WO2011072717A1

WO2011072717A1 - Authorizing system, comparing device, and method for authorizing a subject

Info

Publication number: WO2011072717A1
Application number: PCT/EP2009/067162
Authority: WO
Inventors: Carlo A. Trugenberger; Albertus Geldenhuys
Original assignee: Novelty Group Limited
Priority date: 2009-12-15
Filing date: 2009-12-15
Publication date: 2011-06-23

Abstract

The invention relates to the authorization of users. The described authorizing system enables protecting access to confidential data by means of a biometric key. The authorizing system comprises: - at least one key database with a plurality of data sets, each of which comprises at least one key identifying character string and at least one set of verifying biofragment data; - an interrogating unit for receiving at least one authorization request with respect to a subject; said interrogating unit is designed to receive at least one key identifying character string and to read out at least one corresponding data set comprising the set of verifying biofragment data from the at least one key database; - a generating unit for generating several sets of pseudo-biofragment data; - a transmitting unit for transmitting the sets of pseudo-biofragment data and verifying biofragment data to a comparing device, said comparing device comparing the verifying biofragment data and the pseudo-biofragment data to reference data in order to differentiate the pseudo-biofragment data from the verifying biofragment data; - a verifying device for receiving a verification code from the comparing device, said verifying device being designed to use the verification code to deduce whether the comparing device has identified the verifying biofragment data.

Description

Authorization system, clearing facility and authorization procedure

of a subject

description

The invention relates to an authorization system for authorizing a plurality of subjects, a matching device and a method for authorizing a

Subject.

Biometric recognition methods have experienced a tremendous upswing in recent years. Technological progress increasingly allows the rapid measurement of biological characteristics and their evaluation at a reasonable cost. The use of biometrics is a promising approach to solve the problem of many security concepts. This raises the question of how to associate identities and associated rights with the right physical subject (e.g., a person). In the globalized

Information society is the solution of this problem of central importance. For example, biometric data (eg a person's fingerprint) may be stored on their ID card to ensure that the owner of the ID card is also the owner of the ID card. Biometric measurements or scans can be used to detect forgeries and misappropriation of an identity card. Biometric characteristics are often differentiated into active / passive, behavioral, physiological-based or dynamic-static. Long-term stable behavior-based characteristics include the voice, hand or signature, typing behavior and gait dynamics. Long-term stable physiological characteristics are, for example, the fingerprint, the iris or the hand geometry. As biometric characteristics for the authorization of a subject are used among other things: height, iris, retina, fingerprint,

Face geometry, hand vessel structure, hand geometry, hand line structure,

Nail bed pattern, voice, signature, typing behavior, lip movement, gait style, body odor and DNA.

A biometric recognition system for authorizing a person is known from WO 00/74001 AI. Here are biometric data on one

Identification device, such as an ID card or ID card, stored. In order to carry out the authentication of the person and thus to determine their authorization, they submit their identification device. The biometric data stored thereon is detected by a matching device and compared with the corresponding biometric characteristics of the person.

For example, a so-called live template with corresponding reference data can be generated on the basis of an iris scan and so-called comparison data compared with stored biometric data. The person is granted a certain authorization only if the geometric characteristics of the person match the stored biometric data. A disadvantage of the method described in WO 00/74001 AI is that the memory on the identification device is not conclusive against counterfeiting

is secured. Theoretically, it is possible to falsify the data in such a way that a third party can authenticate with this data.

Furthermore, for reasons of data protection law, the biometric data may not be duplicated or cached in different countries. One reason for this is that different biometric data can be used to derive information about individuals who are subject to their privacy (for example, illnesses). Also from a security point of view one would like to avoid the storage of complete biometric data, since this one

Pose a security risk. Theoretically, biometric characteristics necessary for authorization can be reconstructed and falsified, so that security barriers, e.g. mitteis a wrong fingerprint, can be bypassed.

It is known from WO 2005/064547 AI to encrypt biometric comparison data and to transmit it via a plurality of devices, e.g. a server and a

Identification device in the form of a smart card to split. An authentication takes place at a terminal, in which the person to be authenticated his smart card inserts and captures the person's biometric comparison data. It is possible for a hijacked authentication terminal to spy on people's biometric data.

From EP 1 796 018 A2 it is known to provide biometric data on the

Identification device to encrypt. Nevertheless, the above-mentioned security risk arises. Although EP 0 884 670 A1 does not deal with biometric data, it proposes to encrypt personal data and to distribute it via an information system in such a way that it is only possible to associate a person with a specific data record if appropriate

Safety information is available.

From WO 2006/111205 Al a memory system is known which secures security-relevant data on the basis of a biometric authorization. Other relevant

Information regarding biometric authentication is known from CN101330386, CN101321069, EP 1 258 840 A1, WO 03/00213 A1, WO 2008/152393 A2 and EP 1 901 194 A2.

Starting from this prior art, in particular from WO 2005/064547 AI, it is an object of the present invention to provide a safe and reliable

Authorization system provide. In particular, an authorization system is to be provided which ensures very high data protection and enables secure authentication and authorization of a subject.

Furthermore, a matching device for authorizing a subject and a corresponding method should be specified.

The object is achieved by an authorization system according to claim 1, a method according to claim 10 and an adjustment device according to claim 13.

In particular, the object is achieved by an authorization system which comprises:

- At least one key database with a plurality of data records each having at least one key identification string

and at least one set of verification biofragment data;

an inquiry unit for receiving an authorization request

relating to a subject, wherein the interrogation unit is for receiving at least one key identification string and readout

at least one corresponding record with the sentence of

Verification biofragment data is formed from the at least one key database;

a generation unit for generating a plurality of sets of

Pseudobiofragmentdaten;

a transmission unit for transmitting the sentences of

Pseudobiofragment data and verification biofragment data to a

Balancing device, wherein the balancing device the

Verification biofragment data and pseudobiofragment data with reference data compares to the pseudobiofragment data from the

To distinguish verification biofragment data;

a verification unit for receiving a verification code from

the matching device, wherein the verification unit is adapted to derive based on the verification code, if the matching device has recognized the Verificationbiofragmentdaten.

An essential point of the present invention is that the

Authorization system at any time must or can capture the full reference data of a subject. The reference data may be, for example, data created by digitally removing a fingerprint. This reference data can be detected by a matching device, the

possibly heard of the subject. Nevertheless, it is virtually impossible to

To bypass security mechanisms of the authorization system in order to gain access to security-relevant data, a building, etc. The interrogation unit thus receives, for example from the matching device, a request according to which a particular subject wishes to authorize himself for a specific procedure. The authorization system queries the key database for verification biofragment data that can be assigned to the subject based on the key identification string. For the anonymization of the verification biofragment data further pseudobiofragment data are generated. The transmission unit transmits sets of biofragment data comprising the sets of pseudobiofragment data and

Verification biofragment data, to the refection facility. This is reconstructed on the basis of the sets of biofragmentation data comparison templates and compares them with collected reference data. For example, the balancing device may have a

Include iris scanners. On the basis of the comparison, it is possible for the refractive device - if it is an authorized subject - to distinguish pseudobiofragment data from verification biofragment data. Accordingly, a response is generated for the authorization system, wherein the verification unit can determine on the basis of the answer, namely the received verification code, whether the matching device has recognized the verification biofragment data.

In one embodiment, the authorization system comprises a

Allocation unit for assigning each one index value to the

Verification biofragment data and the plurality of pseudobiofragment data, wherein the transmission unit is adapted to transmit the plurality of pseudobiofragment data and the biofragment data with the respective associated index value, the verification code including at least one index value, and the

Verification unit is adapted to determine based on the index value in the verification code, if the matching device has recognized the Verification Biofragmentdaten. The index value is thus used to identify the individual biofragment data and to capture the result of the comparisons performed by the matching devices. The received verification code may immediately contain the index value. According to the invention it is also possible to have a

Verification code that allows the verification unit to determine the specific index value.

The allocation unit may include a random number generator unit for generating random index values. The verification unit may be designed to encrypt an encrypted by means of the index value of the verification biofragment data

Decrypt data packet in the verification code. The preferably randomly generated index value that is contained in the verification code can thus be used to encrypt data packets communicated by the matching device to the authorization system. Thus, it is not necessary for the verification code to explicitly include the index value. Rather, the

Upon decryption, the verification unit will determine if the correct index value, namely the index value associated with the set of verification biofragment data, has been used. By randomly generating the index values, the

Communication between the individual components thus successfully secured. In one embodiment, the authorization system may comprise a main database of user key data encrypted by a server key string, the plurality of records in the at least one key database each including at least one server key string encrypted by the user key string, or at least one

User key string comprises encrypted server key string fragment, wherein the data packet in the verification code the

User key string contains and the verification unit for decrypting the server key string or the at least one

Server key string fragment is designed to decrypt the user data. The matching device thus transmits, in encrypted form, the user key string, which in turn can be used to decrypt server key string fragments contained in the key database (s). The server key string fragments then serve to decrypt the user data in the main database. Thus only one can

authorized user access to this user data. Even if the entire authorization system comes under third party control, the

User data can not be read out. For this purpose, it would be necessary to obtain the user key string, but preferably not in the

Authorization system is stored. Rather, the

User key string deposited on a portable identification device or the matching device.

The authorization system may include at least a first key database having a plurality of first records and a second key database having a plurality of second records, the records each having at least one key identification string and a set of

Verification biofragment data, wherein the interrogation unit is adapted to receive at least one key identification string with respect to the first and second key databases to associate corresponding data sets from the first and second key databases with each other. Preferably, verification biofragment data from the first key database and from the second key database is necessary to make a successful comparison with the reference data. The present application suggests that these verification biofragmentation data be correlated to at least two

Distribute key databases. The correlation between the individual

necessary data sets can be done only by means of the adjustment device. Thus is it is not possible to evaluate the individual verification biofragmentation data relating to a particular subject without corresponding information from the pooling facility.

The data records of the first and second key databases may each comprise at least one key string fragment, wherein the verification unit for reconstructing a server key string comprises at least one key string

Server key string fragment from the first and second

Key database is formed. Thus, not only does the present application envisage encrypting the server key string or server key string fragments, but it also splits the server key string into at least two portions, so that additional information is necessary to reconstruct the server key string for the user data.

The query unit may comprise a memory with local verification biofragment data or sets of local biofragment data and for reconstructing a comparison template from the local verification biofragment data and the

Verifikationsbiofragmentdaten the key databases to be trained.

Preferably, therefore, can not be a complete comparison template from the

Create verification biofragment data in the key databases. Thus, this data can not be used meaningfully.

The above object is also achieved by a method for authorizing a subject, the method comprising the following steps:

- receiving an authorization request relating to a subject, wherein the authorization request comprises at least one key identification string;

- querying a set of verification biofragment data associated with the at least one key identification string;

Generating sets of pseudobiofragment data;

Transmitting the sets of pseudobiofragment data and

Verification biofragment data to a matching device; Receiving a verification code from the matching device;

- Decode the verification code to see if the

Matching means the pseudobiofragment data from the

Can distinguish verification biofragment data;

Authorize the subject if the verification code indicates that the

Matching device has recognized the Verificationbiofragmentdaten or the set of Verificationbiofragmentdaten.

The process has similar advantages as those already described in connection with the authorization system.

Furthermore, the stated object is achieved by a balancing device for

Authorization of a subject against an authorization system, in particular an authorization system such as that described above, solved, wherein the

Matching device comprises:

a memory for storing at least one set of local ones

Verifikationsbiofragmentdaten;

a receive interface for receiving multiple sets of

Biofragment data comprising sets of pseudobiofragment data and further verification biofragment data;

- A reading device for detecting at least one biometric

Reference data set of the subject;

a computation unit for reconstructing a plurality of comparison templates from the set of local verification biofragment data of the memory in association with the sets of received biofragment data and for comparing the reference data set with the plurality of

Compare templates to the at least one set of others

To identify verification biofragment data; a transmit interface for transmitting a verification code indicating which of the sets of received biofragment data is the at least one set of further verification biofragment data.

The matching device may be any type of mobile computing unit that is capable of being transported by a subject. Preferably, this is a mobile phone, the matching device has a memory for

Storing at least one set of local verification biofragmentation data that is linked in an authorization process to a plurality of received biofragments or sets of biofragmentation data, so-called

Generate comparison templates. These comparison templates are compared with a reference data set, which is preferably obtained by the matching device. Thus, the matcher is able to distinguish pseudobiofragments from verification biofragments and provide a corresponding output for the authorization system. Characterized in that the adjusting device has its own reading device for detecting at least one biometric

Having a reference record, the user of the device can be sure that his full reference data does not fall into the wrong hands. Preferably, the matching device is configured so that the reference data is destroyed immediately after an authorization attempt. The privacy of the user can thus be safeguarded.

The matching device may include a memory for storing at least one of

User key string, the send interface to the

Transmission of the user key string is formed. These

User key string can be used to decrypt relevant data related to the subject. Further advantageous embodiments of the inventive matching device, the authorization system and the method described will become apparent from the dependent claims.

The invention will be described by means of several embodiments, which are explained in more detail with reference to figures. Hereby show:

Fig. 1 is an authorization system communicating with a

Authentication terminal is available;

FIG. 2 shows a matching device in the form of a mobile telephone; FIG. 3 shows a comparison template obtained from verification biofragments when compared with a live template;

Fig. 4 is a part of pseudobiofragment data

Comparison template when compared with a live template;

5 shows a data communication between the mobile telephone of FIG. 2 and the authorization system of FIG. 1.

In the following description, the same reference numerals are used for the same and like parts.

FIG. 1 shows the authorization system according to the invention, which has an authentication gateway 100. To this authentication gateway 100 are a total of three databases, namely a first key database 10, a second

Key database 20 and a main database 30 connected. The individual databases 10, 20, 30 each include tables in which several

Records of information are deposited by persons. In the described

In the exemplary embodiment, the main database 30 contains encrypted user data Data, which can each be identified via a user identification number M. The authorization system serves to protect the access to this user data Data against unwanted access by third parties. In the

Main database 30 so the user data Data are encrypted so that they can be deschlüssein only using a server key KeyS. The present application selects the term "KeyS '(Data)" for the correspondingly encrypted user data Data.

When encrypting, then:

Data ^KeyS "> KeyS '(Data)

KeyS ^"1 is chosen here so that the user data Data is as follows

can be decrypted:

KeyS '(Data) ^{Ke S} > Data

The server key KeyS, which is necessary for decrypting the data, has been divided according to the invention into two server key fragments KeyS1 and KeyS2. To decrypt the user data Data, both server key fragments are KeySl, KeyS2 necessary. For example, the server key fragments can be concatenated using the following scheme: KeySl + KeyS2 = KeyS.

The two server key fragments KeySl, KeyS2 for a particular record of the main database 30 are each separated without any

Correlation stored in the first and second key database 10, 20. In conjunction with the server key fragments KeySl, keyS2, are in the

Key databases 10, 20 each have a key database identification number ID1, ID2 and sets of verification biofragment data Imgl, Img2 stored. The first key database 10 thus contains a plurality of data records with a first key identification number ID1, first verification biofragment data Imgl and first user key fragments KeyB '(KeySl) encrypted by means of a user key KeyB. Likewise, the second key database 20 contains a plurality of data records with second key identification numbers ID2, second

Verification biofragment data Img2 and second keyB '(KeyS2) encrypted by KeyB user key. The first key database 10, the second key database 20 and the main database 30 each contain at least one record relating to the same person. However, the assignment of the individual data records to a specific person is not possible on the basis of the stored data. The authentication gateway 100 may include a

Authentication terminal 200 are communicatively connected to allow a particular person access to their user data Data.

Alternatively, corresponding authorization requests may be sent directly from a mobile phone 300 in communication with the authentication gateway 100. Communication can be wired or wireless. In this case, all known communication standards can be used, since the proposed authorization method comprises an inherent protection of the communication paths used. According to the application, the mobile telephone 300 is regarded as a matching device and, in conjunction with the authentication gateway 100, can carry out all the steps necessary to enable a person, preferably the owner of the mobile telephone 300, to access his user data Data in the main database 30 , The

Mobile telephone 300 comprises a computing unit 303, a communication unit 304 for communicating with the authentication gateway 100 and a memory 301. In this memory 301, for the user of the mobile telephone 300, the first key database identification number ID1, the second

Key database identification number ID2, the user identification number M, local verification biofragment data ImgO and the user key KeyB deposited.

If the user of the mobile telephone 300 now wants to access his user data Data in the main database 30, he executes a corresponding program on the mobile telephone 300. The mobile 300 transmits an authorization request to the authentication gateway 100, which is the first

Key database identification number ID1 and the second one

Key database ID number ID2 contains. The authentication gateway 100 receives this authorization request by means of a query unit 101 (see Fig. 5) and reads out the associated sets of verification biofragment data Imgl, Img2 from the key database identification numbers ID1, ID2. A generation unit 103 in the authentication gateway 100 then generates a plurality of sets of dummy bio-fragment data Imgl, Img2. In the present embodiment, n-1 pairs of pseudobiofragment data are generated and each provided with an index value i to R _t- i, R _{t +} i to R _n . The

Verification biofragment data Imgl, Img2 from the key databases 10, 20 is assigned the index value R _t . A transmission unit 105 transmits the n pairs of biofragment data (pseudobiofragment data and verification biofragment data) together with the assigned index values R to R _n to the mobile telephone 300. The assignment of the biofragment data or biofragment data sets to the index values Ri to R _n occurs at random. The mobile telephone 300 uses the transmitted data to reconstruct a multiplicity of comparison rates, wherein each of the comparison templates can be assigned to one of the index values i to R _n . In the Figs. 3 and 4 corresponding comparison templates are exemplified. Thus, as shown in Fig. 4, the comparison template having the index value Ri is set from the received sets of pseudobiofragment data Imgl ', Img2' and the local set of

Verification biofragment data Img0 from the memory 301 together. Accordingly, the Vergfeichstemplate sets with respect to the index value R _t from the transmitted verification biofragment data Imgl, Img2 and the local

Verification biofragment data ImgO together. The comparison templates may be, for example, images of a fingerprint of the user of the mobile phone 300. It should be apparent to those skilled in the art that the individual biofragment data is not in the manner shown in Figs. 3 and 4, to a

Comparison template must be merged. Preferably, the

Information of the resulting comparison templates so encoded in the biofragment data that individual biofragment data no relevant information regarding the Deploy user. For example, the verification biofragment data Img0, Imgl, Img2 and the correspondingly formed

Pseudobiofragment data Imgl ', Img2' Raster graphics with 100 x 100 pixels. A comparison template can be obtained, for example, by XORing the local verification biofragment data ImgO with the received ones

Verification Biofragment Data Imgl, Img2 Generate. Thus, the individual data are useless without the corresponding corresponding data. After reconstructing the n comparison templates, the mobile phone 300 prompts the user to place an index finger on a reading device provided for this purpose on the mobile telephone 300. The mobile telephone 300 reads in the corresponding biometric data and generates a reference data record in the form of a live template Temp. The live template Temp is compared with each of the comparison templates. The mobile phone is able to distinguish between comparison templates generated from pseudobiofragment data Imgl ', Img2' and true comparison templates generated from the transmitted verification biofragmentation data Imgl, Img2. The mobile phone 300 thus determines that the comparison template associated with the index value R _t is the "true" ^* comparison template.

The mobile phone 300 uses the index value R _t to encrypt the user key KeyB. The mobile telephone 300 transmits the encrypted user key KeyB to a verification unit 110 of the authentication gateway 100. The verification unit 110 has identified the index value R _t as the index value containing the

Vergrbi, Img2 has been assigned, and therefore can decrypt the user key KeyB. Thus, it is possible for the verification unit 110 alone on the basis of the encrypted user key KeyB to determine whether the mobile phone 300 has recognized the Verification Biofragmente Imgl, Img2. Successful authorization is only possible if the user key KeyB can be decrypted correctly. In addition, the index value R _{t may be included} as an acknowledgment in the verification code.

The verification unit 110 unpacks the user key KeyB and reads out the values KeyB '(KeySl), KeyB' (KeyS2) from the key databases 20 and decrypts the server key fragments KeyS1, KeyS2 by means of the user key KeyB. The server key fragment KeySl, KeyS2 is used to reconstruct the KeyS server key. Upon request or as part of the verification code, the

Verification unit 110, the user identification number M and can read from the main database 30, the encrypted user data KeyS '(Data) and decrypt. Thus, the authentication gateway 100 obtains access to the user data Data. These can now be forwarded to the mobile phone 300.

An exemplary embodiment was described above in which the authorization system according to the invention was used to secure access to specific data, namely the user data Data. It should be readily apparent to those skilled in the art that the described mechanism can also be used to allow a particular user access to a building or machine. Furthermore, the mechanism described may be used to authenticate the user. The mobile phone 300 described can thus serve as a kind of identification device.

An embodiment has been described above in which the user key KeyB is stored in the memory 301 of the mobile telephony. It is conceivable, as

User key to use the "real" comparison template or a record created therefrom by a given mapping (e.g., a hash function).

In the embodiment described above, the mobile phone 300 communicates directly with the authentication gateway 100. However, it is also possible that the mobile phone 300 communicates with an authentication terminal 200. Furthermore, the authentication terminal 200 may have additional functions

take. For example, it may function as a kind of matching device, with the data stored on the mobile phone 300 in the previously described embodiment being read in via a smart card. Thus, the authentication terminal 200 may be used as a reading device for multiple people

Capture the reference data serve. It is conceivable that that

Authentication terminal 200 is part of the mobile 300

performed steps or all steps. According to the invention, an identification device can be equipped with an integrated circuit, so that at least part of the above-mentioned steps on the

Identification device of the user and not on the public access authentication terminal 200 are performed.

In the exemplary embodiment described above, the biofragment data Img0, Imgl, Img2 necessary for the reconstruction of a comparison template are over three Memory, namely key databases 10, 20 and the memory 301, distributed. It is conceivable to make only a division into two parts at this point.

Of course, it is also readily possible to generate a much larger number of VerifiI biofragments ImgO, Imgl, Img2 and more

Distribute databases and storage. At this point it should also be noted that only to clarify the invention, a distinction was made in different databases. Theoretically, it is possible to store all relevant tables for the invention, namely the tables from the key databases 10, 20 and the main database 30 on a database system.

Of course, a geographical distribution of the individual data is to be preferred, since the access to the individual data sets is thereby made more difficult.

Theoretically, it is also possible to convert the reference data into several

Divide Verification Biofragment Records, with only one

Subset of these Verification Biofragment data sets is necessary to support the

To reconstruct reference data. Thus, it would be possible to provide some redundancy that allows successful authorization even if only a subset of the key databases 10, 20 are available.

Furthermore, it is also theoretically possible to distribute the user data Data across multiple tables or databases and to set up multiple server key fragments KeySl, KeyS2, each with a subset of the

Server key fragment KeySl, KeyS2 is necessary to query individual user data Data from the multiple main databases 30.

In the described embodiment, characteristic data for the

Verification biofragment data ImgO, Imgl, Img2 from a figure of a

Fingerprint won. It should be apparent to those skilled in the art that the said method is applicable to any type of biometric characteristics (e.g., iris, retina, facial geometry, hand vessel structure, hand geometry, hand line structure). Here it is not absolutely necessary is imaging

Apply methods to generate the verification biofragment data ImgO, Imgl, Img2 or the reference data. Rather, the verification biofragment data ImgO, Imgl, Img2 or the data underlying these data sets and the reference data can be arbitrarily configured and obtained data sets that reliably describe suitable biometric characteristics. LIST OF REFERENCE NUMBERS

10 key database

20 key database

30 main database

100 authentication gateway

101 query unit

103 generation unit

105 Transmission unit

110 verification unit

200 authentication terminal

300 mobile phone

301 memory

303 arithmetic unit

304 communication unit

ID1 key database identification number

ID2 key database identification number

M user identification number

ImgO, Imgl, Img2 Verification Biofragment Data

Imgl ', Img2' Pseudobiofragment data

KeyB user key

KeyS server key

KeySl, KeyS2 server key fragment

Data user data

Temp Live Template

Ri to R _n index value

Claims

Authorization system, matching device and method for authorizing a subject

claims

1. Authorization system comprising:

- At least one key database (10, 20) with a plurality of

Data records each having at least one key identification string (ID1, ID2) and at least one set of verification biofragment data (Imgl, Img2);

an interrogation unit (101) for receiving an authorization request relating to a subject, the interrogation unit for receiving

at least one key identification string (ID1, ID2) and reading at least one corresponding record with the set of

Verification biofragment data (Imgl ', Img2') from the at least one key database (10, 20) is formed;

a generation unit (103) for generating a plurality of sets of dummy bio-fragment data (Imgl ', Img2');

a transmission unit (105) for transmitting the sentences of

Pseudobiofragment data (Imgl ', Img2') and verification biofragment data (Imgl, Img2) to a trimming device, the trimming device comparing the verification biofragment data (Imgl, Img2) and pseudobiofragment data (Imgl ', Img2') with reference data (Temp) to obtain the pseudobiofragment data (Img ', Img2') from the verification biofragment data (Imgl, Img2); a verification unit (110) for receiving a verification code from the matching device, wherein the verification unit is designed to derive from the verification code whether the matching device has recognized the verification biofragment data (Imgl, Img2).

2. Authorization system according to claim 1,

marked by

an association unit for associating each of an index value (Ri - R _n) to each of a set of Verifikationsbiofragmentdaten (Imgl, Img2) and Pseudobiofragmentdaten (Imgl ^1, Img2 '),

the transmission unit (105) transmitting the sentences of

Pseudobiofragmentdaten (Imgl ', Img2') and Verifikationsbiofragmentdaten (Imgl, Img2) with the respective index values (Ri - R _n ) is formed, wherein the verification code contains at least one index value (Ri - R _n ) and the Verification unit (110) is designed , based on the index value (Ri - R _n) to determine the verification code that the matching means has recognized the verification ^¬ biofragmentdaten (Imgl, Img2).

3. Authorization system according to claim 1 or 2, in particular according to claim 2, characterized in that I n et

the allocation unit sgeneratoreinheit a Zufal to generate random index values (Ri - R _s)! includes.

4. Authorization system according to one of the preceding claims, in particular according to claim 2 or 3,

d a d e rch eken nze i ch n et that

the verification unit (110) is adapted to a means of the index value (Ri - R _n) of the set of Verifikationsbiofragmentdaten (Imgl, Img2)

decrypt encrypted data packet in the verification code.

5. Authorization system according to one of the preceding claims, in particular according to claim 4,

marked by

a main database (30) with user data (Data) of the subject encrypted by means of a server key string (KeyS),

wherein the plurality of data records in the at least one key database (10, 20) each have at least one by means of user key character string (KeyB) encrypted server key string (KeyS) or at least one encrypted by user key string (KeyB) server key character chain fragment (KeySl, KeyS2), wherein the data packet in the verification code contains the user key string (KeyB) and the verification unit (110) for decrypting the server key string (KeyS) or the at least one server key string fragment (KeySl, KeyS2) is adapted to decrypt the user data (Data).

6. Authorization system according to one of the preceding claims,

marked by

at least one first key database (10, 20) having a plurality of first data records and a second key database (10, 20) having a plurality of second data records, the data records each having at least one key identification string (ID1, ID2) and a set of verification biofrag wherein the interrogation unit is designed to receive at least one key identification string (ID1, ID2) with respect to the first and second key databases (10, 20) in order to obtain corresponding data sets from the first and second key databases (10, 10). 20) with each other.

7. Authorization system according to one of the preceding claims, in particular according to claim 6,

I do not mean that

the data records of the first and the second key database (10, 20) each comprise at least one server key string fragment (KeySl, KeyS2), the verification unit (110) for reconstructing a server key string (KeyS) from at least one server key string fragment (KeySl, KeyS2) from the first and second key database (10, 20) is formed.

8. Authorization system according to one of the preceding claims,

d e r e g e n d e n c t e s that

the query unit comprises a memory for storing at least one set of local verification biofragment data (ImgO) and for reconstructing a comparison template from the set of local verification biofragment data (ImgO) and the set of received verification biofragment data. fragment data (Imgl, Img2) is formed.

Authorization system according to one of the preceding claims,

d a d u rc h e n c i n e s that

the query unit comprises a memory with user key string (KeyB).

A method of authorizing a subject comprising the steps of:

- receiving an authorization request relating to a subject, wherein the authorization request comprises at least one key identification string (ID1, ID2);

Querying at least one of the at least one key identification string (ID1, ID2) associated with

Verification biofragment data (Imgl, Img2);

Generate multiple sets of pseudobiofragment data (Imgl ',

Img2 ');

Transmitting the sets of pseudobiofragment data (Imgl ¹ , Img2 ') and

Verification biofragment data (Imgl, Img2) to a matcher;

Receiving a verification code from the matching device;

Decoding the verification code to determine if the matching device can distinguish the sets of dummy bio-fragment data (Imgl ¹ , Img2 ') from the set of verification biofragment data (Imgl, Img2);

Authorize the subject if the verification code indicates that the

Matching device has recognized the set of verification biofragment data (Imgl, Img2).

Method according to claim 10,

marked by

associating each of an index value (Ri - R _n) to each of a set of Verifikationsbiofragmentdaten (Imgl, Img2) and Pseudobiofragmentdaten (Img l ', Img2'), wherein the transmission of the sets of pseudobiofragment data (Img l ¹ , Img2 ') and verification biofragment data (Img l, Img2) involves transmitting the sets of pseudobiofragment data (Img l ¹ , Img2') and verification biofragment data (Img , Img2) with the associated index values (Ri - R _n ),

wherein said decoding of the verification codes unpacking a means of the index value (Ri - R _n) of the Verifikationsbiofragmentdaten (Img l, Img2)

encrypted data packet.

12. The method according to any one of claims 10 or 11,

d a d u r c h e c e n c i n e s that

receive at least two key identification strings (ID1, ID2),

at least two sets of verification biofragment data (Img l, Img2) associated with, by means of a user key string (KeyB)

queried and encrypted server key string fragments (KeySl, KeyS2)

- decrypted from the data packet containing the user key string (KeyB) to decrypt user data (Data) using the server key string fragments (KeySl, KeyS2) and authorize access to the user data (Data).

13. Matching device for authorizing a subject to a

Authorization system, in particular an authorization system according to any one of claims 1-9, comprising:

a memory for storing at least one set of local ones

Verification Biofragment Data (ImgO);

a receiving interface for receiving a plurality of sets of

Biofragmentdaten,

comprising sets of pseudobiofragment data (Imgl ¹ , Img2 ') and at least one set of further verification biofragment data (Img l, Img2); - A reading device for detecting at least one biometric

Reference data set of the subject;

an arithmetic unit for reconstructing a multiplicity of comparison templates from the set of local verification biofragment data (ImgO) of the memory in connection with the received sets of biofragment data and for comparing the reference data set with the plurality of comparison templates in order to obtain the at least one set of further verification biofragment data (Imgl, Img2) to identify;

a transmit interface for transmitting a verification code indicating which set of received biofragment data is the at least one further set of verification biofragment data (Imgl, Img2).

14. balancing device according to claim 13,

marked by

a memory for storing at least one user key string (KeyB), wherein the transmitting interface is adapted to transmit the user key string (KeyB).

15. Matching device according to claim 13 or 14,

d et al g eken n et ch n et et that

the reception interface, the sets of Biofragmentdaten with associated index values (Ri, R _t) and to the computing unit is adapted to assign to each compared template the associated index value (Ri, R _t), the user key string (KeyB) by means of the set (of further Verifikationsbiofragmentdaten Imgl Encrypt the index value (Ri, R _t ) associated with Img2) and transmit it as at least part of the verification code.

16. balancing device according to one of claims 13 to 15,

there are signs that that

the matching device is designed to have a plurality of sets of others

To receive verification biofragment data (Imgl, Img2) and to reconstruct the multiplicity of comparison templates from these. Adjusting device according to one of claims 13 to 16, I think I n et - du rch

a camera or scanner for capturing at least one biometric reference data set of the subject.