BIOMETRIC AUTHENTICATION

摘要

Instead of requiring key exchange between a trusted biometric application in a TEE and an external application outside of the TEE that provides access to a secured function, the trusted application is preconfigured with security data such as (in a first implementation) authentication credentials (e.g. a PIN) or (in a second implementation) a cryptographic key. This security data is then used to authenticate a biometric validation obtained by the trusted application to the external application.

主权项

1. A computer-implemented method comprising:
a trusted application of a Trusted Execution Environment obtaining registration credentials; subsequent to said obtaining of said registration credentials, the trusted application obtaining:
an indication that a user requires access to a secured function accessible through an external application outside of said Trusted Execution Environment, anda biometric validation of said user's identity; and in response to said obtaining of both said indication and said biometric validation, the trusted application directing authentication credentials dependent on the registration credentials towards said external application to request use of said secured function.