Abstract: The present invention provides biometrically enhanced certificates or other data structure or data item containing biometric information, by adding fields containing biometric information derived from a user to a conventional Public Key Certificate. A biometrically enhanced certificate, therefore, provides a digital identity that binds a public key not just to a name, but to a physical property or properties of the person or entity who is the subject of the certificate. In one embodiment, biometric certificate fields comprising biometric data are incorporated into private extensions of an X.509 identity certificate. In another embodiment, biometric certificate fields comprising biometric data are incorporated into an X.509 attribute certificate.

Abstract: A biometric data sample is taken and compared with stored biometric data. If the biometric data sample matches stored data, access to a secure data storage module is enabled. The secure data storage module contains data necessary for successful communication with a server, as detailed further below. Accordingly, a biometric data match enables sensitive data retrieval, and ultimately secure communication with another device. In a preferred embodiment, the Subscriber Identity Module (SIM) in a GSM phone provides stored biometric data and processing capabilities for the matching function within a cellular phone. By storing biometric data on the SIM (a type of smart card) and performing the biometric matching process on the SIM, the need to transmit or store biometric data in a way that leaves it available for retrieval or tampering is minimized.