System and method for tokenless biometric authorization of electronic communications

• US 10,375,065 B1
• Filed: 03/22/2016
• Issued: 08/06/2019
• Est. Priority Date: 11/28/1994
• Status: Expired due to Fees

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Hoffman, Ned
• Primary Examiner(s): Agwumezie, Chinedu C
• Application Number:
  US15/076,906
• Time in Patent Office: 1,232 Days
• Field of Search: 705 50, 705 59, 705 75
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: G07F 9/009 User recognition or proximity detection
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

This invention is a method and system for tokenless biometric authorization of an electronic communication, using a biometric sample, a master electronic identicator, and a public communications network, wherein the method includes: an electronic communication formation step, wherein at least one communication comprising electronic data is formed; a user registration step, wherein a user electronically submits a registration biometric sample taken directly from the person of the user; a public network data transmittal step, wherein the registration biometric sample is electronically transmitted to a master electronic identicator via a public communications network, said master electronic identicator comprising a computer database which electronically stores all of the registration biometric samples from all of the registered users; a user registration biometric storage step, wherein the registration biometric sample is electronically stored within the master electronic identicator; a bid biometric transmittal step, wherein a bid biometric sample, taken directly from the person of the user, is electronically transmitted to at least one electronic identicator; a user identification step, wherein an electronic identicator compares the bid biometric sample to at least one registration biometric sample previously stored in an electronic identicator, for producing either a successful or failed identification of the user; an electronic communication authorization step, wherein upon a successful identification of the user by an electronic identicator, at least one electronic communication is authorized for execution; wherein an electronic communication is biometrically-authorized without the user having to present any personalized man-made memory tokens such as smartcards, or magnetic stripe cards.

Claims

1. A system, comprising:

an Identicator Server and a Clearinghouse Server, the Identicator Server and the Clearinghouse Server communicatively connected to a wireless user device, a Master Identicator Server, and an Enterprise Server, the Identicator Server configured to;

store biometric data in a database,

receive a biometric sample from the wireless user device,

compare the received biometric sample with stored biometric data,

determine whether or not the user is an authenticated user based on the comparison,

transmit a user identifying code to the Clearinghouse Server based upon a successful identification of the user, and

the Clearinghouse Server configured to;

receive an identity confirmation of the Enterprise Server from the Master Identicator Server;

receive a user identifying code identifying that the user has been successfully identified; and

invoke a Universal Access Command of the user based upon receipt of the user identifying code and the Enterprise Server identity confirmation to open a user session.

2. The system of claim 1, wherein the wireless user device is one or more of a cell phone, a personal digital assistant, a desktop personal computer, and a notebook computer.

3. The system of claim 1, wherein the wireless user device is communicatively connected to the system via one or more of a cable network, a wireless cellular network, a wireless digital network, a telephone network, a wide area network, and the Internet.

4. The system of claim 1, wherein the Enterprise Server uses the Universal Access Command to generate one or more one-time usage Random Key Numbers.

5. The system of claim 4, wherein the Enterprise Server forwards the one or more one-time Random Key Numbers to one or more third-party locations.

6. The system of claim 4, wherein the one or more one-time Random Key Numbers are stored until the user session terminates.

7. The system of claim 4, wherein the one or more one-time Random Key Numbers enable the Enterprise Server to act on the user'"'"'s behalf.

8. The system of claim 1, wherein a biometric sample comprises any of the following:

a fingerprint, a facial scan, a retinal image, an iris scan, and a voice print.

9. The system of claim 1, wherein the Universal Access Command enables configuration of the Enterprise Server as a user proxy terminal for the user session to provide the user with one or more of customized electronic communication accessing, processing, and presentation.

10. The system of claim 1, wherein the Clearinghouse Server shares user data with an enterprise operator in accordance with user-customized Rule Modules designated by the user.

11. The system of claim 10, wherein the user-customized Rule Modules specify the accessing, processing, and display of user-customized electronic communications.

12. The system of claim 10, wherein the user-customized Rule Modules designate that all account data and product preferences associated with the Enterprise be grouped and represented to an enterprise operator as a single graphic.

13. The system of claim 12, wherein purchasing patterns, Internet browsing patterns, account payment schedules, and physical access privileges related to the Enterprise are presented in a text and icon screen display to the enterprise operator.

14. The system of claim 10, wherein the user-customized Rule Modules encapsulate data necessary for the Enterprise Server to customize its handling of the user'"'"'s electronic communications.

15. The system of claim 10, wherein the Rule Modules incorporate data from recent interactions between the user and the Enterprise Server.

16. The system of claim 1, wherein the Enterprise Server is to identify Rule Modules to invoke based on an additional data input received from the wireless user device.

17. The system of claim 16, wherein the additional data input includes one or more of biometric data, keyword data, and location data.

18. A system, comprising:

at least one master electronic identicator, comprising;

i) a computer database containing electronically stored biometric samples from all registered users and identification data from all registered enterprises,

ii) a first comparator that electronically compares a received biometric sample with stored biometric samples to determine whether or not the user is an authenticated user based on the comparison,

iii) a second comparator that electronically compares received enterprise identification data with stored enterprise identification data to determine whether or not the enterprise is an authenticated enterprise;

an electronic communication authorization platform, connected to the master electronic identicator, that authorizes an enterprise to serve as a user proxy by executing at least one electronic communication on behalf of the user upon a successful identification of the user and the enterprise by an electronic identicator; and

a rule-module invocation platform that authorizes the enterprise to invoke at least one previously designated user-customized rule-module on behalf of the user upon successful identification of the user and the enterprise, wherein the user-customized rule module includes at least one user-customized pattern data associated with at least one user-customized execution command.