Device and user authentication

摘要

A method of authenticating a device and a user comprises obtaining a device ID for the device, performing a biometric measurement of the user, obtaining helper data for the user, and generating a key from the biometric measurement and helper data. There is then generated a message comprising the key or a component derived from the key, which transmitted to a remote service, and at the service there is carried out the step of authenticating the device and the user with the message. In a preferred embodiment, the generating of the key further comprises generating the key from the device ID.

主权项

1. A personal healthcare method comprising:
registering a physiological data measuring device which has a unique device ID and is configured to make a physiological data measurement, including:
performing a biometric measurement of a user,extracting a key and helper data for the user from the biometric measurement, the helper data being configured to extract the key from the biometric data,storing the helper data in the physiological data measuring device,electronically transmitting the device ID and an ID of the user to a remote server which includes a remote server computer processor and is associated with an electronic data storage configured to store physiological data measurements of a plurality of users; authenticating the device and the user including with a physiological data site computer processor:
receiving a current biometric measurement and a current physiological data measurement of the user,retrieving the helper data for the user,generating the key from the current biometric measurement and the helper data,generating a message including the current measured physiological data and one of (a) a message authenticating code derived from the current measured physiological data and the key or (b) a signature for the current measured physiological data derived from the key,electronically transmitting the message to the remote server, and with the remote server computer processor of the remote server, authenticating the device and the user with the message and the device ID and the user ID which was transmitted during the registering step.