Method for identifying natural person

Abstract

The invention relates to a method (200) for identifying a natural person, the method being implemented by a computer, comprising the following steps: generating (207) a link value; obtaining (211) a verification value associated with the corresponding link value in the identity database; and obtaining (212) from the identity database a personal identifier associated with the link value in the identity database.

Description

Technical Field

[0001] This invention relates to a method and system for identifying natural persons, and in particular, the biometric identification of natural persons. Background Technology

[0002] Methods for identifying natural persons include steps such as collecting identity data, like biometric fingerprints provided by biometric sensors, and responding by providing a personal identifier (e.g., name, address, or number) associated with that identity data in an identity database. Therefore, this identification method enables natural persons to be identified by various service providers (e.g., merchants).

[0003] Therefore, an identification system typically includes a secret database and an identity database. The secret database contains a secret list of individual natural persons, such as their respective biometric fingerprints. The identity database is separate from the secret database and includes a list of corresponding identifiers for each of these natural persons. The secret database is managed by a secret server, and the identity database is managed by a separate identity server.

[0004] In existing technology, the secret database and the identity database list their respective secrets and identifiers based on a common index. Therefore, when the secret server receives a secret, it compares it with the secrets in the secret database. When a matching secret is identified, it sends the index number of that secret to the identity server. The identity server then returns the identifier with the same index number to the identity database.

[0005] This method is insecure for large-scale use. In particular, if two people register at the same time, their index numbers in one of the databases may be reversed.

[0006] In another existing technique, a unique numerical value is generated when a natural person registers. This value is associated with the natural person's secret in a secret database and with that natural person's identifier in an identity database. The secret server sends this numerical value to the identity server. The identity server then returns the identifier associated with the same numerical value in the identity database.

[0007] However, this method is vulnerable to attack. Therefore, an attacker with write access to one of the two databases could reverse the values ​​of two natural persons (e.g., A and B). In this scenario, if the secret server collects the secret of natural person A, the identity server would return the identifier of natural person B.

[0008] To address this issue, Annex A of ISO 24745 proposes an alternative method for protecting biometric data. In the secret and identity databases, a unique value is replaced by a linked value, referred to in the standard proposal as a "common identifier (CI)." This linked value is calculated using a publicly available hash function of the "message authentication code (MAC)" type, which takes a natural person's secret, their identifier, and a parameterized key as input. This linked value is sent by the secret server to the identity server. The identity server then returns an identifier associated with the same linked value in the identity database. To compromise the system, an attacker must generate this linked value. Therefore, they need write access to both databases and a private key, making the attack difficult.

[0009] However, this practice remains flawed even with the widespread adoption of identity verification systems, especially where many service providers want to use the system and natural persons want to be identified among several of them.

[0010] One solution is to provide each service provider with a secret database and identity database dedicated to the natural persons registered with that service provider. However, the server clusters required to implement and manage this are therefore expensive and difficult for administrators of the identification system to maintain. Furthermore, this requires natural persons to update their registration and identification methods for each service provider they wish to be identified by, which is tedious.

[0011] Another solution is to share a single (unique) identity database and a single (unique) secret database for each natural person across all service providers, and link them to a filtering rule table to select which service providers each natural person registers with. However, the same natural person cannot therefore have multiple different profiles; it uses the same profile for all service providers. Similarly, it is impossible to revoke an identity from a single service provider. Furthermore, if a natural person's identity is compromised by a service provider, all other service providers are also compromised. Additionally, the filtering table could be commercially exploited, particularly for obtaining information about a natural person's behavior, potentially violating the principle of respecting their personal data. Finally, the filtering table is at risk of being manipulated by malicious attackers. Summary of the Invention

[0012] The present invention aims, in particular, to provide a method and system for identifying natural persons that, despite implementing a secret database and identity database shared by a large number of service providers (merchants), improves the data security of natural persons, respects their personal data, allows for the revocation of identity from selected service providers, and allows for the management of multiple personal profiles (identity configurations) for the same natural person.

[0013] Therefore, the subject of this invention is a method for identifying a natural person, the method being implemented by a computer and comprising the following steps:

[0014] -Get the code;

[0015] -Obtaining the secrets of natural persons;

[0016] - Compare the secrets of natural persons with secrets in a secret database;

[0017] - When a secret corresponding to a natural person's secret is identified in the secret database, g generates a link value based on the secret and the code, preferably using a hash function associated with a private key;

[0018] - Compare the generated link values ​​with link values ​​in the identity database, which are distinct from (independent of or different from) the secret database, or with link values ​​in the buffer database, which are distinct from (independent of or different from) both the secret database and the identity database;

[0019] - Retrieve the verification value associated with the link value from the identity database, or, if the link value is the first link value in a chain of link values ​​where each other link value is derived from the previous link value (calculated), retrieve the verification value associated with the link value in the chain from the identity database, or from a buffer database distinct from the secret database and the identity database.

[0020] - Retrieve the personal identifier associated with the linked value or the linked value chain in the identity database.

[0021] - Generate a value to be verified based on the received secret, the received code, and the acquired personal identifier. Preferably, a hash function associated with the private key is also used to generate the value to be verified.

[0022] - Compare the generated value to be verified with the obtained verification value.

[0023] - Provide the obtained personal identifier when the generated value to be verified is the same as the obtained verification value.

[0024] This method improves the security of natural person identification. In practice, the method operates using two values: a calculated link value and a verification value, which are compared with corresponding stored link values ​​and verification values. Regarding the link value, it is not stored in a secret database, but rather in a buffer database or an identity database. Link values ​​to be compared are generated from the acquired secret and code, which may be secret or public. These link values ​​establish a link between the secret and code, and between them and the existence of a registered identity. These link values ​​also allow for linking to possible subsequent link values ​​in the chain of link values. However, these link values ​​do not allow us to confirm whether the natural person's personal identifier actually corresponds to the acquired secret. This is why the value to be verified is generated from the same secret, the same code, but also from the natural person's personal identifier. This value to be verified is compared with the corresponding verification value stored in the identity database or buffer database. Therefore, these verification values ​​enable confirmation that the natural person's personal identifier corresponds to the transmitted secret. Thus, the personal identifier is provided as a result of this method. Therefore, to attack this method and obtain the personal identifier, an attacker must generate the link value, and even the next link value, as well as the value to be verified, which is very difficult.

[0025] This method allows for the management of different profiles (user profiles or configuration files) for the same user through codes: for the same secret, a user can associate another personal identifier (e.g., another address) with another code. Conversely, for the same personal identifier, a user can associate another secret with another code. Therefore, the same natural person can have multiple secrets for the same identifier and multiple personal identifiers for the same secret.

[0026] The result of this profile management approach is that it allows for the revocation of an identity from a single service provider (merchant) without revocation from other service providers. In fact, by associating each code with a service provider, the profile associated with that code can be destroyed, while profiles associated with the same user across different codes can be retained.

[0027] This demonstrates that this method of personal data management also helps improve the protection of users' personal data. In fact, by using different codes for the same user, there is no longer a need to use filtering tables to associate different service providers; simply create a profile for each service provider and associate it with a unique code.

[0028] Other optional method features that may be used individually or in combination in this invention.

[0029] Advantageously, the method is a biometric identification method, wherein the secret is related to the biometric fingerprint of a natural person, and in particular, the secret is a hash value of the biometric fingerprint of a natural person, and the secret database is a biometric database that includes the biometric fingerprint of a natural person.

[0030] Preferably, the code is:

[0031] - Involves a password provided by a natural person, specifically, the code includes a hash of the password provided by the natural person to the secret server; and / or

[0032] - In relation to an entity, such as a merchant, a natural person identifies that entity. In particular, the code includes publicly known identity values ​​of the entity known to the secret server.

[0033] Therefore, the code is either provided by a natural person and known only to them, or it is publicly available, for example, associated with a merchant. Thus, the code for this method can be used in a variety of ways.

[0034] Advantageously, the method includes the step of, when the link value is the first link value in a link value chain, that each other (subsequent) link value in the link value chain is derived from the previous link value:

[0035] First, generate the first historical value in the historical value chain based on the first link value.

[0036] When a link value corresponding to the generated first link value is identified in the buffer database, the next link value or the last link value of the link value chain is generated, preferably using a hash function associated with the private key, based on the secret, code, and first historical value. Furthermore, the next historical value is generated, preferably also using a one-way function associated with the private key, based on the next link value and the first historical value.

[0037] - Optionally, the next link value is compared with the link value in the next buffer database that is different from (different from or independent of) the above buffer database, and the next link value and the next historical value are generated. These comparison and generation steps are repeated until the last link value in the link value chain is generated.

[0038] - Compare the last linked value in the linked value chain with the linked value in the identity database to obtain the personal identifier associated with the identity database.

[0039] Therefore, these databases are "linked" to each other through one or more buffer databases via chains of multiple link values, and each link value in the chain is calculated using the previous link value in the chain. Thus, an attacker would need access to each buffer database to compromise the method. Furthermore, instead of simply determining the next link value based on the previous one, the method calculates a historical value (based on the previous link value) and uses that historical value to calculate the next link value. Since historical values ​​are not stored in the database, the next link value cannot be obtained without recalculating each value one by one using previous values. In other words, using historical values ​​to link these link values ​​further enhances the method's security.

[0040] According to the present invention, a method for registering a natural person to an identification system is also provided, the method being executed by a computer and comprising the following steps:

[0041] -Get the code;

[0042] -Obtaining the secrets of natural persons;

[0043] - Compare the secrets of natural persons with secrets in a secret database;

[0044] - When no secret in the database corresponds to the natural person's secret, a link value specific to the natural person is generated, preferably using a hash function associated with a private key, based on the natural person's secret and the code;

[0045] - Store the secrets of natural persons in a secret database, without storing link values ​​or code;

[0046] - Upon receiving the code and the secret, a personal identifier for the natural person is generated;

[0047] - Generate a verification value based on the received secret, the received code, and the generated personal identifier, preferably also using a hash function associated with the private key;

[0048] - Store the natural person's personal identifier associated with the link value and the verification value in the identity database, or, the link value is the first link value in the link value chain in which each other link value is obtained from the previous link value (calculated), store the personal identifier associated with the last link value in the link value chain in the identity database, and store the verification value in the identity database and associate it with the personal identifier, or store it in a buffer database that is separate from the secret database and the identity database and associate it with the link value of the link value chain.

[0049] According to the present invention, a system for identifying a natural person is also provided, comprising:

[0050] -A secret database containing the secrets of natural persons, and

[0051] - An identity database, which includes the individual personal identifiers of these natural persons, associates linking values ​​with each of the natural persons' individual personal identifiers.

[0052] -Automation device, configured as follows:

[0053] The secret received from the natural person is compared with the secrets in the secret database, and the corresponding secret of the natural person is identified. Based on the natural person's secret and the code, a link value is generated, preferably using a hash function associated with a private key.

[0054] * Compare the received link value with the link value in the identity database, or with the link value in a buffer database that is distinct from both the secret database and the identity database;

[0055] * Retrieve the verification value associated with the link value from the identity database, or, where the link value is the first link value in a chain of link values, where each other link value is derived from the previous link value; retrieve the verification value associated with the link value from the identity database or a buffer database distinct from the secret database and the identity database.

[0056] * Retrieve a personal identifier associated with the linked value or the linked value chain in the identity database.

[0057] *Based on the received secret, the received code, and the acquired personal identifier, preferably a hash function associated with the private key is used to generate the value to be verified.

[0058] * Compare the generated value to be verified with the obtained verification value, and when the generated value to be verified is the same as the obtained verification value, indicate that the obtained personal identifier corresponds to the secret received from the natural person.

[0059] Advantageously, the system further includes:

[0060] - At least one buffer database, distinct from (different from or independent of) the secret database and the identity database, and including linked values.

[0061] -Automation device, configured as follows:

[0062] *Receive the link value, code, and secret.

[0063] The received link value is compared with the link values ​​in the buffer database, and when a corresponding link value is identified, the next link value in the link value chain is generated based on that link value.

[0064] *Send the next link value, code, and secret.

[0065] According to the present invention, a data processing system is also provided, the data processing system including a processor configured to implement (execute) the steps of the above-described identification method or the above-described registration method.

[0066] According to the present invention, a computer program including instructions is also provided, which, when executed by a computer, cause the computer to implement (execute) the steps of the above-described identification method or registration method.

[0067] According to the present invention, a computer-readable recording medium including instructions is also provided, which, when executed by a computer, cause the computer to perform the steps of the above-described identification method or the above-described recording method.

[0068] The present invention also relates to a method for identifying a natural person, the method being implemented by a computer and comprising the following steps:

[0069] -Get the code;

[0070] -Obtaining the secrets of natural persons;

[0071] - Compare the secrets of natural persons with secrets in a secret database;

[0072] - When a secret corresponding to a natural person's secret is identified in the secret database, a link value is generated based on the secret and the code, preferably using a hash function associated with a private key;

[0073] - Compare the generated link values ​​with the link values ​​in the identity database, which is distinct from the secret database;

[0074] - Retrieve the verification value associated with the linked value from the identity database;

[0075] - Retrieve the personal identifier associated with the linked value in the identity database.

[0076] - Generate a value to be verified based on the received secret, the received code, and the acquired personal identifier, preferably also using a hash function associated with the private key;

[0077] - Compare the generated value to be verified with the obtained verification value.

[0078] - Provide the obtained personal identifier when the generated value to be verified is the same as the obtained verification value.

[0079] The present invention also relates to a method for identifying a natural person, the method being executed by a computer and comprising the following steps:

[0080] -Get the code;

[0081] -Obtaining the secrets of natural persons;

[0082] - Compare the secrets of natural persons with secrets in a secret database;

[0083] - When a secret corresponding to a natural person's secret is identified in the secret database, a link value is generated based on the secret and the code, preferably also using a hash function associated with the private key;

[0084] - Compare the generated link values ​​with the link values ​​in the buffer database, which is distinct from the secret database.

[0085] - The link value is the first link value in a link value chain, in which each other link value is obtained from the previous link value (calculated). A verification value associated with the link value in this link value chain is retrieved from an identity database distinct from the secret database and the buffer database.

[0086] - Retrieve the personal identifier associated with the linked value of the linked value chain in the identity database.

[0087] - Generate a value to be verified based on the received secret, the received code, and the acquired personal identifier, preferably also using a hash function associated with the private key;

[0088] - Compare the generated value to be verified with the obtained verification value.

[0089] - Provide the obtained personal identifier when the generated value to be verified is the same as the obtained verification value.

[0090] The present invention also relates to a method for identifying a natural person, the method being implemented by a computer and comprising the following steps:

[0091] -Get the code;

[0092] -Obtaining the secrets of natural persons;

[0093] - Compare the secrets of natural persons with secrets in a secret database;

[0094] - When a secret corresponding to a natural person's secret is identified in the secret database, a link value is generated based on the secret and the code, preferably using a hash function associated with the private key;

[0095] - Compare the generated link values ​​with the link values ​​in the buffer database, which is distinct from the secret database;

[0096] - The link value is the first link value in a link value chain, in which each other link value is obtained (calculated) from the previous link value. The verification value associated with the link value in this link value chain is retrieved from the buffer database or from a different (other) buffer database.

[0097] - Retrieve the personal identifier associated with the linked value in the linked value chain from the identity database.

[0098] - Generate a value to be verified based on the received secret, the received code, and the acquired personal identifier. Preferably, a hash function associated with the private key is also used to generate the value to be verified.

[0099] - Compare the generated value to be verified with the obtained verification value.

[0100] - Provide the obtained personal identifier when the generated value to be verified is the same as the obtained verification value.

[0101] According to the present invention, a system for identifying a natural person is also provided, comprising:

[0102] - A secret database that includes the secrets of natural persons.

[0103] - An identity database, which includes the individual personal identifiers of these natural persons, associates linking values ​​with each of the natural persons' individual personal identifiers.

[0104] - A secret server, configured to compare secrets received from a natural person with secrets in a secret database, and when it identifies a corresponding secret for the natural person, to generate a link value based on the natural person's secret and code, preferably using a hash function associated with a private key.

[0105] The secret server is also configured to send the link value, code, and secret to the identity server or cache server.

[0106] - An identity server, configured to compare received link values ​​with link values ​​in an identity database.

[0107] The identity server is also configured to retrieve a verification value associated with the linked value from an identity database, or to retrieve a verification value transmitted by a buffer server or another buffer server.

[0108] The identity server is also configured to retrieve a personal identifier associated with the linked value from an identity database, or the linked value is the first linked value in a linked value chain in which each other linked value is derived from the preceding linked value, and the linked value is associated with a linked value in a linked value chain transmitted by a buffer server or a subsequent buffer server.

[0109] The identity server is also configured to generate a value to be verified based on the received secret, the received code, and the acquired personal identifier. Preferably, it also uses a hash function associated with the private key to generate the value to be verified.

[0110] The identity server is also configured to compare the generated value to be verified with the acquired verification value, and when the generated value to be verified is the same as the acquired verification value, to indicate that the acquired personal identifier corresponds to a secret received from the natural person. Attached Figure Description

[0111] The invention will be better understood by reading the following description, which is given by way of example only and with reference to the accompanying drawings, wherein:

[0112] [ Figure 1 [Illustration] is a schematic diagram of a biometric system according to a first embodiment of the present invention;

[0113] [ Figure 2 [This refers to registering a natural person with...] Figure 1 A flowchart of the method for the identification system;

[0114] [ Figure 3 [This is based on the first embodiment] Figure 1 A flowchart illustrating the method by which an identification system performs biometric identification of natural persons;

[0115] [ Figure 4 [Illustration] is a schematic diagram of a biometric system according to a second embodiment of the present invention;

[0116] [ Figure 5 [This refers to registering a natural person with...] Figure 4 A flowchart of the method for the identification system;

[0117] [ Figure 6 ] is through Figure 4 A flowchart illustrating the method by which an identification system performs biometric identification of natural persons;

[0118] [ Figure 7 [Illustration] is a schematic diagram of a biometric system according to a third embodiment of the present invention;

[0119] [ Figure 8 [This refers to registering a natural person with...] Figure 7 A flowchart of the method for the identification system;

[0120] [ Figure 9 ] is through Figure 7 The flowchart shows the method by which an identification system performs biometric identification of natural persons.

[0121] [ Figure 10 [Illustration] is a schematic diagram of a biometric system according to a fourth embodiment of the present invention;

[0122] [ Figure 11 [This refers to registering a natural person with...] Figure 10 A flowchart of the method for the identification system;

[0123] [ Figure 12 ] is through Figure 10 The flowchart shows the method by which an identification system performs biometric identification of natural persons. Detailed Implementation

[0124] The term "database" refers to any organized, structured collection of information stored electronically in a secure computer system.

[0125] The term "server" should be defined as any program specifically designed to perform a series of computer tasks (specific tasks will be described below) and has access to a particular database. In the invention described below, each server is associated with a database. This is referred to as a "server-database" pair.

[0126] A server can store data in its database, access that data, and perform calculations based on it. A server can also receive external data without storing it and perform calculations based on that external data. Finally, a server can transmit data or calculation results.

[0127] Two servers described as independent of each other cannot access each other's databases. However, they can transfer data to each other.

[0128] Each server-database pair is implemented on its own dedicated computer device. This device is equipped with standard computer components for storing the database and running the server. Each device is physically isolated from other computer devices.

[0129] Alternatively, the same computer device can have multiple servers. However, it is necessary to describe these as separate servers in terms of software.

[0130] Figure 1 shows a first embodiment of the biometric identification system 2 according to the present invention.

[0131] The system includes a database 4 called the “biometric database”, which contains the biometric fingerprints T of natural persons.

[0132] System 2 also includes a database 6 called the “identity database”, which contains the individual personal identifiers (IDs) of these natural persons. The identity database links each natural person’s individual personal identifier to a “link value” (LID). base The values ​​are associated. In other words, in the tables representing the identity database, each identifier ID corresponds to a value called a "linked value" (LID). base The alphanumeric value, which will be described below, will be linked to the LID value calculated during the identification process described below. base The comparison is then performed. The identity database also pairs each of the above values ​​with a "verification value" (CI). base In connection, this verification value will be described below. In other words, the database tables include "Personal Identifier ID - Linked Value LID". base -Verification Value (CI) base The triplet of "".

[0133] System 2 also includes a server 8, referred to as a "biometric server," which is configured to perform certain steps of the methods described below. This server is associated with a biometric database.

[0134] System 2 also includes a server 10, referred to as the "identity server," which is configured to perform some steps of the methods described below. This server is associated with an identity database and is separate from the biometric server.

[0135] The described server implements computer programs 12 and 15, which include instructions that, when executed by a computer, cause the computer to perform the steps of the methods described below.

[0136] System 2 includes a computer-readable recording medium 13 containing instructions that, when executed by a computer, cause the computer to perform the steps of the methods described below, particularly by the biometric server 8. Therefore, this medium contains a computer program 15. System 2 also includes a computer-readable recording medium 14 containing instructions that, when executed by a computer, cause the computer, particularly by the identity server 10, to implement the steps of the methods described below. Therefore, this medium contains a computer program 12.

[0137] System 2 also includes a device (not shown) for providing a biometric fingerprint. This device is configured to acquire biometric (feature) data of a natural person and provide a biometric fingerprint. The biometric (feature) data may be voice, iris, fingerprint, or any other biometric data capable of reliably identifying a natural person. The device is configured to provide a corresponding biometric fingerprint as output, specifically in the form of an alphanumeric value, which can be stored. The natural person interacts directly with the device. This is a conventional device, and its operation is irrelevant to the subject matter of this application and will not be described in detail.

[0138] Alternatively, System 2 may be considered to exclude the device, since any conventional device capable of providing biometric tags is compatible with the system.

[0139] System 2, particularly databases 4 and 6, is shared by multiple merchants. Of all the natural persons registered in System 2, some register with only one merchant, while others register with multiple merchants. Biometric database 4 and identity database 6 contain the biometric fingerprints (T) and LIDs of all these natural persons, respectively. base Linked values ​​are associated with personal identifier IDs, regardless of whether they are registered with one or more merchants.

[0140] System 2 corresponds to a data processing system, which includes a processor for implementing the method steps described below.

[0141] Now, referring to Figure 2, we will describe a method 100 for registering a natural person in an identity verification system. The natural person wishes to register with only one merchant and currently creates only one profile.

[0142] - In step 101, the natural person requests to authenticate their identity on the biometric fingerprint collection device.

[0143] In step 102, the natural person presents their attributes to the device—their eyes, voice, or fingers, depending on the choice of the device or the natural person.

[0144] In step 103, the device generates a biometric fingerprint E of a natural person, which is composed of the natural person's attributes.

[0145] In step 104, the user selects the merchant he / she wishes to register with from the merchants sharing the system.

[0146] In step 105, the device obtains code C.

[0147] In the first variant, the code C is provided to the natural person wishing to register when defining their password. This code C is a hashed version of the password (the hash function value) generated using a conventional hash function. Therefore, the code C is unique to each natural person; or, if they wish to register different versions of their profile, the code corresponds to one of those profiles.

[0148] In the second variant, the code is obtained by the device when a merchant is selected from among those sharing the system. In this alternative, a code C is predefined specifically for the merchant. Therefore, this code C can even be publicly available.

[0149] In step 106, the device sends the biometric fingerprint E and the code C to the biometric server.

[0150] In step 107, the biometric server receives the biometric fingerprint E and the code C.

[0151] In step 108, the biometric server compares the natural person's biometric fingerprint E with biometric fingerprints in the biometric database. It should be noted that the biometric server does not search the database for fingerprints that must correspond 100% to fingerprint E. In fact, for the same biometric feature of the same natural person, the device can generate two slightly different biometric fingerprints (e.g., differences in pixels in an image, differences in a few bits in a byte sequence, etc.). Therefore, the server uses a method not intended for this invention to search for the corresponding fingerprint in the biometric database.

[0152] - In step 109, when there is no biometric fingerprint in the biometric database that corresponds to the biometric fingerprint E of the natural person, the biometric server stores the biometric fingerprint T corresponding to E in the biometric database, and T is the same as E.

[0153] As a variant, T is not identical but derived from E. Biometric servers can find T from E in a conventional way, for example, T is more detailed or complete relative to E.

[0154] In the second variant, the acquisition device generates T based on E and sends T to the biometric server.

[0155] In the following text, regardless of the form of the biometric fingerprint T, we will associate it with the original fingerprint E.

[0156] In step 110, the biometric server generates a Link Value (LID) for the natural person. base It is based on the following formula: LID base = MAC Kb(fb(T), C), where MAC Kb It is a MAC function parameterized by a key Kb known only to the biometric server, and fb is a regular hash function applied to fingerprint T to form a hash version of fingerprint T. In other words, the linked value LID base It consists of a natural person's biometric fingerprint and code, as well as a MAC address associated with a private key Kb. Kb Hash function generation. The MAC function, or "Message Authentication Code," is used to verify the origin of a message and prove its nature. This function uses a private key, in this case, the key Kb is known only to the biometric server.

[0157] In step 111, the biometric server stores the natural person's biometric fingerprint T in the biometric database, but does not store the link value LID. base Or code C.

[0158] In step 112, the biometric server sends the code C, the hash value of the fingerprint Fb(T), and the link value LID to the identity server. base Please submit your registration application along with the application.

[0159] In step 113, the identity server receives the code, the hash value Fb(T), and the link value LID. base .

[0160] In step 114, the identity server checks whether the identity database contains a LID that matches the received LID. base LIDs with the same link value base Link value.

[0161] In step 115, if the link value LID does not exist in the identity database... base The identity server generates a Personal Identifier (PID) for the individual. This PID is an arbitrary alphanumeric value and must be unique. It is randomly generated and therefore does not depend on previously received or calculated values.

[0162] This identifier corresponds to the identity of a natural person. In databases not covered by this invention, this identifier ID is associated with one or more personal data of a natural person, such as their name, address, location, or interests. Therefore, this identifier can be used by merchants for various purposes, such as building customer history records and providing reduction suggestions, which are not related to the subject matter of this invention.

[0163] In step 116, the identity server generates a verification value CI. base It is based on the following formula: CI base = MAC Ki(Fb(T), C, ID). Where MAC Ki It is a MAC function parameterized by a private key Ki, known only to the identity server. In other words, CI base The value is determined by the Fb(T) hash of the received fingerprint, which is indirectly determined by the biometric fingerprint E, the received code C, the generated personal identifier ID, and the MAC associated with the private key Ki. Ki The hash function is determined.

[0164] In step 117, the identity server will link the LID value. base The associated natural person's Personal Identifier ID is stored in the identity database and linked to the verification value CI. base Related.

[0165] Individuals are now registering with merchants in the identity verification system.

[0166] Now, referring to Figure 3, we will describe a natural person identification method (authentication method) 200 implemented in an identity recognition system. A natural person wishes to be identified (authenticated) through their registered merchant.

[0167] In step 201, the natural person displays his or her attributes (attributes he or she previously registered) to the device that provides the biometric fingerprint.

[0168] In step 202, the device generates a biometric fingerprint E based on this attribute.

[0169] In step 203, the device obtains a code C, which is the hash value of the password provided by the user.

[0170] As a variant, the code corresponds to a merchant for whom users wish to be identified (authenticated), and for whom the merchant can be selected from available merchants on the device's screen.

[0171] In step 204, the device sends code C and fingerprint E to biometric server 8.

[0172] In step 205, the biometric server 8 obtains the biometric fingerprint E and code C of the natural person.

[0173] In step 206, the biometric server 8 compares the natural person's biometric fingerprint E with the biometric fingerprint T in the biometric database 4. The purpose is to identify the closest fingerprint T among all fingerprints T in the database 4. As mentioned above with reference to the registration method, the fingerprint T corresponding to fingerprint E is not necessarily exactly the same as fingerprint E. Furthermore, the method of obtaining this result is not the subject of this invention. This verification may also result in the absence of a fingerprint T corresponding to the received fingerprint E.

[0174] In step 207, when the biometric server 8 identifies (detects) a biometric fingerprint T corresponding to the biometric fingerprint E of a natural person in the biometric database 4, the biometric server 8 calculates the biometric fingerprint T according to the formula LID = MAC. Kb (fb(T), C) generates the linked value LID, which is the hash value and code C of the biometric fingerprint T, and the hash function MAC associated with the private key Kb. Kb Generate a link value (LID).

[0175] Using Fb(T) instead of Fb(E) ensures that the method works correctly because, as mentioned above, the generated fingerprint E may be slightly different from the corresponding fingerprint T, even though they involve the same physical properties.

[0176] In step 208, the biometric server 8 sends the link value LID, the code C, and the hash value Fb(T) of the biometric fingerprint T to the identity server 10.

[0177] In step 209, identity server 10 receives the link value LID, code C, and hash value Fb(T).

[0178] In step 210, the identity server 10 compares the received link value LID with the link value LID in the identity database 6. base Compare them.

[0179] In step 211, if identity server 10 finds the link value LID corresponding to the received link value LID in database 6... base Then identity server 10 obtains the link value LID from identity database 6. base Associated verification value CI base Conversely, if no corresponding link value (LID) is found in the database... base If the method terminates (process stops): the natural person's identity cannot be identified.

[0180] If identity verification is successful, in step 212, identity server 10 obtains the LID linked to the identity database from identity database 6. base Associated Personal Identifier ID and Verification Value CI base .

[0181] In step 213, identity server 10 generates a value to be verified, CI, which is generated according to the following formula: CI = MAC Ki(fb(T), C, ID), which is the hash value of the biometric fingerprint T, the received code C, the obtained personal identifier ID, and the hash function MAC associated with the private key Ki. Ki .

[0182] In step 214, the identity server 10 compares the generated value to be verified (CI) with the obtained verification value (CI). base Compare them.

[0183] In step 215, when the generated value to be verified CI matches the obtained verification value CI... base If they are identical, this means that the obtained personal identifier ID corresponds to the biometric fingerprint T, and further to the biometric fingerprint E of the natural person. It is important to note that this verification value CI... base It is obtained from the identity database storing the verification value in step 212, and is linked to the LID value. base The identity server then provides the obtained personal identifier to the merchant. Thus, the natural person's identity is identified and associated with their merchant.

[0184] Because each identity has a unique code C, a natural person with the same biometric fingerprint E can register multiple profiles and associate each profile with its corresponding code C. Having multiple profiles allows the use of multiple personal identifiers, thus enabling the selection of which personal data to provide. For example, for a primary account corresponding to a first code C (where the personal identifier is associated with age, address, and name, and shared with merchants), the user can also have a secondary account corresponding to a second code C (where the second personal identifier is associated only with age, or with a different postal address, and shared with other merchants). This allows the user to choose which merchants to provide their personal data to. Therefore, managing multiple accounts for the same user becomes possible. To create a second profile, a user does not need to start the registration process from scratch; they can authenticate by presenting their biometrics to the device and, after successful authentication, indicate their desire to create a second profile corresponding to the same fingerprint, thus deriving (selectively exporting) the second profile from the primary profile.

[0185] Conversely, for the same personal identifier, a user can associate one biometric fingerprint with another code. Therefore, a single natural person can have multiple biometric fingerprints corresponding to the same identifier, or multiple identifiers corresponding to the same biometric fingerprint.

[0186] Therefore, this account management process allows a user's account at a single merchant to be revoked without affecting their accounts at other merchants. In effect, it's possible to delete an account associated with a specific code while retaining accounts associated with the same user across other codes.

[0187] Therefore, this user profile management method also helps improve the protection of users' personal data. In fact, by using different codes for the same user, users can be associated with different service providers without the need for filtering tables; simply create a user profile for each merchant and assign them a unique code. Each merchant can only access the personal data associated with the personal identifier; they have no access to any other information.

[0188] Alternatively, the code can be public and associated with a specific merchant. This allows for differentiation among merchants sharing the system.

[0189] Based on methodologies 100 and 200 executed on multiple natural persons and multiple businesses, the knowledge identification system 2 includes:

[0190] - Biometric database 4, which includes the biometric fingerprints of natural persons, T,

[0191] - Identity database 6, which includes the individual personal identifiers (IDs) of these natural persons, will link the LID value. base Associated with each natural person's Personal Identifier ID,

[0192] - A biometric server 8 is configured to compare a biometric fingerprint E received from a natural person with a fingerprint T in a biometric database, and when it identifies the corresponding biometric fingerprint T of the natural person, it generates a link value LID based on the natural person's biometric fingerprint T and code C, using a hash function MAC associated with a private key Kb.

[0193] Biometric server 8 is also configured to transmit the link value LID, code C, and fingerprint (in this case, the hash value Fb(T) of the fingerprint) to the identity server.

[0194] - Identity server 10, which is configured to compare the received link value LID with the link value LID in the identity database. base Comparison,

[0195] Identity server 10 is also configured to retrieve the link value LID from identity database 6. base Associated verification value CI base ,

[0196] Identity server 10 is also configured to retrieve the LID linked to the identity database 6 from the identity database.base The associated personal identifier ID.

[0197] Identity server 10 is also configured to generate a verification value CI based on the received fingerprint Fb(T), the received code C, and the acquired personal identifier ID. This value is also derived using the hash function MAC associated with the private key Ki.

[0198] Identity server 10 is also configured to generate the pending verification value CI and the verification value CI. base The values ​​are compared. Furthermore, if the generated value to be verified matches the obtained verification value, it indicates that the obtained personal identifier ID corresponds to the secret received from the natural person.

[0199] Referring to Figure 4, the identification system 16 shown differs from the identification system in Figure 1 in that it includes a buffer database 18, which is independent of the biometric database 20 and the identity database 22. This database is managed by a buffer server 24, which is independent of the biometric server 26 and the identity server 28. Therefore, the buffer server runs its own computer program, which is itself recorded on a recording medium.

[0200] A "buffer database" refers to the function of a database that links the data values ​​stored in the biometric database and the identity database. Therefore, without first accessing the corresponding data in the buffer database, it is impossible to retrieve the personal identifier stored in the identity database from the biometric fingerprint in the biometric database. In this system, the link value LID... base It is not unique; it is the first link value, called LID1. base The identity database 22 does not store the first link value, but instead stores the second link value LID2 derived from the first link value. base .

[0201] The difference between registration method 300 and registration method 200 shown and implemented in system 16 is that the link value (here, the first link value LID1) is different. base It is only stored in the buffer database 18; and the difference is that: the second link value LID2 is generated. base It is stored only in the identity database 22 and is associated with the verification value CI. base Associated with a personal identifier ID. This value is LID2. baseThe value is obtained according to the following calculation method: First, a value called "First History Value" Hist1 is generated, which is generated according to the following formula: Hist1 = U1 (LID1, Hist0), where U1 is a one-way function parameterized by a key specific to buffer server 24, and Hist0 is any default value known to biometric server 26. These values ​​are not stored in any database. Then, LID2 is generated according to the following formula. base Value: LID2 base = MAC Kt (fb(T), C, Hist1), where Kt is a key unique to the buffer server, stored in the identity database 22.

[0202] Now, referring to Figure 6, we will describe the natural person identification method (process) 400 implemented in this identification system 16.

[0203] Steps 401 to 407 are the same as steps 201 to 207 of method 200.

[0204] In step 408, the biometric server 26 sends the link value LID (here, LID1), the code C, and the hash value Fb(T) of the biometric fingerprint T to the buffer server 24, instead of sending them to the identity server as in method 200. Furthermore, it generates a value called "first history value" Hist1 and sends it to the buffer server, which is determined according to the following formula: Hist1 = U1(LID1, Hist0).

[0205] Therefore, in step 409, the buffer server 24 receives the link value LID1, the code c, the hash value Fb(T), and the first history value Hist1.

[0206] In step 410, the buffer server 24 compares the received link value LID1 with the link value LID1 in the buffer database 18. base Compare them.

[0207] In step 411, if a link value LID1 corresponding to the received link value LID1 is found in the buffer database 18... base Then, buffer server 24 generates the next link value LID2 according to the following formula: LID2 = MAC Kt(fb(T), C, Hist1), where Kt is a key dedicated to buffer server 24, and the history Hist2 is generated according to the following formula: Hist2 = U2(LID2, Hist1). Therefore, the LID2 value corresponds to a link value in the link value chain, calculated from the previous link value LID1 in that chain. Similarly, the Hist2 value corresponds to a history value in the history value chain, calculated from the previous history value Hist1 in that chain. History values ​​are crucial for determining subsequent link values. However, history values ​​are not stored. Therefore, a buffer server is needed to obtain the LID2 value. This helps improve the security of system 16.

[0208] In step 412, the buffer server 24 sends the link value LID2, the code C, the hash value Fb(T), and the history value Hist2 to the identity server 28.

[0209] In step 413, identity server 28 retrieves the link value LID2 from the identity database. base Associated verification value CI base Conversely, if the corresponding link value LID2 is not found in the database... base If the natural person's identity cannot be identified, the process will terminate.

[0210] If successful, in step 414, identity server 28 retrieves the linked value LID2 from identity database 22. base and verification value CI base The associated personal identifier ID.

[0211] The next steps are steps 213 and 215 in method 200.

[0212] Therefore, natural persons are identified by their merchants.

[0213] The identification system 30 shown in Figure 7 is a generalization of the identification system shown in Figure 4. Therefore, it contains n buffer databases, where n ranges from 1 (corresponding to the system in Figure 4) to any number, such as 5, 10, or 15 buffer databases. Each of these n buffer databases is associated with its respective buffer server 32 or 34. In this generalization, the identity database 36 does not store the link value LID2. base Instead, from LID1 base The last link value in the starting link value chain is LIDn+1 base In this chain of linked values, each linked value is calculated using the following method, derived from factors such as the previous linked value.

[0214] In the registration method (process) 500 shown in Figure 8, which is implemented in system 30, in addition to the factors mentioned above, it is also based on the formula LIDk+1. base = MAC Kt (fb(T), C, Histk), generate the link value LIDk for each buffer database. base Where Kt is the key specific to the buffer server under consideration, and the historical value Histk is calculated according to the formula Histk+1 = U k+1 (LIDk+1, Histk) are calculated. These link values ​​LIDk base The link value LIDn+1 is stored in the corresponding buffer databases 38 and 40. No historical values ​​are stored.

[0215] In the identification method (process) 600 shown in Figure 9, which is implemented within system 30, buffer server 32 (corresponding to the k-th server, where k ranges from 1 to n) compares the received link value LIDk with the link value LIDk in its managed buffer database 38. base A comparison is performed. If a link value LIDk corresponding to the received link value LIDk is found in buffer database 38... base Then, according to the formula LID, buffer server 32 k+1 = MAC Kt (fb(T), C, Hist k Generate the subsequent link value LIDk+1, where Kt is the cache server's proprietary key; simultaneously, according to the formula Hist... k+1 =U k+1 (LID k+1 Hist k A history value Histk+1 is generated, where the function Uk+1 is parameterized by a key specific to buffer server 32. Buffer server 32 then sends the link value LIdk+1, the history value Histk+1, the code C, and the hash value Fb(T) to buffer server 34. Buffer server 34 repeats the operations of comparing, determining the link value and the history value, and sending these values ​​until the last buffer server n sends these values ​​C, Fb(T), LIDn+1, and Histn+1 to identity server 42. Identity server 42 retrieves the link value LIDn+1 from the identity database. base Associated verification value CI base Identity server 42 also retrieves the link value LIDn+1 from identity database 36. base and verification value CI baseThe associated personal identifier ID. Conversely, if no corresponding linked value LIDn+1 is found in the identity database. base If the method process terminates, the natural person cannot be identified.

[0216] Therefore, this method utilizes a chain of n+1 linked values: LID1 base To LIDn+1 base Each link value in the chain is derived from the previous link value. To prevent attackers from simply finding the last link value in the chain, each of these link values ​​is calculated from historical values, and this chain of historical values ​​forces attackers to traverse every cached database. Furthermore, this chain of historical values ​​also makes it possible to locate servers that may be malfunctioning.

[0217] Referring to Figure 10, the difference between the recognition system 44 shown in the figure and the recognition system 30 in Figure 7 lies in the verification value CI. base Instead of being stored in the identity database, it is stored in buffer database 46. The identity database here only stores the last linked value LIDn+1 of the linked value chain. base And the personal identifier ID associated with it.

[0218] The registration method (process) 700 implemented on this identification system 44, as shown in Figure 11, has been modified in this respect, selecting one of the buffer databases to store these verification values ​​CI. base .

[0219] Regarding the identification method (process) 800 implemented on this system 44 as shown in Figure 12, it differs from the previously described method in that it includes a verification value CI. base The buffer server 46 will store all verification values ​​CI corresponding to the received link value LIDk. base The values ​​are then transmitted to the next buffer server. These values ​​are subsequently passed between buffer databases until identity server 48 receives them. Identity server 48 will process each received verification value CI. base It compares with the value to be verified generated and infers the correct associated personal identifier (ID) to be indicated.

[0220] The systems and methods described in relation to biometric fingerprints can be applied to other types of data, particularly any characteristic data that is considered confidential and capable of identifying an individual.

[0221] Therefore, by extending the described method to any secret, a method for identifying natural persons is provided, which is implemented by a computer and includes the following steps:

[0222] -Get the code;

[0223] -Obtaining the secrets of natural persons;

[0224] - Compare the secrets of natural persons with secrets in a secret database;

[0225] - When a secret corresponding to a natural person's secret in the secret database is identified, a link value is generated from the secret and the code, preferably by a hash function associated with a private key;

[0226] - Compare the generated link values ​​with the link values ​​of the identity database, which is independent of (different from) the secret database, or with the link values ​​of the buffer database, which is independent of (different from) both the secret and identity databases;

[0227] - Retrieve the verification value associated with the linked value from the identity database, or, said linked value is the first linked value in a chain of linked values, wherein each other linked value is derived from a preceding linked value (computed), retrieve the verification value associated with the linked value in the chain from the identity database or from a buffer database independent of the secret database and the identity database.

[0228] - Retrieve the personal identifier associated with the linked value or linked value chain in the identity database from the identity database.

[0229] - Generate a value to be verified based on the received secret, the received code, and the obtained personal identifier; preferably, generate the value to be verified using a hash function associated with the private key.

[0230] - Compare the generated value to be verified with the obtained value.

[0231] - Provide the obtained personal identifier when the generated value to be verified is the same as the obtained verification value.

[0232] List of reference numerals

[0233] 2: Identification system according to the first embodiment

[0234] 4.20: Biometric Database

[0235] 6, 22, 36: Identity Database

[0236] 8.26: Biometric Server

[0237] 10, 28, 42, 48: Identity Server

[0238] 12: Computer Programs

[0239] 14: Recording medium

[0240] 16: Identification system according to the second embodiment

[0241] 18, 38, 40: Buffer database

[0242] 24, 32, 34, 46: Buffer Servers

[0243] 30: Identification system according to the third embodiment

[0244] 44: Identification system according to the fourth embodiment

[0245] 100: Registration method for System 2

[0246] 200: Identification method implemented in System 2

[0247] 300: Registration method for System 16

[0248] 400: Identification method implemented within System 16

[0249] 500: Registration method for System 30

[0250] 600: Identification methods implemented within system 30

[0251] 700: Registration method for system 44

[0252] 800: Identification method implemented within system 44 Claims (as amended under Article 19 of the Treaty) 1. A method for identifying (200; 400; 600; 800) natural persons, said method being implemented by a computer and comprising the following steps: - Get (203) code (C); - Obtain the secret (E) of the natural person described in (205); - Compare the obtained secret (E) of the natural person with the secret (T) in the secret database (4; 20) (206; 410); - When a secret (T) corresponding to the acquired secret (E) of the natural person is identified from the secret (T) of the secret database (4;20), a link value (LID;LID1) is generated from the identified secret (T) and the code (C), preferably using a hash function (MAC) associated with the private key (Kb) to generate the link value (LID;LID1); - Compare the generated link value (LID) with the link values ​​(LIDbase; LID2base; LIDn+1base) in the identity database (6; 22; 36) which is different from the key database (4; 20) (210; 410), or with the link values ​​(LIDkbase; LID1base) in the buffer database (18; 38; 40) which is different from both the key database (4; 20) and the identity database (6; 22; 36); - Retrieve (211; 413) the verification value (CIbase) associated with the link value (LIDbase) in the identity database (6; 22; 36), or, if the link value is the first link value (LID1base) in a link value chain in which each other link value is derived from the previous link value, retrieve the verification value (CIbase) associated with the link value (LID2base; LIDn+1base) in the identity database or in a buffer database distinct from the secret database and the identity database. - Retrieve (212; 414) a personal identifier (ID) from the identity database (6; 22; 36) that is associated with a linked value (LIDbase) in the identity database or a linked value (LID2base; LIDn+1base) in the linked value chain (LID2base; LIDn+1base). - Generate (213) a verification value (CI) based on the identified secret (T), the acquired code (C), and the acquired personal identifier (ID), preferably using a hash function (MAC) associated with the private key (Ki) to generate (213) the verification value (CI); - Compare the generated value to be verified (CI) with the obtained verification value (CIbase) (214), - Provide the obtained personal identifier (215) when the generated verification value (CI) is the same as the obtained verification value (CIbase). 2. The method (200; 400; 600; 800) according to the preceding claims, wherein the method is a biometric identification method, the secret (T) is related to the biometric fingerprint of the natural person, in particular, the secret is the hash value (Fb(T)) of the biometric fingerprint of the natural person, and the secret database (4; 20) is a biometric database including the biometric fingerprint of the natural person. 3. The method (200; 400; 600; 800) according to any one of the preceding claims, wherein the code (C) is: - Involves a password provided by the natural person, specifically, the code (C) includes the hash value of the password provided by the natural person to the secret server; and / or - In relation to an entity, such as a merchant, a natural person identifies that entity. In particular, the code (C) includes the entity’s public identity value known to the secret server. 4. The method according to any one of the preceding claims (400; 600; 800) includes the following step: when the link value (LID1) is the first link value in the link value chain, each subsequent link value in the link value chain is obtained from the previous link value: - First, the first historical value (Hist1) in the (408) historical value chain is generated based on the first link value (LID1). - When a link value (LID1base) corresponding to the generated first link value (LID1) is identified in the buffer database (18; 38; 40), the next link value (LID2) or the last link value in the link value chain is generated (411) based on the secret (T), code (C), and first history value (Hist1), preferably using a hash function (MAC) associated with the private key; and the next history value (Hist2) is generated from the next link value (LID2) and the first history value, preferably also using a one-way function associated with the private key. - Optionally, the next link value (LIDk) is compared with the link value (LIDkbase) in the next buffer database that is different from the above buffer database, and another next link value (LIDk+1) and another next history value (Histk+1) are generated. These comparison and generation steps are repeated until the last link value is generated in the link value chain. - Compare the last linked value in the linked value chain with the linked value (LIDn+1base) in the identity database to obtain the associated personal identifier (ID) in the identity database. 5. A method (100; 300; 500; 700) for registering a natural person to an identification system, said method being implemented by a computer and comprising the following steps: - Get (105) code (C); - Obtain the secret (E) of the natural person mentioned in (107); - Compare the natural person's secret (E) with the secret (T) in the secret database (109); - When there is no secret in the database corresponding to the natural person's secret, a link value (110) specifically for the natural person is generated, preferably using a hash function associated with the private key, based on the natural person's secret and the code (C); - Store (110) the secrets of natural persons in a secret database, without storing link values ​​or codes; - Upon receiving the code and the secret, generate (116) the natural person's personal identifier; -Based on the received secret, the received code, and the generated personal identifier, preferably also using a hash function associated with the private key, a (111) verification value is generated; - Store (118) the personal identifier of the natural person associated with the link value and the verification value in the identity database, or the link value is the first link value in a chain of link values ​​in which each other link value is derived from the previous link value, store the personal identifier associated with the last link value in the chain in the identity database, and store the verification value in the identity database and associated with the personal identifier, or store it in a buffer database that is separate from the secret database and the identity database and associated with the link value in the chain of link values. 6. Natural Person Identification System (2; 16; 30; 44), including: - A secret database containing natural person secrets (T) (4; 20), and - An identity database (6;22;36) comprising the individual personal identifiers (IDs) of the natural persons, wherein the identity database associates link values ​​with each individual personal identifier of the natural person. -Automation device, configured as follows: The secret received from the natural person is compared with the secrets in the secret database, and the corresponding secret of the natural person is identified. Based on the natural person's secret and code, a link value is generated, preferably using a hash function associated with a private key. * Compare the received link value with the link value in the identity database, or with the link value in a buffer database that is distinct from both the secret database and the identity database; * Obtain the verification value associated with the link value in the identity database, or, if the link value is the first link value in a link value chain where each other link value is derived from the previous link value, obtain the verification value associated with the link value in the identity database or a buffer database distinct from the secret database and the identity database. * Retrieve the personal identifier associated with the linked value or linked value chain in the identity database. *Based on the received secret, the received code, and the acquired personal identifier, preferably a hash function associated with the private key is used to generate the value to be verified. * Compare the generated value to be verified with the obtained verification value, and when the generated value to be verified is the same as the obtained verification value, indicate that the obtained personal identifier corresponds to the secret received from the natural person. 7. The identification system according to the preceding claim (6; 30; 44) further comprises: - At least one buffer database (18;38;40), distinct from the secret database and the identity database, and including link values, -Automation device, configured as follows: *Receive the link value, code, and secret. The received link value is compared with the link values ​​in the buffer database, and when a corresponding link value is identified, the next link value in the link value chain is generated based on that link value. *Send the next link value, code, and secret. 8. A data processing system (2; 16; 30; 44) comprising a processor configured to implement the steps of the identification method (200; 400; 600; 800) according to any one of claims 1 to 4 or the steps of the registration method (100; 300; 500; 700) according to claim 5. 9. A computer program (12), the computer program comprising instructions that, when executed by a computer, cause the computer to perform the steps of the identification method according to any one of claims 1 to 4 or the steps of the registration method according to claim 5. 10. A computer-readable recording medium (14) comprising instructions that, when executed by a computer, cause the computer to perform the steps of the identification method (200; 400; 600; 800) according to any one of claims 1 to 4 or the steps of the registration method (100; 300; 500; 700) according to claim 5.

Claims

1. A method for identifying (200; 400; 600; 800) natural persons, said method being implemented by a computer and comprising the following steps: - Get (203) code (C); - Obtain the secret (T) of the natural person described in (205); - Compare the natural person's secret (T) with the secret (E) in the secret database (4; 20) (206; 410); - When a secret (E) corresponding to the natural person's secret (T) is identified in the secret database (4;20), a link value (LID;LID1) is generated from the secret (T) and the code (C), preferably using a hash function (MAC) associated with the private key (Kb) to generate the link value (LID;LID1); - Combine the generated link value (LID) with the link values ​​(LIDbase; LID2) in the identity database (6; 22; 36) that are distinct from the key database (4; 20). base LIDn+1 base Compare (210; 410), or with the linked values ​​(LIDk) in the buffer database (18; 38; 40) that are distinct from the key database (4; 20) and the identity database (6; 22; 36). base LID1 base Compare; - Retrieve (211; 413) from the identity database (6; 22; 36) and its link value (LID). base ) associated validation value (CI) base ), or, the link value is the first link value in the link value chain (LID1). base In this chain of linked values, each other linked value is derived from the previous linked value, obtained from the identity database or from a buffer database distinct from the secret database and the identity database, along with the linked value (LID2). base LIDn+1 base ) associated validation value (CI) base ), - Retrieve (212; 414) from the identity database (6; 22; 36) and the link value (LID) from the identity database. base ) or the link value in the link value chain (LID2) base LIDn+1 base The associated personal identifier (ID) - Generate (213) a verification value (CI) based on the received secret (T), the received code (C), and the acquired personal identifier (ID), preferably using a hash function (MAC) associated with the private key (Ki) to generate (213) the verification value (CI); - Combine the generated value to be verified (CI) with the obtained verification value (CI). base ) for comparison (214), - When the generated value to be verified (CI) matches the obtained verification value (CI) base When the same, provide the personal identifier obtained by (215).

2. The method according to the preceding claims (200; 400; 600; 800), wherein, The method is a biometric identification method, wherein the secret (T) is related to the biometric fingerprint of the natural person, and in particular, the secret is the hash value (Fb(T)) of the biometric fingerprint of the natural person, and the secret database (4;20) is a biometric database that includes the biometric fingerprint of the natural person.

3. The method (200; 400; 600; 800) according to any one of the preceding claims, wherein, The code (C) is: - Involves a password provided by the natural person, specifically, the code (C) includes the hash value of the password provided by the natural person to the secret server; and / or - In relation to an entity, such as a merchant, a natural person identifies that entity. In particular, the code (C) includes the entity’s public identity value known to the secret server.

4. The method according to any one of the preceding claims (400; 600; 800) includes the following step: when the link value (LID1) is the first link value in the link value chain, each subsequent link value in the link value chain is obtained from the previous link value: - First, the first historical value (Hist1) in the (408) historical value chain is generated based on the first link value (LID1). - When the link value (LID1) corresponding to the generated first link value (LID1) is identified in the buffer database (18; 38; 40) base When generating the next link value (LID2) or the last link value in the link value chain (411), based on the secret (T), code (C), and first history value (Hist1), preferably using a hash function (MAC) associated with the private key; and generating the next history value (Hist2) from the next link value (LID2) and the first history value, preferably also using a one-way function associated with the private key. - Optionally, the next link value (LIDk) is compared with the link value (LIDk) in the next buffer database that is different from the above buffer database. base The comparisons are performed, and the next link value (LIDk+1) and the next history value (Histk+1) are generated. These comparison and generation steps are repeated until the last link value is generated in the link value chain. - Link the last link value in the linked value chain with the link value (LIDn+1) in the identity database. base The comparison is performed to obtain the associated personal identifier (ID) in the identity database.

5. A method (100; 300; 500; 700) for registering a natural person to an identification system, said method being implemented by a computer and comprising the following steps: - Get (105) code (C); - Obtain the secret (E) of the natural person mentioned in (107); - Compare the natural person's secret (E) with the secret (T) in the secret database (109); - When there is no secret in the database corresponding to the natural person's secret, a link value (110) specifically for the natural person is generated, preferably using a hash function associated with the private key, based on the natural person's secret and the code (C); - Store (110) the secrets of natural persons in a secret database, without storing link values ​​or codes; - Upon receiving the code and the secret, generate (116) the natural person's personal identifier; -Based on the received secret, the received code, and the generated personal identifier, preferably also using a hash function associated with the private key, a (111) verification value is generated; - Store (118) the personal identifier of the natural person associated with the link value and the verification value in the identity database, or the link value is the first link value in a chain of link values ​​in which each other link value is derived from the previous link value, store the personal identifier associated with the last link value in the chain in the identity database, and store the verification value in the identity database and associated with the personal identifier, or store it in a buffer database that is separate from the secret database and the identity database and associated with the link value in the chain of link values.

6. Natural Person Identification System (2; 16; 30; 44), including: - A secret database containing the secrets (T) of natural persons (4; 20), and - An identity database (6;22;36) comprising the individual personal identifiers (IDs) of the natural persons, wherein the identity database associates link values ​​with each individual personal identifier of the natural person. -Automation device, configured as follows: The secret received from the natural person is compared with the secrets in the secret database, and the corresponding secret of the natural person is identified. Based on the natural person's secret and code, a link value is generated, preferably using a hash function associated with a private key. * Compare the received link value with the link value in the identity database, or with the link value in a buffer database that is distinct from both the secret database and the identity database; * Obtain the verification value associated with the link value in the identity database, or, if the link value is the first link value in a link value chain where each other link value is derived from the previous link value, obtain the verification value associated with the link value in the identity database or a buffer database distinct from the secret database and the identity database. * Retrieve the personal identifier associated with the linked value or linked value chain in the identity database. *Based on the received secret, the received code, and the acquired personal identifier, preferably a hash function associated with the private key is used to generate the value to be verified. * Compare the generated value to be verified with the obtained verification value, and when the generated value to be verified is the same as the obtained verification value, indicate that the obtained personal identifier corresponds to the secret received from the natural person.

7. The identification system according to the preceding claim (6; 30; 44) further comprises: - At least one buffer database (18;38;40), distinct from the secret database and the identity database, and including link values, -Automation device, configured as follows: *Receive the link value, code, and secret. The received link value is compared with the link values ​​in the buffer database, and when a corresponding link value is identified, the next link value in the link value chain is generated based on that link value. *Send the next link value, code, and secret.

8. A data processing system (2; 16; 30; 44) comprising a processor configured to implement the steps of the identification method (200; 400; 600; 800) according to any one of claims 1 to 4 or the steps of the registration method (100; 300; 500; 700) according to claim 5.

9. A computer program (12), the computer program comprising instructions that, when executed by a computer, cause the computer to perform the steps of the identification method according to any one of claims 1 to 4 or the steps of the registration method according to claim 5.

10. A computer-readable recording medium (14) comprising instructions that, when executed by a computer, cause the computer to perform the steps of the identification method (200; 400; 600; 800) according to any one of claims 1 to 4 or the steps of the registration method (100; 300; 500; 700) according to claim 5.

Images