METHODS FOR SECURE RESTORATION OF PERSONAL IDENTITY CREDENTIALS INTO ELECTRONIC DEVICES

摘要

A method and system for securely enrolling personal identity credentials into personal identification devices. The system of the invention comprises the manufacturer of the device and an enrollment authority. The manufacturer is responsible for recording serial numbers or another unique identifier for each device that it produces, along with a self-generated public key for each device. The enrollment authority is recognized by the manufacturer or another suitable institution as capable of validating an individual before enrolling him into the device. The enrollment authority maintains and operates the appropriate equipment for enrollment, and provides its approval of the enrollment. The methods described herein discuss post-manufacturing, enrollment, backup, and recovery processes for the device.

主权项

1. A method, comprising:
receiving a signature associated with a biometric encryption key from a party, the signature associated with the biometric encryption key having been decrypted by the party based on a private key associated with the party; verifying a validity of a signature associated with a biometric encryption key based on a public key associated with as personal identification device; and combining a first section of the biometric encryption key and a second section of the biometric encryption key to restore the biometric encryption key when the validity of the signature is verified.