Personal digital key initialization and registration for secure transactions

摘要

A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.

主权项

1. A method of initializing a personal digital key (PDK) for secure authentication, the method comprising:
reading, with a programming device, user information from a first PDK to determine whether a user is authorized for initialization; determining, with the programming device, a status of the first PDK based at least in part on a registry including data describing the status of the first PDK; responsive to determining that the status of the first PDK is in good standing, determining, with the programming device, that the user is authorized for initialization; reading, with the programming device, notary information from a notary PDK to determine whether a notary is authorized to witness the initialization; acquiring a biometric input from the user, wherein the acquisition is witnessed by the notary; and responsive to the user and the notary being authorized, storing a biometric profile on the first PDK.