Personal digital identity card device for fingerprint bound asymmetric crypto to access merchant cloud services

• US 10,211,988 B2
• Filed: 02/23/2018
• Issued: 02/19/2019
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Sideassure Incorporated
• Original Assignee: Tyfone Incorporated
• Inventors: Narendra, Siva G., Tadepalli, Prabhakar, Chakraborty, Saurav, Bloodworth, Donald Allen
• Primary Examiner(s): Htun, San
• Application Number:
  US15/903,935
• Publication Number:
  US 20180183598A1
• Time in Patent Office: 361 Days
• CPC Class Codes: H04B 5/00 Near-field transmission systems, e.g. inductive or capacitive transmission systems
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/009 specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A personal digital ID device provides a digital identifier to a service for a predetermined duration in response to user interaction. The user interaction may include a button press. The personal digital ID device may be in the form of a bracelet, a key fob, or other form factor. The service may be provided by a mobile device, in the cloud, or elsewhere.

Claims

1. A personal digital ID device comprising:

a crypto/cipher engine having at least one digital identifier including one or more asymmetric crypto keys for challenge-response;

a button accessible to a user of the personal digital ID device;

a fingerprint sensor positioned on a surface of the button to allow for fingerprint scanning when the user interacts with the button;

a radio; and

a processor coupled to the crypto/cipher engine, the button, the fingerprint sensor, and the radio, the processor configured to validate a user through a fingerprint scan and to make the one or more asymmetric crypto keys for challenge-response available to perform authentication with a merchant cloud service through a mobile device by powering the radio for a predetermined duration in response to a validated user interacting with the button.

2. The personal digital ID device of claim 1 wherein the crypto/cipher engine comprises a smartcard controller.

3. The personal digital ID device of claim 1 wherein the crypto/cipher engine comprises a plurality of smartcard secure elements.

4. The personal digital ID device of claim 1 wherein the crypto/cipher engine is user-removable from the personal digital ID device.

5. The personal digital ID device of claim 4 wherein the crypto/cipher engine resides on a subscriber identity module (SIM) card.

6. The personal digital ID device of claim 1 wherein the radio comprises a near-field radio.

7. The personal digital ID device of claim 6 wherein the near-field radio comprises a ISO 14443 compatible radio.

8. The personal digital ID device of claim 6 wherein the near-field radio comprises a ISO 18092 compatible radio.

9. The personal digital ID device of claim 1 wherein the radio comprises a non-near-field radio.

10. The personal digital ID device of claim 9 wherein the non-near-field radio comprises a Bluetooth radio.

11. The personal digital ID device of claim 1 wherein the radio comprises a near-field radio and a non-near-field radio.

12. The personal digital ID device of claim 1 further comprising a flexible housing to allow the personal digital ID device to be a card.

13. The personal digital ID device of claim 8 wherein the flexible housing to allow the personal digital ID device to be a card.

14. A card comprising:

a housing;

a crypto/cipher engine having at least one digital identifier including one or more asymmetric crypto keys for challenge-response;

a button accessible to a user of the personal digital ID device;

a fingerprint sensor positioned on a surface of the button to allow for fingerprint scanning when the user interacts with the button;

a radio;

a processor coupled to the crypto/cipher engine, the button, the fingerprint sensor, and the radio, the processor configured to validate a user through a fingerprint scan and to make the one or more asymmetric crypto keys for challenge-response available for a predetermined duration to perform authentication with a merchant cloud service through a mobile device by powering the radio in response to a validated user interacting with the button.

15. The card of claim 14 wherein the crypto/cipher engine comprises a smartcard secure element.

16. The card of claim 14 wherein the radio comprises a near-field radio.

17. The card of claim 14 wherein the radio comprises a non-near-field radio.

18. The card of claim 14 wherein the radio comprises a near-field radio.

19. The card of claim 18 wherein the near-field radio comprises a ISO 14443 compatible radio.

20. The card of claim 14 wherein the radio comprises a non-near-field radio.