Verification application, method, electronic device and computer program

Abstract

There is a verification application arranged to interact with other applications on an electronic device, the electronic device having a processor, a memory and an operating system controlling operation of the verification application and the other applications on the processor using arbitrary memory locations, where the other applications are enabled to call the verification application to securely determine authenticity of a user of the electronic device. The verification application is arranged to receive verification data for secure determination of authenticity of the user; and provide, upon a call from any of the other applications and a match between the verification data and a verification reference, a trust token to the calling application. A method, electronic device and computer program are also disclosed.

What is claimed is: 
     
         1 . A verification application arranged to interact with other applications on an electronic device, the electronic device having a processor, a memory and an operating system configured to control operation of the verification application and the other applications on the processor using arbitrary memory locations, where the other applications are enabled to call the verification application to securely determine authenticity of a user of the electronic device, wherein the verification application is further arranged to:
 receive verification data for secure determination of authenticity of the user;   provide, upon a call from any of the other applications and a match between the verification data and a verification reference, a trust token to the calling application, wherein the verification data comprises a biometric sample and the verification reference comprises a biometric reference; and   pair with at least one of the other applications, wherein the provision of the trust token is only provided when the verification application and the one of the other applications providing a call to the verification application are properly paired.   
     
     
         2 . The verification application of  claim 1 , wherein the verification application is arranged to be paired with at least one of the other applications by mutually exchanging at least one of
 an application signature;   a cryptographic key or keys;   a password; and   a shared secret.   
     
     
         3 . The verification application of  claim 1 , wherein parameters for generation of the trust token, upon installation of the verification application on the electronic device, are set and the verification reference is enrolled. 
     
     
         4 . The verification application of  claim 1 , wherein the call from the one of the other applications includes an indicator on a degree of required certainty in the match; and
 wherein the match between the verification data and the verification reference is considered present if an estimated false acceptance rate by a matching mechanism of the verification application is less than the degree of required certainty in the match.   
     
     
         5 . The verification application of  claim 4 , wherein the trust token includes or is accompanied by an authenticity indicator; and
 wherein the authenticity indicator is based on the estimated false acceptance rate by the matching mechanism.   
     
     
         6 . The verification application of  claim 1 , further arranged to provide an indicator on broken or no trust if:
 a degree of required certainty in the authentication for the match between the received verification data and the verification reference is reset to a lower certainty level than before the reset;   the calling application is not properly paired with the verification application; or   a combination thereof.   
     
     
         7 . The verification application of  claim 1 , wherein to receive verification data comprises to receive a biometric sample, the verification reference is a biometric reference and the match between the verification data and the verification reference is performed by a biometric matching mechanism of the verification application; and
 wherein the biometric matching mechanism is arranged to match the biometric sample to the biometric reference.   
     
     
         8 . A method of a verification application arranged to interact with other applications on an electronic device, the electronic device having a processor, a memory and an operating system controlling operation of the verification application and the other applications on the processor using arbitrary memory locations, the method comprising:
 receiving a call, to the verification application from one of the other applications, to securely determine authenticity of a user of the electronic device;   receiving verification data;   authenticating the verification data by matching to a verification reference stored by the verification application;   providing, upon a match between the verification data and the verification reference, a trust token to the calling application; and   pairing the verification application with at least one of the other applications;   wherein the verification data comprises a biometric sample and the verification reference comprises a biometric reference; and   wherein the providing of the trust token is only performed when the verification application and the one of the other applications providing a call to the verification application are properly paired.   
     
     
         9 . The method of  claim 8 , further comprising pairing the verification application with at least one of the other applications by mutually exchanging at least one of:
 an application signature;   a cryptographic key; and   a password.   
     
     
         10 . The method of  claim 8 , further comprising providing an indicator on broken or no trust if:
 the degree of required certainty in the authentication for the match between the received verification data and the verification reference is reset to a lower certainty level;   the calling application is not properly paired with the verification application; or   a combination thereof.   
     
     
         11 . The method of  claim 8 , further comprising, upon installation of the verification application on the electronic device:
 setting parameters for generation of the trust token; and   enrolling the verification reference.   
     
     
         12 . The method of  claim 8 , wherein the call from the one of the other applications includes an indicator on a degree of required certainty in the matching; and
 wherein the match between the verification data and the verification reference is considered present if an estimated false acceptance rate by the matching is less than the degree of required certainty.   
     
     
         13 . The method of  claim 12 , wherein the trust token includes or is accompanied by an authenticity indicator; and
 wherein the authenticity indicator is based on the estimated false acceptance rate by the matching.   
     
     
         14 . The method of  claim 8 , wherein the receiving of verification data comprises receiving a biometric sample, the verification reference is a biometric reference and the matching between the verification data and the verification reference is performed by biometric matching of the biometric sample to the biometric reference. 
     
     
         15 . A non-transitory computer-readable storage medium having stored thereon a computer program comprising computer executable instructions which when executed by a processor of an electronic device comprising the processor, a memory and an operating system controlling operation of applications on the processor using arbitrary memory locations, wherein the computer executable instruction causes the processor to perform the method of  claim 8 . 
     
     
         16 . An electronic device having a processor, a memory and an operating system, comprising a verification application according to  claim 1 , at least one other application enabled to call the verification application to securely determine authenticity of a user of the electronic device, and a verification data input arranged to provide verification data to the verification application, wherein the operating system is arranged to control operation of the verification application and the other applications on the processor using arbitrary memory locations.