Method for registering biometric data in a data carrier having a biometric sensor

Abstract

The invention relates to a method (100) for registering biometric data, using a read / write device (20), in a data carrier (10) having a biometric sensor (11). The method (100) comprises: providing (110) the data carrier (10) and the read / write device (20); authenticating (120) an authorised user of the data carrier (10) with an issuer of the data carrier (10); acquiring (130) the biometric data to be registered on the data carrier (10) at the read / write device (20); transmitting (140) the acquired biometric data to the data carrier (10) by means of a contactless interface of the read / write device (20); and storing and registering (160) the biometric data received from the read / write device (20) in the data carrier (10).

Description

[0001] Method for registering biometric data in a data carrier with a biometric sensor

[0002] Field of the invention

[0003] The present invention relates to the registration of biometric data of a user in a data carrier with a biometric sensor using a reading / writing device, such as a mobile device (e.g. a smartphone).

[0004] Background of the invention

[0005] Card-shaped data storage devices are used in a wide variety of applications today. For example, such data storage devices can be used for cashless payment of goods or services, for personal identification, or for accessing internet-based applications.

[0006] Accordingly, there are, for example, card-shaped data carriers in the form of chip cards such as payment cards (e.g., credit cards or debit cards), as well as personal ID or identity cards. Payment cards in the form of credit cards or debit cards, in particular, are often dual-interface chip cards (DI chip cards), which can communicate with other devices, such as point-of-sale terminals, both contact-based via a chip element and contactless via near-field communication (NFC). For the release of

[0007] Payment transactions with such data carriers usually require the entry of a PIN.

[0008] However, there are also card-shaped data carriers with an integrated biometric sensor (e.g. a fingerprint sensor) to authorize transactions with the data carrier. An important step here is the registration of fingerprints in the card-shaped data carrier. This should be secure and must involve the end user. For logistical reasons, however, this process takes place outside the banking or personalization environment, after the card has been sent to the user. These data carriers are therefore initially delivered to the customer without stored biometric characteristics. The cardholder's biometric characteristics (e.g. fingerprints) are then stored on the data carrier by the cardholder (so-called "enrollment"). Due to the PSD2 directive (Engi.: Payment Service Directive 2; German: Zahlungsdienstrichtlinie 2) in the European Union, it must also be ensured with the help of two independent factors that the card credentials are linked to the correct user.

[0009] For enrollment, for example, special hardware (sleeves) can be sent along with the data storage device, into which the customer inserts the data storage device. The sleeve then enables the capture of a biometric feature to be stored, such as a fingerprint. The customer can then register their fingerprints. However, such sleeves have the disadvantage of increasing the cost of providing the data storage device. These additional costs are in addition to the already required additional costs of a biometric card. Furthermore, such sleeves produce additional electronic waste.

[0010] Another option for initially capturing the customer's biometric characteristics is using appropriate smartphone apps. These apps allow the user to capture the biometric characteristics and save them on the card-shaped data carrier using NFC communication. The card-shaped data carrier is held against an NFC interface on the smartphone. A stable NFC connection must be maintained throughout the entire enrollment process to capture the biometric characteristic. To ensure that the user can see and follow the instructions on the smartphone display during enrollment and simultaneously interact with the fingerprint sensor, the card-shaped data carrier is placed on the back of the smartphone in such a way that the fingerprint sensor is still accessible to the user. However, this is generally not the placement with the best possible connection stability.Energy transfer (sweet spot). In addition, the reading performance of a smartphone is usually less than approximately 2 A / m. This can lead to sudden connection interruptions during interaction, particularly in corresponding command sequences with increased energy requirements (i.e. when the fingerprint sensor is activated). As a result, it is difficult for the user to find the correct / ideal position with the best energy input for the card-shaped data carrier with fingerprint sensor. It is also difficult to maintain a stable contactless connection between the data carrier and the smartphone for a sufficiently long time. If, for example, the card slips during enrollment, the connection can be interrupted and thus the enrollment process itself can be aborted. The user must therefore simultaneously hold the mobile phone, hold the card steadily at one point, and simultaneously place and remove a finger from the sensor several times.

[0011] Description

[0012] Accordingly, the object of the present invention is to provide a method that enables sufficiently secure and simple registration of fingerprints on a biometric card without the need to ship additional hardware. In particular, the disclosed method also eliminates the need for a contactless connection of the data carrier to a reading / writing device (such as a mobile phone / smartphone) over an extended period of time. Furthermore, registration can be linked to the user's identity using two factors in accordance with the PSD2 Directive.

[0013] This object is achieved by the subject matter of the independent claim. Exemplary embodiments emerge from the dependent claims and the following description.

[0014] According to one aspect, a method for registering biometric data, using a read / write device, in a data carrier with a biometric sensor is provided. The method comprises providing the data carrier and the read / write device, authenticating an authorized user of the data carrier with an issuer of the data carrier, receiving the biometric data to be registered on the data carrier at the read / write device, transmitting the received biometric data to the data carrier by means of a contactless interface of the read / write device, and storing and registering the biometric data received from the read / write device in the data carrier.

[0015] Registering biometric data can be understood as both the initial registration / storage of the biometric data and the re-registration of the biometric data in the data carrier. The data carrier can then use the biometric data stored and registered in the data carrier in subsequent authentication processes and compare it with biometric characteristics captured by a biometric sensor on the data carrier in order to authorize corresponding processes (for example, a payment process with a payment card; for example, an identification process with an identity document). In other words, registering biometric data means capturing biometric reference data in the data carrier.

[0016] Although described herein primarily with reference to card-shaped data storage devices with fingerprint sensors, it should be noted that the method can, in principle, be used with any suitable data storage device and with any suitable biometric sensor. Examples of other data storage devices are USB dongles with fingerprint sensors or access hardware for certain services. Although the problem of power supply via the NFC field does not exist with data storage devices with their own power supply, enrollment can, in principle, also be carried out with such data storage devices using the disclosed method. In such data storage devices with their own power supply, this also enables the biometrics to be linked to the user identity, which is why the method can also be advantageous there.However, the method is preferred for passive data carriers (such as card-shaped data carriers without their own power supply), since the greatest advantages are achieved in such application scenarios, as described herein.

[0017] The reader / writer can, for example, be a smartphone with an NFC (Near Field Communication, NFC) interface. However, it should be noted that, although described primarily with reference to such a mobile phone / smartphone, the reader / writer can, in principle, use any suitable hardware with a contactless interface. Furthermore, it should be noted that contactless communication technologies other than NFC can also be used, enabling contactless communication with the reader / writer.

[0018] In a first step of the process, both the data carrier on which the biometric data is to be registered and the read / write device used for registration are provided. For example, the data carrier can be provided by a corresponding issuer, for example, by a bank sending a card-shaped data carrier (herein also referred to as a "card" or "biometric card") with a biometric sensor (e.g., a fingerprint sensor) to a customer. The customer can then use, for example, a smartphone in their possession as the read / write device.

[0019] In a second step, the customer (or user in general) is authenticated as an authorized user of the data storage device to the issuer of the data storage device. If, for example, the issuer is a bank that issues a biometric card to a customer, the customer can authenticate themselves to the bank as the authorized holder / user of the biometric card before the customer is allowed to register their fingerprint (or other biometric characteristics). For example, the customer or generally authorized user could authenticate themselves to the issuer of the data storage device using a software application (e.g.a corresponding app) to the publisher, for example by the user logging into a corresponding account of the publisher using access data known to the user or, for example, by the user obtaining a corresponding release code from the publisher by telephone (after appropriately ensuring the user's identity) (or having it sent, for example, via SMS or an authenticator app), which can then be entered into the software application to activate registration. However, all other possible authentication methods are also conceivable. For example, the user could also read an electronic identification document (e.g. an electronic ID card) with a software application used to register the biometric data and use it for authentication in the known manner.Preferably, the authorized user is authenticated using two-factor authentication methods, as is familiar to those skilled in the art, thus increasing security and also complying with any existing legal requirements (such as the Payment Services Directive 2 in the European Union). However, such two-factor authentication methods are not mandatory, at least from a technical perspective.

[0020] To ensure that the user only records their biometric data on the associated (authentic) data carrier, the user can optionally also be asked during authentication to authenticate the data carrier in a suitable manner. This could, for example, be done by entering or entering a number applied to the data carrier or otherwise sent along with it, or another suitable identifier (such as by scanning a QR code applied to the data carrier with a camera), by briefly reading the data carrier with the contactless interface of the read / write device (for example, by the user briefly holding the data carrier to the NFC interface of the smartphone used so that the read / write device can read the relevant data), by authenticating with a product of the publisher (as an example, the product “Convego Tap” of the applicant can be mentioned here. There, for example,The card is authenticated via NFC to ensure that a genuine card is being presented and not just a device simulating one. This can then also ensure the integrity of the card data), or in any other suitable manner. Alternatively, however, authentication of the data carrier can also be performed before transmitting the biometric data carrier, as described below, since a contactless connection between the data carrier and the reading / writing device is established in this step anyway.

[0021] After the authorized user of the data carrier has been authenticated and, optionally, the data carrier has been authenticated as a correct data carrier, the biometric data to be registered on the data carrier is received at the read / write device. This can be done in a variety of ways. For example, the biometric data can be captured and optionally also evaluated by the read / write device itself, captured by the read / write device and the captured raw biometric data transmitted to a remote computing device (e.g. a server of the issuer) for evaluation and the evaluated biometric data received again from the remote computing device, or the biometric data may already have been stored in the remote computing device beforehand (e.g. from a previous registration) and received from a corresponding data set assigned to the customer.These possibilities are described below with reference to specific embodiments.

[0022] After the biometric data has been received at the read / write device, it is transferred to the data storage device, where it is stored and registered. To do this, the data storage device is held (relatively briefly) against the read / write device or its contactless interface (such as the NFC transmitter of a smartphone), so that the biometric data present in the read / write device in evaluated form (i.e., with correspondingly evaluated / extracted biometric features) can be transferred to the data storage device and stored there.

[0023] The disclosed method has the advantage that an active data connection between the data carrier and the contactless interface of the read / write device only needs to be present for a relatively short time, namely only while the biometric data is being transmitted and stored. In particular, no active communication between the data carrier and the read / write device is required during the capture and evaluation of the captured raw biometric data. This also eliminates the need for the user to laboriously attempt to maintain an active data connection with a strong connection over an extended period while simultaneously handling the data carrier to capture the biometric data. The likelihood of a premature connection interruption and thus a termination of registration is thus reduced, firstly, by the reduced required connection time and, secondly, by the simplified handling.This is made possible, in particular, by separating the capture of biometric data on the one hand, and the transmission and storage of the biometric data to the data carrier on the other. If the data carrier's biometric sensor itself is used to capture the biometric data, such a separation is not possible, as the data carrier must then be supplied with energy (from the contactless interface of the read / write device) throughout the entire process.

[0024] Alternatively, it is also conceivable that a user, before ordering a biometric data storage device (e.g., a biometric payment card), could capture their biometric data (such as a fingerprint) themselves as described and transmit it to the issuer. The storage device can then be delivered directly with stored / registered biometric data. In such a case, the step of transferring the biometric data to the storage device would be omitted. The step of storing and registering the biometric data in the storage device would then be performed by the manufacturer.

[0025] According to one embodiment, obtaining the biometric data comprises receiving the biometric data from a remote computing device via a data connection.

[0026] The biometric data may, for example, have been captured and processed in a previous registration process (e.g., by the reader / writer, a corresponding service provider, at an issuer's branch, or in any other suitable manner) to extract the corresponding biometric characteristics. It is also conceivable, for example, that the data carrier is a follow-up data carrier (e.g., a replacement for an expired payment card) and the biometric data were captured, evaluated, and stored upon delivery of the initial data carrier. The corresponding biometric data can then be stored in a data record of the remote computing device assigned to the authorized user and retained for future registration processes of a data carrier.

[0027] In general, when biometric data is mentioned here, it means evaluated biometric data that can therefore be used for authentication. In the field, such biometric data is also referred to as a biometric "template," i.e., a sample of biometric characteristics that can later be compared with scanned biometric data for authentication. When raw biometric data is mentioned here, it means the captured but not yet processed data.

[0028] The remote computing device can, for example, be a server or other computing device of the issuer. However, it is also conceivable that the remote computing device is operated by a third party, e.g., an authentication service provider. The remote computing device can also store the raw biometric data and process it upon retrieval to generate the biometric data. It is also conceivable that the raw biometric data is transmitted directly to the read / write device and only then processed by the read / write device.

[0029] Furthermore, it is also conceivable that the remote computing device stores neither the raw biometric data nor the biometric data, but that the raw data (in any suitable manner, for example, via the read / write device) is only received as raw biometric data during the registration process of the biometric data on the data carrier, i.e., when a user initiates the registration, and processed to obtain the evaluated biometric data. This data is then transmitted directly to the read / write device and then deleted. This procedure enables compliance with stricter data protection requirements and is explained below with reference to an embodiment.

[0030] According to a further embodiment, obtaining the biometric data comprises capturing raw biometric data using a sensor of the read / write device.

[0031] If the biometric data is fingerprint data, the raw biometric data can be captured, for example, with a camera on the read / write device, i.e., a smartphone camera, by taking corresponding images of the user's finger. Such capture of fingerprint data is possible because cameras with the appropriate resolution are now available. Furthermore, captured camera data can be easily sent. However, it is also fundamentally possible to capture such fingerprint data as raw biometric data using a fingerprint sensor on the read / write device itself, provided the read / write device is configured accordingly.However, modern smartphones in particular often do not allow the transmission of data captured with a corresponding biometric sensor (e.g., a fingerprint sensor), as all capture and use of biometric data is managed via a special secure element of the smartphone. With appropriate configuration, however, the use of biometric sensors in the reader / writer device to capture the raw biometric data is also conceivable.

[0032] It is also conceivable that, in the future, miniature cameras or other biometric sensors could be incorporated into data storage devices, such as biometric cards, to enable operations with the data storage device through facial recognition, for example. Accordingly, the biometric data does not necessarily have to be fingerprint data, but can also be, for example, images of a face, eyes, or other biometric data associated with a user. The present disclosure encompasses all such biometric data.

[0033] According to a further embodiment, the sensor of the read / write device is a camera.

[0034] For the reasons explained above, a camera is preferred because it allows for particularly easy use of, for example, smartphones as a read / write device.

[0035] According to a further embodiment, the sensor of the read / write device is a fingerprint sensor of the read / write device.

[0036] As explained, this is also conceivable if the read / write device is configured accordingly.

[0037] According to a further embodiment, the capture of the raw biometric data includes detecting the liveness of the user.

[0038] Such liveness detection can, for example, when the sensor of the read / write device is a camera used to generate images to extract a fingerprint, involve taking images of the finger at different angles or certain movement patterns that must be imitated during the recording. For this purpose, videos could also be recorded, for example, in which bending movements of the finger or other movements can be detected, since movements in three-dimensional space always have specific patterns. Using this type of procedure, attempts at deception, in which a user tries to hold a previously taken image up to the camera, can be easily detected, since such images are two-dimensional by nature and differ from a picture of a corresponding three-dimensional object (or finger) when taken at different angles.

[0039] Furthermore, it is conceivable to detect a user's pulse, for example, by dynamically tracking images and applying appropriate filtering. Such methods could also detect attempts at deception based on physical force against the authorized user.

[0040] In addition, it is also conceivable, for example, to additionally use an infrared sensor or another suitable sensor (such as temperature sensors) to measure the temperature of a finger (or, for example, a face if the biometric data is based on facial recognition), which can also be used to detect attempts at deception.

[0041] If physical biometric sensors (such as fingerprint sensors) of the reader / writer are used to capture the raw biometric data, conductivity measurements, temperature measurements, etc. can also be used directly with the physical biometric sensor for liveness detection.

[0042] To detect attempts at deception, machine learning algorithms with trained neural networks or other algorithms can generally be used, regardless of the type of liveness detection. Overall, the separation of the capture and processing of biometric data from the registration and storage of the biometric data in the data carrier makes it possible to use more computing power for such algorithms (but also, for example, for the processing of the raw biometric data itself), since the corresponding computing operations do not have to be performed using the limited resources of the data carrier (e.g., a card), but can be performed, for example, on powerful servers or other computing devices, such as on the reading / writing device itself or on the described remote computing device.

[0043] According to a further embodiment, obtaining the biometric data further comprises processing the captured raw biometric data, wherein the processed raw biometric data corresponds to the biometric data for the data carrier.

[0044] Processing the biometric data involves preparing the raw biometric data into a corresponding template so that it can later be used in authentication processes with the data carrier's biometric sensor (e.g., when authorizing payment transactions if the data carrier is a biometric payment card). As already explained above, the raw biometric data comprises the unprocessed biometric data, while the biometric data represents usable biometric data. Processing may, in particular, include the extraction of corresponding features for the template, as described below.

[0045] Processing the raw biometric data may also include appropriate filtering, edge enhancement, etc. to detect and extract the relevant features.

[0046] According to a further embodiment, the processing of the raw biometric data is carried out by the read / write device.

[0047] According to another embodiment, processing the raw biometric data comprises transmitting the raw biometric data to a remote computing device and having the remote computing device process the raw biometric data to obtain the biometric data. The remote computing device transmits the biometric data to the read / write device.

[0048] Processing the raw biometric data to generate the biometric data by a remote computing device has the particular advantage of allowing for more computing power. The remote computing device can, for example, be a server or data center of the issuer or a third party. Furthermore, processing in the remote computing device eliminates software-based manipulation of the reader / writer, further increasing security against deception or fraud.

[0049] According to a further embodiment, the data transmission between the remote computing device and the read / write device is encrypted.

[0050] Such encryption can be performed locally (on the read / write device) or on the server side (on the remote computing device) on a user- and / or card-specific basis. Both directions of communication (i.e., the data transmission of the raw biometric data to the remote computing device and the data transmission from the remote computing device to the read / write device) can be encrypted, or only the transmission of the processed biometric data from the remote computing device to the read / write device can be encrypted.

[0051] Encryption can be symmetric or asymmetric. Symmetric encryption should preferably be performed server-side so that the symmetric key does not need to be stored on the read / write device.

[0052] According to a further embodiment, processing the raw biometric data comprises extracting relevant biometric features for uniquely identifying the user from the raw biometric data and generating the biometric data using the relevant biometric features, so that the biometric data can be used by the data carrier to identify the user. Extracting biometric features for uniquely identifying the user from the captured raw biometric data can, for example, in the case of a fingerprint, comprise extracting characteristic features of the fingerprint, such as corresponding forks, nodes, loops, whorls, etc. of the fingerprint, which are generally known from fingerprint analysis. Such features can, for example, be extracted from recorded image data of a finger.For face-based biometric features, the extracted features can include, for example, facial features based on geometric arrangements and texture properties. The extracted features are then incorporated into a "template," which corresponds to the biometric data that can later be used for comparison by the data storage device's biometric sensor. However, this list is merely exemplary.

[0053] As already described above, corresponding feature extraction can be carried out, for example, using machine learning algorithms with trained neural networks or in any other suitable way.

[0054] According to a further embodiment, the user is authenticated to the issuer of the data carrier via a software application on the reading / writing device.

[0055] Such a software application can, for example, comprise an app for a smartphone provided by the issuer of the data carrier, which can, for example, be installed from an app store. Preferably, the entire method (with the exception of the step of providing the data carrier and the reading / writing device) is carried out by a single software application that is configured to perform the corresponding steps and guide the user in registering the biometric data. Such a software application can, in the example of a biometric payment card issued by a bank, be integrated, for example, into the bank's online banking app, i.e., the corresponding range of functions can be integrated into the online banking app.According to a further embodiment, the transmission of the obtained biometric data to the data carrier by means of the contactless interface of the read / write device comprises a prior authentication of the read / write device to the data carrier.

[0056] Such authentication of the read / write device to the data carrier ensures that the read / write device is authorized to transmit biometric data to the data carrier for registration. For example, a software application used on the read / write device to perform the registration or transmit data to the data carrier can authenticate itself to the data carrier in a suitable manner so that the data carrier, for example, only accepts biometric data transmitted by a software application provided by the issuer of the data carrier. For example, suitable digital certificates or other suitable means can be used for this purpose.

[0057] According to a further embodiment, the read / write device is a mobile device of the user.

[0058] For example, the read / write device can be a smartphone with a camera and an NFC interface.

[0059] According to a further embodiment, the biometric data comprises fingerprint data of the user.

[0060] In summary, the disclosed method provides a way to register biometric data in a corresponding data carrier (in particular, a biometric card-shaped data carrier that uses a biometric sensor) without requiring any additional hardware to be sent with the data carrier. This eliminates the associated additional costs. Furthermore, two-factor authentication of the user, for example, in a banking app, can ensure a PSD2-compliant link between registration and the user's identity. While it is still possible for the user to register someone else's fingerprint (e.g., a family member), this cannot be completely ruled out with any method. In this case, this constitutes gross negligence on the part of the user, which can be addressed through the bank's terms and conditions.Compared to existing app processes using NFC, this results in a significant improvement in usability for the user. The steps of capturing fingerprints and registering them on the card are separated. This means that the user no longer has to operate the mobile phone (or the reader / writer in general), the card, and the fingerprint sensor simultaneously. Furthermore, the card only needs to be briefly held to the NFC interface (or another contactless interface) to transfer the biometric data (i.e., a corresponding template) to the data storage device. Prolonged contact, which can lead to interrupted processes, is therefore no longer necessary. In particular, taking a photo of the finger is easier than multiple registrations on a biometric sensor on the data storage device.In addition, known optical methods for liveness detection can be applied, which are not limited by the limited resources (memory, computing power) of the fingerprint sensor on the data storage device, for example, a card-shaped device. If regional data protection regulations permit it, a server-side comparison of the fingerprint with a previously registered fingerprint would even be possible, e.g., for a stronger connection to the user's identity. It would even be conceivable to significantly simplify the registration of the card or a subsequent card for the user by using templates already stored on the server (and encrypted for each user).

[0061] Brief description of the drawings

[0062] Fig. 1 shows an architecture for performing a method for registering biometric data in a data carrier.

[0063] Fig. 2 shows a flowchart of a method for registering biometric data in a data carrier, which can be implemented, for example, with the system architecture shown in Fig. 1. Detailed description

[0064] The representations in the figures are schematic and not to scale. Where the same reference symbols are used in different figures in the following description, they refer to identical or similar elements. Identical or similar elements may also be designated by different reference symbols.

[0065] Fig. 1 shows a highly schematic architecture for carrying out a method 100 (such as the method 100 described with reference to Fig. 2) for registering biometric data in a data carrier 10. Registering biometric data is understood to mean storing biometric reference data for the first time (or again) in the data carrier 10, which are later used by the data carrier 10 for comparison during authentication processes with the data carrier 10.

[0066] A reading / writing device 20, which in the illustrated embodiment is a mobile device 20 in the form of a user's smartphone 20, has at least one sensor 21, in particular a camera 21 (but possibly also a fingerprint sensor, for example), which is configured to record image data. The reading / writing device 20 further has a contactless interface 22 (preferably an NFC interface 22) which is capable of establishing a contactless connection with other devices, in particular with the data carrier 10 (such as a card-shaped data carrier 10, e.g., a dual-interface chip card that functions as a payment card, identification document, or the like). The data carrier 10 also has a contactless interface 12 for this purpose. The data carrier 10 has an integrated biometric sensor 11, e.g.,to authorize transactions with the data carrier 10 by an authorized user (in the case of a payment card, for example, to authorize payment transactions). The biometric sensor 11 can be, for example, a fingerprint sensor 11. In order for the biometric sensor 11 to be used to authorize transactions with the data carrier, the corresponding biometric data of the authorized user must first be captured and stored in the data carrier 10. This process is generally referred to as "enrollment." Although enrollment can, in principle, also take place before the data carrier 10 is delivered to the authorized user, it usually takes place afterwards.

[0067] Delivery / dispatch of the data carrier 10 to the user by the user himself.

[0068] The read / write device 20 is configured to establish a communication connection with a remote computing device 30. The communication connection can be established, for example, via a wide area network such as the Internet, a local area network, or any other suitable data connection 31. The remote computing device 30 can, for example, be a server of a publisher of the data carrier 10 or of a third party, such as a corresponding service provider.

[0069] In the following, with reference to Fig. 2 (with continued reference to Fig. 1), a method 100 for registering biometric data in the data carrier 10 using the read / write device 20 and the remote computing device 30 of Fig. 1 is illustrated by means of a flowchart.

[0070] In the following, the method 100 is explained using a usage scenario in which a card-shaped data carrier 10 in the form of a payment card with a fingerprint sensor 11 as a biometric sensor 11 is provided to a customer by a bank, and the customer registers their fingerprint in the data carrier 10. However, it should be recognized that this represents only one example of the use of the method 100, and the method can also be carried out with other data carriers 10 in other uses and also with other biometric sensors 11, since in principle every biometric sensor requires stored reference data.

[0071] The method 100 begins with the provision 110 of the data carrier 10, e.g. by the bank sending the card-shaped data carrier 10 to a user (e.g. bank customer) and with the provision of the reading / writing device 20, here in the form of a smartphone 20, by the user.

[0072] The method 100 then continues in a second step with the authentication 120 of the user as an authorized user of the data storage device 10 with the issuer (i.e., in this case, the bank). This can be done, for example, by the customer installing a corresponding software application on the read / write device 20. For example, an already existing online banking app could be used for this purpose, with which the customer can log into a corresponding account at the bank.

[0073] After the customer has authenticated themselves with the issuer, the process continues with the acquisition 130 of the biometric data to be registered on the data carrier at the read / write device. The acquisition 130 of the biometric data can be performed in three alternative ways, corresponding to the three branches shown in Fig. 2.

[0074] The biometric data may already have been captured in a previous registration process and be present / stored as a corresponding template on the remote computing device 30, so that it only needs to be transmitted to the read / write device 20 via the data connection 31 (left branch of Fig. 2). Obtaining 130 the biometric data then comprises receiving 131 the data from the remote computing device 30. Furthermore, it is also conceivable that the biometric data is already stored in the read / write device 20 itself (for example, as a correspondingly protected data set of the software application). In this case, obtaining 130 the biometric data comprises retrieving the data from the corresponding memory of the read / write device 20.

[0075] However, if no biometric data is yet present (neither in the read / write device nor in the remote computing device 30) (middle and right branches of Fig. 2) or if this data is to be updated with current data, obtaining 130 the biometric data can first comprise capturing 132 raw biometric data using a sensor 21 of the read / write device 20, preferably the camera 21 of the read / write device 20 (although, as described further above, other sensors 21 of the read / write device 20 can also be used). For this purpose, in the case of a fingerprint, for example, a correspondingly resolved image of a finger 40 of the user is preferably captured with the camera 21. If the biometric features are not a fingerprint, a corresponding other image (e.g., of the eyes, etc.) can also be captured instead of an image of a finger 40.In principle, the method 100 can be used with any type of biometric data, as long as the read / write device 20 and the corresponding data carrier 10 comprise appropriate sensors. Use with fingerprint data is merely exemplary. Optionally, a liveness detection can be performed during capture 132 of the raw biometric data, as already explained above, to ensure that no tampering occurs.

[0076] After capturing 132 the raw biometric data, the raw biometric data (e.g., the image data of the user's finger 40 captured by the camera 21) is processed 133 to generate usable biometric data for the biometric sensor 11 of the data carrier (i.e., corresponding comparison data for subsequent authentication processes with the biometric sensor 11). The processing 133 can be performed in any suitable manner and, in particular, can use, for example, machine learning algorithms or other suitable algorithms, as explained in detail above. In this case, the relevant biometric features (e.g., forks, knots, loops, swirls, etc. of a fingerprint), which enable a unique identification of the user, can be extracted 136 from the raw biometric data.The biometric features extracted in step 136 can then be used to generate 137 the final biometric data to be registered in the data carrier 10. A corresponding template is generated, as described above.

[0077] The processing 133 of the raw biometric data can take place either on the reading / writing device 20 itself (middle branch of Fig. 2) or on the remote computing device 30 (right branch of Fig. 2). Preferably, the processing 133 takes place on the remote computing device 30. This allows for the use of more computing power and prevents software-based manipulation attempts by the user or third parties on the reading / writing device 20.

[0078] When processing 133 occurs on the remote computing device 30, i.e., according to the right-hand branch of Fig. 2, the raw biometric data captured by the read / write device 20 is first transmitted 134 to the remote computing device 30 (e.g., via the data connection 31). The remote computing device 30 then processes the raw biometric data into biometric data, as already described, and the processed biometric data is transmitted by the remote computing device back to the read / write device 20. The above-described step of receiving 131 the biometric data from the remote computing device 30 occurs at this time when the raw biometric data is first captured by the read / write device 20 and transmitted to the remote computing device 30 for processing to obtain the usable biometric data.

[0079] Preferably, all communication between the read / write device 20 and the remote computing device 30 is encrypted, i.e., the transmitted data is first encrypted. However, it is also conceivable that only the transmission of the processed biometric data is encrypted, since this data is more sensitive than the raw biometric data. Symmetric and asymmetric encryption methods can be used. In the case of symmetric encryption, this should preferably take place on the server side (i.e., on the remote computing device 30) so that the symmetric key does not have to be stored on the read / write device 20. Preferably, the key used should be user-specific. This individual key can, for example, be stored on the remote computing device or derived there from user-specific data for encryption.

[0080] After the biometric data is present at the read / write device, i.e., either after receiving 131 the biometric data from the remote computing device (e.g., if it was already stored there or the raw biometric data was first transmitted by the read / write device 20 to the remote computing device 30 and processed 133 there), after retrieving the biometric data from a memory of the read / write device 20 itself (if it was already present there), or after processing 133 of the captured raw biometric data by the read / write device 20 itself, the biometric data is transmitted 140 to the data carrier 10. For this purpose, the data carrier 10 is held (e.g., upon request by the software application) to the contactless interface 22 of the read / write device. The biometric data is transmitted to the data carrier 10 and stored there.The enrollment is now complete.

[0081] Preferably, however, before or simultaneously with the transmission 140 of the biometric data to the data carrier 10, an authentication 141 of the read / write device with respect to the data carrier 10 takes place, so that it is ensured that only authorized read / write devices 20 (or authorized software applications on the read / write device 20) register biometric data in the data carrier 10. To ensure that the user records his biometric data only on the associated (authentic) data carrier, the user can optionally also be requested to authenticate the data carrier in a suitable manner at any time during the method 100, but before the transmission 140 of the biometric data to the data carrier 10.This could, for example, be done by entering or capturing a number applied to the data carrier 10 or sent along in some other way, or another suitable identifier (such as, for example, by scanning a QR code applied to the data carrier 10 with a camera), by briefly reading in or "real" authentication (e.g. with "Convego Tap" as described above, by transmitting a challenge to the data carrier 10 and the data carrier 10 signing it. The authenticity of the data carrier data can then be ensured using the signature of the data carrier 10 and PKI (Public Key Infrastructure)) of the data carrier 10 with the contactless interface 22 of the read / write device 20 (for example, by the user scanning the data carrier 10 (orgenerally holding its contactless interface 12) briefly against the contactless interface 22 of the read / write device 20 so that the read / write device 20 can read out the relevant data), or in any other suitable manner.

[0082] The method disclosed herein reduces the likelihood of connection interruptions during enrollment, since the data carrier 10 only needs to establish a connection with the contactless interface 22 briefly during the actual transmission 140 of the biometric data to the data carrier 10. Furthermore, the user does not have to simultaneously and laboriously handle the biometric sensor 11 of the data carrier 10. Even if the connection should be interrupted prematurely during transmission 140, the entire enrollment process does not have to be repeated, since the biometric data is captured separately from the transmission 140 and the corresponding data is therefore still present on the read / write device 20. Therefore, only a new transmission 140 to the data carrier 10 needs to be initiated.Additionally, it should be noted that "comprising" or "having" does not exclude other elements or steps, and "a" or "an" does not exclude a plurality. Furthermore, it should be noted that features or steps described with reference to one of the above embodiments can also be used in combination with other features or steps of other embodiments described above. Reference signs in the claims are not to be considered as limitations.

[0083] List of reference symbols

[0084] 10 (card-shaped) data carrier, card

[0085] 11 biometric sensor (of the data carrier), fingerprint sensor

[0086] 12 Contactless interface (of the data carrier) 0 Read / write device, mobile device, smartphone 1 Sensor (of the read / write device), camera, fingerprint sensor 2 Contactless interface, NFC interface (of the read / write device)

[0087] 30 remote computing device

[0088] 31 Data connection 0 fingers

[0089] 100 procedures

[0090] 110 Provision of the data carrier and the read / write device

[0091] 120 Authenticating the user

[0092] 130 Obtaining biometric data

[0093] 131 Receiving biometric data from remote computing device

[0094] 132 Capturing raw biometric data

[0095] 133 Processing raw biometric data

[0096] 134 Transferring raw biometric data to remote computing devices

[0097] 136 Extracting biometric features

[0098] 137 Generating biometric data

[0099] 140 Transferring biometric data to data carriers

[0100] 141 Authenticating the Reader / Writer Device

Claims

Patent claims 1. A method (100) for registering biometric data, using a read / write device (20), in a data carrier (10) having a biometric sensor (11), the method (100) comprising: Providing (110) the data carrier (10) and the read / write device (20); Authenticating (120) an authorized user of the data carrier (10) with an issuer of the data carrier (10); Receiving (130) the biometric data to be registered on the data carrier (10) at the read / write device (20); Transferring (140) the obtained biometric data to the data carrier (10) by means of a contactless interface (22) of the read / write device (20); and Storing and registering (160) the biometric data received from the read / write device (20) in the data carrier (10).

2. The method (100) of claim 1, wherein obtaining (130) the biometric data comprises receiving (131) the biometric data from a remote computing device (30) via a data connection (31).

3. The method (100) according to any one of the preceding claims, wherein obtaining (130) the biometric data comprises capturing (132) raw biometric data by means of a sensor (21) of the reading / writing device (20).

4. The method (100) according to claim 3, wherein the sensor (21) of the read / write device (20) is a camera (21).

5. The method (100) according to claim 3, wherein the sensor (21) of the reading / Write device (20) is a fingerprint sensor (21) of the read / write device.

6. The method (100) according to any one of claims 3 to 5, wherein the acquisition (132) of the raw biometric data comprises detecting the liveness of the user.

7. The method (100) of any one of claims 3 to 6, wherein obtaining (130) the biometric data further comprises processing (133) the captured raw biometric data, wherein the processed raw biometric data corresponds to the biometric data for the data carrier (10).

8. The method (100) according to claim 7, wherein the processing (133) of the raw biometric data is performed by the reading / writing device (20).

9. The method (100) of claim 7, wherein processing (133) the raw biometric data comprises transmitting (134) the raw biometric data to a remote computing device (30) and processing (133) the raw biometric data by the remote computing device (30) to obtain the biometric data; and wherein the remote computing device (30) transmits the biometric data to the reader / S very device (20) transmits.

10. The method (100) of claim 9, wherein the data transmission between the remote computing device (30) and the read / write device (20) is encrypted.

11. The method (100) according to any one of claims 7 to 10, wherein processing (133) the raw biometric data comprises extracting (136) relevant biometric features for uniquely identifying the user from the raw biometric data and generating (137) the biometric data using the relevant biometric features, so that the biometric data can be used by the data carrier (10) to identify the user.

12. Method (100) according to one of the preceding claims, wherein the authentication (120) of the user with the issuer of the data carrier (10) takes place via a software application on the read / write device (20).

13. Method (100) according to one of the preceding claims, wherein the transmission (140) of the obtained biometric data to the data carrier (10) by means of the contactless Interface (22) of the read / write device (20) comprises a prior authentication (141) of the read / write device (20) with respect to the data carrier (10).

14. The method (100) according to any one of the preceding claims, wherein the read / write device (20) is a mobile device (20) of the user.

15. The method (100) according to any one of the preceding claims, wherein the biometric data comprises fingerprint data of the user.

Images