, som for eksempel et biometrisk aftryk |
| EP05749585A EP1747526B1 (fr) | 2004-05-14 | 2005-05-11 | Procédé de masquage d'une donnée numérique, telle que par exemple une empreinte biometrique |
| US11/596,560 US7895440B2 (en) | 2004-05-14 | 2005-05-11 | Method of encrypting digital data, a method of masking a biometric print, and application to making a security document secure |
| AT05749585T ATE541267T1 (de) | 2004-05-14 | 2005-05-11 | Verfahren zur maskierung eines digitalen datenelements wie etwa eines biometrischen abdrucks und verwendung dafür zur sicherung eines sicherheitsdokuments |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| FR0405236 | 2004-05-14 | ||
| FR0405236A FR2870413B1 (fr) | 2004-05-14 | 2004-05-14 | Procede de chiffrement de donnes numeriques, procede de masquage d'une empreinte biometrique, et application a la securisation d'un document de securite |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| WO2005111915A2 true WO2005111915A2 (fr) | 2005-11-24 |
| WO2005111915A3 WO2005111915A3 (fr) | 2006-08-10 |
Family
ID=34947119
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/EP2005/052151 Ceased WO2005111915A2 (fr) | 2004-05-14 | 2005-05-11 | Procede de masquage d'une donnee numerique, telle que par exemple un empreinte biometrique |
Country Status (6)
| Country | Link |
|---|---|
| US (1) | US7895440B2 (fr) |
| EP (1) | EP1747526B1 (fr) |
| AT (1) | ATE541267T1 (fr) |
| DK (1) | DK1747526T3 (fr) |
| FR (1) | FR2870413B1 (fr) |
| WO (1) | WO2005111915A2 (fr) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8417960B2 (en) * | 2006-09-06 | 2013-04-09 | Hitachi, Ltd. | Method for generating an encryption key using biometrics authentication and restoring the encryption key and personal authentication system |
| JP5287550B2 (ja) * | 2009-07-01 | 2013-09-11 | 富士通株式会社 | 生体認証システム,生体認証方法,生体認証装置,生体情報処理装置,生体認証プログラムおよび生体情報処理プログラム |
| JP6375775B2 (ja) * | 2014-08-19 | 2018-08-22 | 日本電気株式会社 | 特徴点入力支援装置、特徴点入力支援方法及びプログラム |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6185316B1 (en) * | 1997-11-12 | 2001-02-06 | Unisys Corporation | Self-authentication apparatus and method |
| JP2000011176A (ja) * | 1998-06-23 | 2000-01-14 | Fujitsu Ltd | 認証装置及び記憶媒体 |
| US6658626B1 (en) * | 1998-07-31 | 2003-12-02 | The Regents Of The University Of California | User interface for displaying document comparison information |
| US6697947B1 (en) * | 1999-06-17 | 2004-02-24 | International Business Machines Corporation | Biometric based multi-party authentication |
| US7152786B2 (en) * | 2002-02-12 | 2006-12-26 | Digimarc Corporation | Identification document including embedded data |
-
2004
- 2004-05-14 FR FR0405236A patent/FR2870413B1/fr not_active Expired - Fee Related
-
2005
- 2005-05-11 AT AT05749585T patent/ATE541267T1/de active
- 2005-05-11 EP EP05749585A patent/EP1747526B1/fr not_active Expired - Lifetime
- 2005-05-11 WO PCT/EP2005/052151 patent/WO2005111915A2/fr not_active Ceased
- 2005-05-11 US US11/596,560 patent/US7895440B2/en not_active Expired - Fee Related
- 2005-05-11 DK DK05749585.5T patent/DK1747526T3/da active
Also Published As
| Publication number | Publication date |
|---|---|
| US20070183636A1 (en) | 2007-08-09 |
| EP1747526A2 (fr) | 2007-01-31 |
| FR2870413B1 (fr) | 2006-08-04 |
| ATE541267T1 (de) | 2012-01-15 |
| DK1747526T3 (da) | 2012-05-14 |
| EP1747526B1 (fr) | 2012-01-11 |
| US7895440B2 (en) | 2011-02-22 |
| WO2005111915A3 (fr) | 2006-08-10 |
| FR2870413A1 (fr) | 2005-11-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP1811422B1 (fr) | Procédés de détermination d'un identifiant et de vérification biométrique et systèmes associés | |
| EP1716520B1 (fr) | Utilisation d'une signature numerique obtenue a partir d'au moins une caracteristique structurelle d'un element materiel pour proteger de la lecture directe des informations sensibles et procede de lecture de ces informations protegees | |
| EP0077238B1 (fr) | Procédé et dispositif pour authentifier la signature d'un message signé | |
| US8705873B2 (en) | Secure item identification and authentication system and method based on unclonable features | |
| EP3206192B1 (fr) | Procédé de sécurisation et de verification d'un document | |
| US20050262350A1 (en) | Use of a digital signature obtained from at least one structural characteristic of a material element to protect the direct reading of sensitive data and method for reading this protected data | |
| EP2705503B1 (fr) | Procedes d'enrolement et de verification biometrique, systemes et dispositifs associes | |
| FR2895125A1 (fr) | Procede d'authentification de documents et dispositif de lecture desdits documents a des fins d'enregistrement pour preuve | |
| EP3731117B1 (fr) | Procedes d'enrolement de donnees d'un document d'identite d'un individu et d'authentification d'un document d'identite | |
| EP3742699A1 (fr) | Procédé d'authentification forte d'un individu | |
| EP2605218A1 (fr) | Procédé de sécurisation d'un document électronique | |
| EP1747526B1 (fr) | Procédé de masquage d'une donnée numérique, telle que par exemple une empreinte biometrique | |
| US20090006255A1 (en) | Method of Authentication of the Items Put Into Circulation | |
| FR3024003A1 (fr) | Dispositif et procede d'authentification de document | |
| EP3017421B1 (fr) | Procédé d'impression d'éléments graphiques de sécurité interdépendants | |
| EP1126419B1 (fr) | Procédé et dispositif d'authentification sécurisé d'une personne, par détection d'une caractéristique biométrique, pour une autorisation d'accès | |
| WO2005050419A1 (fr) | Procede de securisation d'une image d'une donnee biometrique d'authentification et procede d'authentification d'un utilisateur a partir d'une image d'une donnee biometrique d'authentification | |
| EP4193283B1 (fr) | Procédé pour générer un document numérique sécurisé stocké sur un terminal mobile et associé à une identité numérique | |
| FR2974652A3 (fr) | Procede d'authentification unitaire d'un objet materiel au moyen d'un algorithme de cryptographie visuelle et d'une signature matiere | |
| FR3093836A1 (fr) | Identité numérique | |
| EP2536061A1 (fr) | Procédé de gestion d'une pseudo-identité intrinsèque à un dispositif | |
| FR2903509A1 (fr) | Module electronique pour le stockage de donnees | |
| EP2927858A1 (fr) | Procédé de réalisation d'un dispositif de sécurité | |
| EP3032450A1 (fr) | Procédé de contrôle d'une authenticité d'un terminal de paiement et terminal ainsi sécurisé |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| AK | Designated states |
Kind code of ref document: A2 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW |
|
| AL | Designated countries for regional patents |
Kind code of ref document: A2 Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
| WWE | Wipo information: entry into national phase |
Ref document number: 2005749585 Country of ref document: EP |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 11596560 Country of ref document: US Ref document number: 2007183636 Country of ref document: US |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| WWW | Wipo information: withdrawn in national office |
Country of ref document: DE |
|
| WWP | Wipo information: published in national office |
Ref document number: 2005749585 Country of ref document: EP |
|
| WWP | Wipo information: published in national office |
Ref document number: 11596560 Country of ref document: US |