| 摘要 |
The invention relates to electronic document security systems and in particular to user authentication and to the certification and secure transfer of sensitive document information of various type, like whole documents, certificates, signatures, stamps, etc., especially by verifying its correctness and safety / immunity from fraud. There is described a system for electronic certification and authentication, comprising a main module, a first subordinate module, a database for storing personal data and biometric data, and a biometric device for capturing biometric data, wherein the main module is configured to:
generate a first asymmetric key pair for encrypting and decrypting biometric data;
generate a second asymmetric key pair for encrypting and decrypting personal data;
enroll a client for the first subordinate module by:
capturing personal data of the client;
encrypting personal data of the client with a first key of the second asymmetric key pair;
storing the encrypted personal data of the client in the database;
capturing biometric data of the client by means of the biometric device;
encrypting the captured biometric data of the client with a first key of the first asymmetric key pair;
storing the encrypted biometric data of the client in the database; and
providing a client identity and a client password;
and wherein the first subordinate module is configured to:
certify an identity of a client by:
capturing biometric data of the client by means of the biometric device;
decrypting the biometric data of the client which is stored in the database with a second key of the first asymmetric key pair; and
comparing the biometric data captured by the biometric device with the decrypted biometric data stored in the database. |
