Biometric chain of provenance

• US 10,055,733 B2
• Filed: 10/21/2015
• Issued: 08/21/2018
• Est. Priority Date: 04/19/2011
• Status: Active Grant

• Current Assignee: EyeLock LLC (VOXX International Corporation)
• Original Assignee: EyeLock LLC (VOXX International Corporation)
• Inventors: Hanna, Keith J.
• Primary Examiner(s): Holloway, III, Edwin
• Application Number:
  US14/919,323
• Publication Number:
  US 20160104165A1
• Time in Patent Office: 1,035 Days
• Field of Search: 340 552, 340 582
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

The present disclosure is directed towards methods and systems for ensuring integrity of biometric data for one or more transactions. A mobile biometric device may acquire biometric information of an individual. A ranging module of a transaction device may determine that a distance between the mobile biometric device and a physical location of a first transaction with the individual is within a predefined value. The transaction device may link, responsive to the determination, the acquired biometric information to the first transaction if the biometric information is acquired within a specific time limit from the distance determination. The transaction device may link the acquired biometric information to a universal biometric record of the individual. A biometric integrity engine may compare information from the first transaction and a second transaction for inconsistency or fraud.

Claims

1. A method for vehicular, indoors or outdoors access control, the method comprising:

receiving, via a mobile device, a user credential for use in performing access control;

communicating a first signal between the mobile device and an audio unit of an access control device, the first signal comprising an audio signal;

using the audio signal to determine a distance of the mobile device from the audio unit, and to distinguish the mobile device from another mobile device within an operating range of the access control device; and

using the received user credential or an authentication result from the received user credential to perform the access control, responsive to the determined distance being within a predetermined range and responsive to the determination of the distance being performed within a predetermined time from receiving the user credential.

2. The method of claim 1, wherein receiving the user credential comprises receiving user biometric information via the mobile device.

3. The method of claim 1, further comprising performing authentication using the received user credential.

4. The method of claim 1, wherein at least one of the receiving and the communicating steps occur while the mobile device is moving relative to the audio unit of the access control device.

5. The method of claim 1, further comprising communicating a second signal comprising a second audio signal between the mobile device and the audio unit in a return path relative to the first signal, responsive to the first signal being communicated between the mobile device and the audio unit.

6. The method of claim 5, further comprising determining the distance using a time of flight of the first and second signals being communicated between the mobile device and the audio unit.

7. The method of claim 1, further comprising communicating, at a same time as the first signal, a second signal comprising a radio frequency signal between the mobile device and the audio unit, and using a difference in arrival times of the first and the second signals at the audio unit to determine the distance.

8. The method of claim 1, wherein communicating the first signal comprises communicating the first signal from the mobile device to a plurality of audio units of the access control device, the plurality of audio units each disposed at a different location.

9. The method of claim 1, further comprising detecting that a user of the mobile device is in physical contact with the mobile device between a time at which the user credential was received by the mobile device and a time at which the distance was determined.

10. The method of claim 1, wherein communicating the first signal comprises communicating an ultrasonic audio signal between the mobile device and the audio unit.

11. A system for vehicular, indoors or outdoors access control, the system comprising:

an access control server comprising at least one processor, the access control server configured to;

receive, via a mobile device, a user credential for use in performing access control, wherein a first signal is communicated between the mobile device and an audio unit of an access control device, the first signal comprising an audio signal;

use the audio signal to determine a distance of the mobile device from the audio unit, and to distinguish the mobile device from another mobile device within an operating range of the access control device; and

use the received user credential or an authentication result from the received user credential to perform the access control, responsive to the determined distance being within a predetermined range and responsive to the determination of the distance being performed within a predetermined time from receiving the user credential.

12. The system of claim 11, wherein the user credential comprises user biometric information.

13. The system of claim 11, wherein the access control server is configured to perform authentication using the received user credential.

14. The system of claim 11, wherein at least one of the receiving of the user credential and the communicating of the first signal occur while the mobile device is moving relative to the audio unit of the access control device.

15. The system of claim 11, wherein the access control server is further configured to communicate a second signal comprising a second audio signal between the mobile device and the audio unit in a return path relative to the first signal, responsive to the first signal being communicated between the mobile device and the audio unit.

16. The system of claim 15, wherein the access control server is configured to determine the distance using a time of flight corresponding to the first signal and the second signal being communicated between the mobile device and the audio unit.

17. The system of claim 11, wherein a second signal comprising a radio frequency signal is communicated between the mobile device and the audio unit at a same time as the first signal, and the access control server is configured to use a difference in arrival times of the first and the second signals at the audio unit to determine the distance.

18. The system of claim 11, wherein the access control server is configured to communicate the first signal from the mobile device to a plurality of audio units of the access control device, the plurality of audio units each disposed at a different location.

19. The system of claim 11, wherein the access control server is configured to use the received user credential or an authentication result from the received user credential to perform the access control, responsive to a detection that a user of the mobile device is in physical contact with the mobile device between a time at which the user credential was received by the mobile device and a time at which the distance was determined.

20. The system of claim 11, wherein the first signal comprises an ultrasonic audio signal.