System and method for selectively initiating biometric authentication for enhanced security of access control transactions

• US 10,229,408 B2
• Filed: 03/20/2015
• Issued: 03/12/2019
• Est. Priority Date: 01/14/2015
• Status: Active Grant

• Current Assignee: Tactilis Pte. Limited
• Original Assignee: Tactilis Pte. Limited
• Inventors: Gardiner, Michael, Canzi, Adriano
• Primary Examiner(s): Rashid, Harunur
• Application Number:
  US14/664,573
• Publication Number:
  US 20160277396A1
• Time in Patent Office: 1,453 Days
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06V 10/95 structured as a network, e.g. client-server architectures
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A method and system of selectively initiating biometric security based on thresholds is described. The method includes retrieving an access security level associated with an access domain and an access permission level associated with an electronic portable transaction device, comparing the access security level and access permission level, and, if the access security level exceeds the access permission level, initiating a biometric authentication process.

Claims

1. A method of selectively initiating biometric authentication in an access control system, the method performed by an electronic portable access control device that includes a physical processor and a biometric authentication module, comprising:

(a) digitally collecting by the physical processor a user'"'"'s fingerprint as a template in a program stored within the electronic portable access control device via a fingerprint scanner on the electronic portable access device, wherein the electronic portable access control device is a smart card;

(b) accessing by the physical processor from a storage device within the electronic portable access control device, an access permission level associated with the electronic portable access control device, the access permission level specifying which access security level or levels associated with an access domain a user of the electronic portable access control device has permission to access, wherein the access domain is a controlled access point in a facility;

(c) receiving by the physical processor an indication of a first access security level associated with the access domain from a fixed access control device associated with the access domain, wherein the fixed access control device is located at the controlled access point such that the electronic portable access control device engages in a communication with the fixed access control device;

(d) comparing by the physical processor the access permission level associated with the electronic portable access control device to the first access security level associated with the access domain;

(e) initiating by the physical processor a biometric authentication process using the biometric authentication module and the fingerprint template if the first access security level associated with the access domain is higher than the access permission level associated with the electronic portable access control device and if the biometric authentication process is successful, permitting an access to the access domain; and

(f) permitting by the physical processor an access to the access domain without performing Step (e) if the first access security level associated with the access domain is less than the access permission level associated with the electronic portable access control device; and

wherein the access permission level comprises a numerical value representing a security clearance level of a plurality of security clearance levels and the first access security level comprises a numerical value representing a security clearance level of the plurality of security clearance levels.

2. The method of claim 1, wherein the step of initiating a biometric authentication comprises requesting a user to enter biometric data via the fingerprint scanner of the electronic portable access control device.

3. The method of claim 1, further comprising receiving a request to access the access domain from the electronic portable access control device.

4. The method of claim 1, further comprising receiving an indication of the access permission level from the electronic portable access control device.

5. The method of claim 1, wherein the electronic portable access control device comprises a biometric scanner and the step of initiating a biometric authentication comprises requesting a user to input biometric data via the fingerprint scanner of the electronic portable access control device.

6. The method of claim 1, wherein the access domain further includes one or more an area within the facility, a computer, a computer network, or a combination thereof.

7. An electronic portable access control device, comprising:

a data storage device configured to store data indicative of an access permission level associated with the electronic portable access control device, wherein the electronic portable access control device is a smart card, the access permission level specifying which access security level or levels associated with an access domain a user of the electronic portable access control device has permission to access, wherein the access domain is a controlled access point in a facility;

a biometric authentication module comprising a fingerprint scanner;

a processing module configured to execute a program configured to;

digitally collect the user'"'"'s fingerprint as a template within the electronic portable access control device;

access from the data storage device the data indicative of the access permission level associated with the electronic portable access control device;

receive an indication of a first access security level associated with the access domain from a fixed access control device associated with the access domain;

compare the access permission level associated with the electronic portable access control device to the first access security level associated with the access domain;

initiate a biometric authentication process using the biometric authentication module and the fingerprint template if the first access security level associated with the access domain is higher than the access permission level associated with the electronic portable access control device, and if the biometric authentication is successful, permit an access to the access domain; and

permit an access to the access domain without initiating the biometric authentication process if the first access security level associated with the access domain is less than the access permission level associated with the electronic portable access control device; and

a memory configured to store the program;

wherein the electronic portable access control device engages in a communication with the fixed access control device; and

wherein the access permission level comprises a numerical value representing a security clearance level of a plurality of security clearance levels and the first access security level comprises a numerical value representing a security clearance level of the plurality of security clearance levels.

8. The electronic portable access control device of claim 7, wherein the processing module and the memory are part of the smart card.

11. The electronic portable access control device of claim 7, wherein the electronic portable access control device comprises a transceiver configured to engage in wireless data communication with the fixed access control device.

9. The electronic portable access control device of 7, wherein the data storage device and the memory comprise the same component.

10. The electronic portable access control device of 7, wherein the smart card further comprises a set of contact pads configured to engage with a set of contact pads at the fixed access control device.