CROSS-REFERENCES TO RELATED APPLICATIONS

NONE.

BACKGROUND

In today's technological environment, it is common for users to transmit data between devices. At times, the data may be sensitive and should only be transmitted if the user is authorized. Typically, for a device to know if a user is authorized, the user must present credentials to the device such as a password or PIN. Another way to identify the user, is through biometric verification. Conventional biometric verification systems may transmit a biometric sample from a first device to a second device. The second device may receive the user's biometric sample and it can be compared to the transmitted biometric sample. Such conventional processes expose the biometric sample to man-in-the-middle attacks. Biometric verification should be performed in a way that is secure, and does not expose the user's biometric data in the clear where it can be illegally obtained by a criminal and used to impersonate the legitimate user.

Embodiments of the invention address this and other problems, individually and collectively.

BRIEF SUMMARY

Embodiments of the invention are directed to systems and methods for protecting biometric data.

One embodiment of the invention can be directed to a method. The method may comprise transmitting, by a first device, an encrypted first biometric template generated from a first biometric sample of a user of the first device to a second device, where the second device inputs the encrypted first biometric template and a second biometric template generated from a second biometric sample of the user into a function to generate an encoded output. The first device may receive the encoded output from the second device, and may decode the encoded output to recover the encrypted first biometric template and the second biometric template of the user. The method may further comprise decrypting, by the first device, the encrypted first biometric template and comparing, by the first device, the decrypted first biometric template and second biometric template to determine a match result. Upon determining the match result, the first device may transmit unique data to the second device.

In another embodiment, the method further comprises storing, by the first device, the unique data and receiving a first biometric sample from the user of the first device. The first device may generate a first biometric template of the user from the first biometric sample, and may encrypt and store the first biometric template.

Another embodiment of the invention is directed to a first device. The first comprises: a processor; and a computer readable medium storing code executable by the processor. The code comprises instructions for implementing a method including: transmitting an encrypted first biometric template generated from a first biometric sample of a user of the first device to a second device, wherein the second device inputs the encrypted first biometric template and a second biometric template generated from a second biometric sample of the user into a function to generate an encoded output; receiving the encoded output from the second device; decoding the encoded output to recover the encrypted first biometric template and the second biometric template of the user; decrypting the encrypted first biometric template; comparing the decrypted first biometric template and second biometric template to determine a match result; and transmitting unique data to the second device based on the match result.

These and other embodiments of the invention can be described with reference to the following detailed description and the accompanying drawings.

