US 11,855,983 B1
Biometric electronic signature authenticated key exchange token
Phillip H. Griffin, Raleigh, NC (US); and Jeffrey J. Stapleton, O'Fallon, MO (US)
Assigned to Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed by Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed on Aug. 1, 2022, as Appl. No. 17/878,713.
Application 17/878,713 is a continuation of application No. 16/509,905, filed on Jul. 12, 2019, granted, now 11,405,387.
Application 16/509,905 is a continuation of application No. 15/623,213, filed on Jun. 14, 2017, granted, now 10,469,487.
Application 15/623,213 is a continuation in part of application No. 15/169,312, filed on May 31, 2016, granted, now 10,154,029.
Claims priority of provisional application 62/439,587, filed on Dec. 28, 2016.
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0861 (2013.01) [H04L 9/3242 (2013.01); H04L 9/3247 (2013.01); H04L 63/061 (2013.01); H04L 63/083 (2013.01); H04L 63/0807 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for verifying a biometric electronic signature authenticated key exchange (“BESAKE”) token comprising:
a storage location comprising a plurality of biometric reference templates;
a second storage location comprising a secret knowledge factor;
an authentication computing system, comprising a processor and instructions stored in non-transitory machine-readable media, the instructions configured to cause the authentication computing system to:
receive a signing party identifier and the BESAKE token from a signing party, the BESAKE token comprising a biometric sample encrypted using an encryption key;
retrieve a stored knowledge factor associated with the signing party identifier from the secret knowledge factor of the second storage location;
generate a decryption key using the stored knowledge factor as an input to a password authenticated key exchange protocol;
decrypt the encrypted biometric sample from the BESAKE token using the decryption key to retrieve the biometric sample;
match the biometric sample with a biometric reference template associated with the signing party identifier;
transmit to a biometric service provider computing system, a match request, the match request including the signing party identifier and the biometric sample; and
determine a signing party identity via a binary match value, the binary match value relating to a result, determined by the biometric service provider computing system, of matching the biometric sample with the biometric reference template associated with the signing party identifier.