Systems and methods for upgrading authentication systems

• US 10,645,082 B1
• Filed: 05/10/2019
• Issued: 05/05/2020
• Est. Priority Date: 06/18/2014
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Mortensen, Maland Keith
• Primary Examiner(s): Giddins, Nelson S.
• Application Number:
  US16/408,963
• Time in Patent Office: 361 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The technology described herein discloses systems and methods for upgrading biometric authentication system. The system can receive first biometric information in connection with an authentication request from a user. The system can authenticate the user via a first authentication system by comparing the first biometric information received in connection with the authentication request with second biometric information. The user can be automatically enrolled into a second authentication system using the first biometric information received in connection with the authentication request.

Claims

1. A method comprising:

receiving, at a device associated with a user, first biometric information in connection with an authentication request from the user;

authenticating, by a first authentication system on the device, the user by comparing first characteristics generated from the first biometric information received in connection with the authentication request with second characteristics generated from previously collected biometric information, the second characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

sending, to an authentication server, a message that the user is authenticated using the first authentication system;

automatically enrolling the user into a second authentication system on the device using the first biometric information received in connection with the authentication request by deriving third characteristics of the first biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user; and

deleting, from the device, the first biometric information received in connection with the authentication request after the third characteristics of the first biometric information are derived using the second authentication system.

2. The method of claim 1, the method further comprising determining whether to authenticate the user using the first authentication system or the second authentication system.

3. The method of claim 1, wherein the first biometric information received in connection with the authentication request includes an image of the user.

4. The method of claim 1, wherein the first biometric information received in connection with the authentication request is enrollment information for the second authentication system, wherein the method further comprises authenticating the user with the second authentication system by comparing the third characteristics of the first biometric information with fourth characteristics of biometric information received in connection with a second authentication request.

5. The method of claim 1, wherein the method further comprises:

in response to the user being enrolled in the second authentication system, storing the third characteristics.

6. The method of claim 1, the method further comprising:

running the first authentication system in parallel with the second authentication system until a criteria is met, and wherein the second authentication system is a replacement authentication system.

7. The method of claim 1, wherein the first authentication system generates the first characteristics using a first biometric algorithm, wherein the second authentication system generates the third characteristics using a second biometric algorithm, wherein the first biometric algorithm and the second biometric algorithm are incompatible.

8. A non-transitory machine-readable medium having machine executable instructions stored thereon that, when executed by one or more processors, direct the one or more processors to perform a method comprising:

receiving, at a device associated with a user, first biometric information in connection with an authentication request from the user;

authenticating, by a first authentication system on the device, the user by comparing first characteristics generated from the first biometric information received in connection with the authentication request with second characteristics generated from previously collected biometric information, the second characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

sending, to an authentication, a message that the user is authenticated using the first authentication system;

automatically enrolling the user into a second authentication system on the device using the first biometric information received in connection with the authentication request by deriving third characteristics of the first biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user; and

deleting the first biometric information received in connection with the authentication request after the third characteristics of the first biometric information are derived using the second authentication system.

9. The non-transitory machine-readable medium of claim 8,

wherein the method further comprises:

determining whether to authenticate the user using the first authentication system or the second authentication system.

10. The non-transitory machine-readable medium of claim 8,

wherein the first biometric information received in connection with the authentication request includes an image of the user.

11. The non-transitory machine-readable medium of claim 8,

wherein the first biometric information received in connection with the authentication request is enrollment information for the second authentication system, wherein the method further comprises authenticating the user with the second authentication system by comparing the third characteristics of the first biometric information with fourth characteristics of biometric information received in connection with a second authentication request.

12. The non-transitory machine-readable medium of claim 8,

wherein the method further comprises:

in response to the user being enrolled in the second authentication system, storing the third characteristics.

13. The non-transitory machine-readable medium of claim 8, wherein the method further comprises:

running the first authentication system in parallel with the second authentication system until a criteria is met, and wherein the second authentication system is a replacement authentication system.

14. The non-transitory machine-readable medium of claim 8, wherein the first authentication system generates the first characteristics using a first biometric algorithm, wherein the second authentication system generates the third characteristics using a second biometric algorithm, wherein the first biometric algorithm and the second biometric algorithm are incompatible.

15. A system, comprising:

one or more processors; and

a non-transitory computer readable storage medium having instructions stored thereon, which when executed by the one or more processors cause the system to;

receive, at a device associated with a user, first biometric information in connection with an authentication request from the user;

authenticate, by a first authentication system on the device, the user by comparing first characteristics generated from the first biometric information received in connection with the authentication request with second characteristics generated from previously collected biometric information, the second characteristics generated from the previously collected biometric information collected during a first enrollment process generated using the first authentication system;

send, to an authentication engine, a message that the user is authenticated using the first authentication system;

automatically enroll the user into a second authentication system on the device using the first biometric information received in connection with the authentication request by deriving third characteristics of the first biometric information using the second authentication system,

wherein the user is enrolled without requesting additional enrollment information from the user; and

delete the first biometric information received in connection with the authentication request after the third characteristics of the first biometric information are derived using the second authentication system.

16. The system of claim 15, wherein the instructions, when executed by the one or more processors, further cause the system to:

determine whether to authenticate the user using the first authentication system or the second authentication system, wherein the first biometric information received in connection with the authentication request includes an image of the user.

17. The system of claim 15, wherein the first biometric information received in connection with the authentication request is enrollment information for the second authentication system, wherein the method further comprises authenticating the user with the second authentication system by comparing the third characteristics of the first biometric information with fourth characteristics of biometric information received in connection with a second authentication request.

18. The system of claim 15, wherein the instructions, when executed by the one or more processors, further cause the system to:

in response to the user being enrolled in the second authentication system, store the third characteristics.

19. The system of claim 15, wherein the instructions, when executed by the one or more processors, further cause the system to:

run the first authentication system in parallel with the second authentication system until a criteria is met, and wherein the second authentication system is a replacement authentication system.

20. The system of claim 15, wherein the first authentication system generates the first characteristics using a first biometric algorithm, wherein the second authentication system generates the third characteristics using a second biometric algorithm, wherein the first biometric algorithm and the second biometric algorithm are incompatible.