| 摘要 |
Methods of storing and decrypting biometrics templates on a terminal network are described. A biometrics template (14) is encrypted (18) using a key (16), and the key (16) is then divided into a number of key shares (20). The encrypted template (18), a key share (20), and a user identifier (22) are then combined to give an identification string (24). A number of strings (24) are then stored on separate terminals (26) of a terminal network (28). To decrypt the template (14), a user offers their identifier (22) to a terminal (26). The required number of identification strings (24) having that identifier (22) are retrieved from their respective terminals (26) on the network (28), and the key shares (20) combined to generate a key (16) which is then used to decrypt the template (14). The decrypted template (14) may then be used to verify the identity of the user. Using the present method, neither the unencrypted template nor the complete decryption key are transferred across the network, so improving security. |
