Biometric personal data key (PDK) authentication

• US 10,437,976 B2
• Filed: 10/25/2018
• Issued: 10/08/2019
• Est. Priority Date: 12/20/2004
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Giobbi, John J.
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US16/170,234
• Publication Number:
  US 20190065721A1
• Time in Patent Office: 348 Days
• CPC Class Codes: G05B 1/00 Comparing elements, i.e. elements for effecting comparison directly or indirectly between a desired value and existing or anticipated values
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

Systems and methods verifying a user during authentication of an integrated device. In one embodiment, the system includes an integrated device and an authentication unit. The integrated device stores biometric data of a user and a plurality of codes and other data values comprising a device ID code uniquely identifying the integrated device and a secret decryption value in a tamper proof format, and when scan data is verified by comparing the scan data to the biometric data, wirelessly sends one or more codes and other data values including the device ID code. The authentication unit receives and sends the one or more codes and the other data values to an agent for authentication, and receives an access message from the agent indicating that the agent successfully authenticated the one or more codes and other data values and allows the user to access an application.

Claims

1. A method comprising:

detecting a computing device of a user in proximity of a reader device;

establishing a secure communication link between the reader device and the computing device;

responsive to a successful biometric verification of the user based on comparing scan data from a biometric scan performed by a biometric scanner of the computing device to biometric data of a legitimate user stored in a storage element of the computing device, receiving from the computing device over the secure communication link an identifier code stored in the storage element of the computing device, the identifier code uniquely identifying the computing device;

sending the identifier code to a trusted authority server for authenticating the identifier code;

receiving a message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code; and

responsive to receiving the message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code, allowing the reader device to complete a transaction.

2. The method of claim 1, further comprising:

responsive to detecting the computing device of the user in the proximity of the reader device, sending a request for a biometric verification of the user from the reader device to the computing device.

3. The method of claim 1, wherein the secure communication link is wireless and is established based on an encryption and a decryption key.

4. The method of claim 1, wherein the identifier code uniquely identifying the computing device is registered with the trusted authority server.

5. The method of claim 1, wherein receiving the identifier code indicates that a biometric verification of the user was successful.

6. The method of claim 1, wherein the biometric data includes data from at least one from a group of a fingerprint, palm print, a retinal scan, an iris scan, a hand geometry, a facial recognition, a signature recognition and a voice recognition.

7. The method of claim 1, wherein the computing device comprises one from a group of a mobile phone, tablet, laptop, mp3 player, mobile gaming device, watch and a key fob.

8. The method of claim 1, wherein the reader device is operable on a same system as one from a group of a casino machine, a keyless lock, an ATM machine, a computer and a point of sale register.

9. A system comprising:

a computerized device including a reader device and a memory including instructions that, when executed by the computerized device, causes the system to;

detect a computing device of a user in proximity of the reader device;

establish a secure communication link between the reader device and the computing device;

responsive to a successful biometric verification of the user based on comparing scan data from a biometric scan performed by a biometric scanner of the computing device to biometric data of a legitimate user stored in a storage element of the computing device, receive from the computing device over the secure communication link an identifier code stored in the storage element of the computing device, the identifier code uniquely identifying the computing device;

send the identifier code to a trusted authority server for authenticating the identifier code;

receive a message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code; and

responsive to receiving the message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code, allow the reader device to complete a transaction.

10. The system of claim 9, wherein the instructions, when executed, by the computerized device, further cause the system to send a request for a biometric verification of the user from the reader device to the computing device responsive to detecting the computing device of the user in the proximity of the reader device.

11. The system of claim 9, wherein the secure communication link is wireless and is established based on an encryption and a decryption key.

12. The system of claim 9, wherein the identifier code uniquely identifying the computing device is registered with the trusted authority server.

13. The system of claim 9, wherein receiving the identifier code indicates that a biometric verification of the user was successful.

14. The system of claim 9, wherein the biometric data includes data from at least one from a group of a fingerprint, palm print, a retinal scan, an iris scan, a hand geometry, a facial recognition, a signature recognition and a voice recognition.

15. The system of claim 9, wherein the computing device comprises one from a group of a mobile phone, tablet, laptop, mp3 player, mobile gaming device, watch and a key fob.

16. The system of claim 9, wherein the computerized device including the reader device is operable on a same system as one from a group of a casino machine, a keyless lock, an ATM machine, a computer and a point of sale register.

17. A computer program product comprising a computer-readable storage device including a computer readable program, wherein the computer readable program when executed on a computerized device including a reader device causes the computerized device to:

detect a computing device of a user in proximity of the reader device;

establish a secure communication link between the reader device and the computing device;

responsive to a successful biometric verification of the user based on comparing scan data from a biometric scan performed by a biometric scanner of the computing device to biometric data of a legitimate user stored in a storage element of the computing device, receive from the computing device over the secure communication link an identifier code stored in the storage element of the computing device, the identifier code uniquely identifying the computing device;

send the identifier code to a trusted authority server for authenticating the identifier code;

receive a message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code; and

responsive to receiving the message from the trusted authority server indicating that the trusted authority server successfully authenticated the identifier code, allow the reader device to complete a transaction.

18. The computer program product of claim 17, wherein the computer readable program when executed on the computerized device including the reader device further causes the computerized device to send a request for a biometric verification of the user from the reader device to the computing device responsive to detecting the computing device of the user in proximity of the reader device.

19. The computer program product of claim 17, wherein the secure communication link is wireless and is established based on an encryption and a decryption key.

20. The computer program product of claim 17, wherein the identifier code uniquely identifying the computing device is registered with the trusted authority server.