Systems and methods for upgrading authentication systems

• US 10,021,097 B1
• Filed: 03/13/2017
• Issued: 07/10/2018
• Est. Priority Date: 06/18/2014
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Mortensen, Maland Keith
• Primary Examiner(s): Giddins, Nelson
• Application Number:
  US15/457,764
• Time in Patent Office: 484 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

Methods and systems for authenticating a user are described. In some embodiments, an authentication request including biometric information collected from a user is received. The user may be authenticated using a first authentication system by comparing characteristics generated from the biometric information with characteristics of previously collected biometric information. The biometric information collected from the user during the authentication request may be used to automatically enroll the user into a second authentication system.

Claims

1. A method comprising:

receiving, at an authentication engine, biometric information in connection with an authentication request from a user;

authenticating, by a first authentication system, the user by comparing characteristics generated from the biometric information received in connection with the authentication request with characteristics generated from previously collected biometric information, the characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

automatically enrolling the user into a second authentication system using the biometric information received in connection with the authentication request by deriving characteristics of the biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user;

deleting the biometric information received in connection with the authentication request after the characteristics of the biometric information are derived using the second authentication system; and

running the first authentication system in parallel with the second authentication system until a criteria is met, wherein the second authentication system is a replacement authentication system.

2. The method of claim 1, further comprising determining whether to authenticate the user using the first authentication system or the second authentication system.

3. The method of claim 1, wherein the biometric information received in connection with the authentication request includes an image of the user.

4. The method of claim 3, wherein the first authentication system and the second authentication system use different biometric information to authenticate the user.

5. The method of claim 1, wherein the first authentication system uses a first biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information, wherein the second authentication system uses a second biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information.

6. The method of claim 5, wherein the first biometric algorithm and the second biometric algorithm are incompatible.

7. The method of claim 1, wherein authenticating the user to the first authentication system includes comparing the characteristics from the biometric information in connection with the authentication request with the characteristics from the previously collected biometric information.

8. The method of claim 7, wherein the biometric information received in connection with the authentication request is enrollment information for the second authentication system, wherein the method further comprises authenticating the user with the second authentication system by comparing characteristics generated from the enrollment information with characteristics received in connection with a second authentication request.

9. A non-transitory computer-readable storage medium containing a set of instructions that, when executed by one or more processors, cause a machine to:

receive, at an authentication engine, biometric information in connection with an authentication request from a user;

authenticate, by a first authentication system, the user by comparing characteristics generated from the biometric information received in connection with the authentication request with characteristics generated from previously collected biometric information, the characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

automatically enroll the user into a second authentication system using the biometric information received in connection with the authentication request by deriving characteristics of the biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user;

delete the biometric information received in connection with the authentication request after the characteristics of the biometric information are derived using the second authentication system; and

run the first authentication system in parallel with the second authentication system until a criteria is met, wherein the second authentication system is a replacement authentication system.

10. The non-transitory computer-readable storage medium of claim 9, wherein the first authentication system and the second authentication system use different biometric information to authenticate the user.

11. The non-transitory computer-readable storage medium of claim 9, wherein the biometric information received in connection with the authentication request includes an image of the user.

12. The non-transitory computer-readable storage medium of claim 9, wherein the first authentication system uses a first biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information, wherein the second authentication system uses a second biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information.

13. The non-transitory computer-readable storage medium of claim 12, wherein the first biometric algorithm and the second biometric algorithm are incompatible.

14. The non-transitory computer-readable storage medium of claim 9, wherein the set of instructions that when executed by the one or more processors cause the machine to authenticate the user to the first authentication system further cause the machine to compare the characteristics from the biometric information in connection with the authentication request with the characteristics from the previously collected biometric information.

15. The non-transitory computer-readable storage medium of claim 14, wherein the biometric information received in connection with the authentication request is enrollment information for the second authentication system, wherein the set of instructions, when executed by the one or more processors, further cause the machine to authenticate the user with the second authentication system by comparing characteristics generated from the enrollment information with characteristics received in connection with a second authentication request.

16. The non-transitory computer-readable storage medium of claim 9, wherein the user is enrolled in the second authentication system without storing the biometric information received in connection with the authentication request for more than a transient time period.

17. A system, comprising:

one or more processors; and

a non-transitory computer readable storage medium having instructions stored thereon, which when executed by the one or more processors cause the system to;

receive, at an authentication engine, biometric information in connection with an authentication request from a user;

authenticate, by a first authentication system, the user by comparing characteristics generated from the biometric information received in connection with the authentication request with characteristics generated from previously collected biometric information, the characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

automatically enroll the user into a second authentication system using the biometric information received in connection with the authentication request by deriving characteristics of the biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user;

delete the biometric information received in connection with the authentication request after the characteristics of the biometric information are derived using the second authentication system; and

run the first authentication system in parallel with the second authentication system until a criteria is met, wherein the second authentication system is a replacement authentication system.

18. The system of claim 17, wherein the user is enrolled in the second authentication system without storing the biometric information received in connection with the authentication request for more than a transient time period.

19. The system of claim 17, wherein the first authentication system uses a first biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information, wherein the second authentication system uses a second biometric algorithm to generate the characteristics of the biometric information received in connection with the authentication request and the previously collected biometric information, wherein the first biometric algorithm and the second biometric algorithm are incompatible.

20. The system of claim 17, wherein the first authentication system and the second authentication system use different biometric information to authenticate the user.