Abstract: This invention provides a mechanism for performing secure configuration and data changes between a PSD and a hardware security module (HSM) using a communications pipe established between said PSD and said HSM. The data changes and configuration changes include but are not limited to installing, updating, replacing, deleting digital certificates cryptographic keys, applets, other digital credentials, attributes of installed objects, or other stored proprietary information.

Abstract: Provided is a biometric imaging device for imaging a biological feature, which includes a sensor for detecting an environmental parameter other than relating to surface topology of the biological feature. The detected environmental parameters like temperature and humidity levels are utilized in image reconstruction to eliminate erroneous structures caused by the environmental conditions. There is also provided a biometric imaging device, which includes a preparation device for use prior to sensing a biometric image. The preparation device is used for conditioning a parameter of the biometric information source, and/or for cleaning the biometric information source.

Abstract: This system for executing a program to which access by a user is controlled by credentials includes a terminal (T), first memory means (F) associated with said program for storing at least first credentials specific to said user, access control means for authorizing access to said program in response to a match between said first credentials and second credentials applied via said terminal, and a security device (PSD) personal to said user, associated with said terminal and including second memory means (M) for secure storage of said second credentials. The terminal (T) includes at least some of credentials management means (CMP) including means for reading said second credentials and transmitting them to said access control means in response to presentation of a request to access said program, and credentials updating; means for selectively commanding the generation and loading into said first and second memory means (F, M) of new credentials replacing the credentials previously stored.

Abstract: The present invention provides a method for authenticating at least one Personal Security Device PSD (1040) vis-ô-vis at least a first Remote Computer System (1050) over a first network (1045) using at least one Client (1010) as a host to said at least one PSD (1040), said method comprising the steps of: a) establishing at least one communications pipe (1075) over said first network (1045) between said at least one PSD (1040) and said at least first Remote Computer System (1050); and b) running a challenge/response process between said Remote Computer System (1050) and said at least one PSD (1040) through said at least one communications pipe (1075).

Abstract: A method of supporting a substantially secure backup copy of a key-server database, said database comprising security information specific to a plurality of users, absent the need for a duplicate key-server is disclosed. According to the method, each individual's security data is stored within the key-server database and is also stored on a portable data storage device, such as a smart card or a PCMCIA token. If the key-server crashes and the database stored thereon is lost, a duplicate key-server database is reconstructed using the aggregate of the partial database files stored on each individual's portable data storage device. Similarly, when a portable data storage device is lost, it can be rebuilt from the data stored within the key-server.

Abstract: A method of recognizing an injury pattern on a fingerprint is disclosed. The method comprises the steps of providing biometric information to a contact imager; imaging and characterizing the biometric information; comparing an image of the biometric information against previously stored templates; upon a comparison result of the comparison, determining an injury pattern; wherein upon an injury pattern determination, performing a comparison against a stored template based on features extracted from the biometric data and the damage data.

Abstract: A system and method of securely supporting password change is disclosed. The method performed by the system includes the steps of detecting an occurrence of a password change operation in execution on a system and receiving a new password by the system; detecting the new password when provided; storing data indicative of the new password in a database independent of the password database of the system for later retrieval; and providing the data indicative of the new password from the independent database to the password database.

Abstract: A method of hashing biometric data for generation of a public template is disclosed. According to the method, a hash function is provided for hashing of feature data the hash function a function of data within the biometric information and determinable therefrom but resulting in a hashing result from which the original feature data is indiscernible.

Abstract: A method for matching biometric data on a smart card is disclosed. A smart card is provided having biometric template data stored thereon. A host processor in communication with the smart card is also provided. A sensed biometric image is provided to the host processor from an individual. From the smart card to the host processor, co-ordinate data relating to a plurality of non-contiguous features of the template data are provided. Other data is extracted from the biometric image, the other data for correlation with the provided co-ordinate data allowing for a subsequent alignment of the biometric image within a known frame of reference relative to the template data on the basis of the provided data and the other data. Once aligned, biometric data is extracted from the biometric image, the biometric data within the known frame of reference and then the extracted biometric data is transmitted to the smartcard.

Abstract: Provided is a biometric imaging device for imaging a biological feature, which includes a sensor for detecting an environmental parameter other than relating to surface topology of said biological feature. The detected environmental parameters like temperature and humidity levels are utilized in image reconstruction to eliminate erroneous structures caused by the environmental conditions. There is also provided a biometric imaging device, which includes a preparation device for use prior to sensing a biometric image. The preparation device is used for conditioning a parameter of the biometric information source, and/or for cleaning the biometric information source.

Abstract: An improved method and system for reading and analyzing fingerprints is disclosed. According to the present invention, fingerprints are scanned and then analyzed to determine a value in dependence upon a predetermined acquisition parameter, such as for instance one of a moisture content of the fingertip and an applied fingertip pressure. The scanned fingerprint is subsequently processed to remove “false minutiae” in dependence upon the determined value, whilst retaining authentic minutiae for user authentication. Processing the fingertip to determine a condition thereof prior to image processing results in a more selective removal of minutiae, thus resulting in a larger set of minutiae being retained for comparison to a stored biometric template.

Abstract: Disclosed is a biometric imaging device a method of processing images of biometric surfaces that are captured using said imaging device. According to the instant invention, an image of a biometric surface presented by an individual is captured by a sensor of the imaging device, either as a single image or as a plurality of overlapping image portions that are combinable to form a single composite image. The imaging device also includes a memory buffer for retrievably storing image data relating to the image of the biometric surface. A processor of the imaging device is provided for analyzing the stored image data to determine a location of a feature of interest and for providing an output image of a known size and shape for use by a host system that is in communication with the imaging device for identifying the individual.

Abstract: A method of recognizing an injury pattern on a fingerprint is disclosed. The method comprises the steps of providing biometric information to a contact imager; imaging and characterizing the biometric information; comparing an image of the biometric information against previously stored templates; upon a comparison result of the comparison, determining an injury pattern; wherein upon an injury pattern determination, performing a comparison against a stored template based on features extracted from the biometric data and the damage data.

Abstract: A method of supporting a substantially secure backup copy of a key-server database, said database comprising security information specific to a plurality of users, absent the need for a duplicate key-server is disclosed. According to the method, each individual's security data is stored within the key-server database and is also stored on a portable data storage device, such as a smart card or a PCMCIA token. If the key-server crashes and the database stored thereon is lost, a duplicate key-server database is reconstructed using the aggregate of the partial database files stored on each individual's portable data storage device. Similarly, when a portable data storage device is lost, it can be rebuilt from the data stored within the key-server.

Abstract: A method of securely supporting password change is disclosed. The method comprises the steps of: detecting an occurrence of a password change operation in execution on a system and receiving a new password by the system; detecting the new password when provided; storing data indicative of the new password in a database other than the password database of the system for later retrieval, the data indicative of the new password for provision to the system.

Abstract: A biometric sensing device includes sensing arrays for sensing a biological surface swiped across the sensing arrays in an arbitrary direction. This device allows for simultaneously sensing different features of a biological surface, said features having smallest distinguishable features of different size. Using the technique of interleaving partial images, the resolution of the biometric sensing device is increased. Therefore, a small and robust biometric sensing device is provided, which allows for sensing high resolution images.

Abstract: A method in which a data access request by a user to access data of a destination server, such as the data that needs to be updated when a login and/or password is changed, is provided consistently. The destination servers are redundant, and instead of directing the access request directly to one of the redundant destination servers, an intermediate level of servers is provided that selects one of the destination servers to serve the data access request. This selection is made so that the data access request from a particular source may be directed to the same destination server. The data access request includes data that is unique to the source and/or to the user, and the selection is made in dependence on the result of a transformation, such as a hash function, performed on the unique data. Since the redundant destination servers may each identically serve the data access request, the data access request can be routed to any destination server without any change in the processing of the request.

Abstract: Disclosed is a method for detecting a latent fingerprint image provided to a biometric input device of a fingerprint based security system. First and second images of the fingerprint are captured during a time period interval ?t. At least one of the first and second images are analyzed to identify an extractable feature within a global reference frame, the extractable feature usable for authenticating an individual. The first and second images are compared one with the other to determine differences indicative of motion about the identified extractable feature within a local reference frame during the time period interval ?t. Absent motion about the identified extractable feature being detected, the fingerprint is registered as a latent fingerprint and cannot be used to authenticate the individual who is seeking authorization.

Abstract: A method of hash string extraction from biometric information is disclosed. The method comprises the steps of providing a biometric information sample in the form of a fingerprint for example, extracting features from the biometric information sample and encoding the features based on their location within the biometric information sample; and, generating a string of values based on the extracted features and their determined locations. The method further comprises the steps of hashing the string of symbols to produce a plurality of hash values for comparing the plurality of hash values against a stored hash value for identifying a user.

Abstract: A method for matching biometric data on an authentication server is disclosed. An authentication server is provided having biometric template data stored thereon. A plurality of workstation processors in communication with the authentication server is also provided. A sensed biometric image is provided to a processor out of the plurality of workstation processors from an individual. From the authentication server to the processor, co-ordinate data relating to a plurality of non-contiguous features of the template data are provided. Characteristic data is extracted from the biometric image, the characteristic data for correlation with the provided co-ordinate data allowing for a subsequent alignment of the biometric image within a known frame of reference relative to the template data on the basis of the provided data and the other data.