Secure system using images of only part of a body as the key where the part has continuously-changing features

• US 20010004231A1
• Filed: 01/26/2001
• Published: 06/21/2001
• Est. Priority Date: 12/08/1998
• Status: Active Grant

• Current Assignee: eCryp, Inc. (InfoProtect Technologies Plc)
• Original Assignee: Senetas Corp. Ltd.
• Inventors: Bailey, Kenneth S.
• Granted Patent: US 6,775,777 B2
• Time in Patent Office: Days
• US Class Current: 340/5.53
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A secure system using a continuously-changing key that depends on the user'"'"'s body part. A preferred embodiment obtains an image of the user'"'"'s fingerprint and cements it according to a random generator. Only part of the image and not all of the image is sent at one time. The random segmentation insures that part of the image that is sent continuously varies from time to time. Therefore, an unauthorized receiver can receive only part but not all of the image. That only part of the image which is received will usually not be the same at the second as it is at the first time. Therefore, a received code cannot later be used to fool the system with the same credit card.

Claims

1. A method, comprising:

obtaining information indicative of a biometric;

forming multiple separated samples indicative of said biometric, said separated samples representing separate portions of information from the biometric which separated samples are separated from one another by a specified amount;

controlling said forming according to a value which is effectively random, such that forming at two different times will form two different samples; and

sending said multiple separated samples indicative of said biometric, and not all of the information indicative of the biometric, at any of said different times.

2. A method as in

claim 1

wherein said biometric is a fingerprint.

3. A method as in

claim 2

, wherein said forming comprises defining sampling areas along said fingerprint which are separated from one another, and obtaining samples along said separated areas.

4. A method as in

claim 1

further comprising obtaining a value indicative of a current time and day and adding said value prior to said sending.

5. A method as in

claim 1

, wherein said an effectively random value is based on at least one of time and/or date.

6. A method as in

claim 5

, wherein said effectively random value is based on both date and time.

7. A method as in

claim 1

, further comprising reading different parts of said biometric and storing said different parts, said different parts being separated by an amount based on said effectively random value.

8. A method as in

claim 7

, wherein said reading comprises obtaining a value of a specified size at each separated sample.

9. A method as in

claim 1

wherein said biometric is a retinal scan.

10. A method as in

claim 1

, wherein said biometric is information which can be represented as an image.

11. A method as in

claim 10

, wherein said obtaining random parts comprises obtaining random parts of information indicative of the image.

12. A method as in

claim 2

wherein said obtaining biometric part comprises using a fingerprint scanner to obtain an entire image of the fingerprint, and placing said entire image into a working memory.

13. A method as in

claim 12

, wherein said reading comprises reading out samples from said working memory based on said random value.

14. A method, comprising:

obtaining a value indicative of a biometric information;

converting said value into electronic information indicative of said biometric information;

obtaining a random value which is different at different times of operation, such that said random value at a first time is different then said random value at a second time; and

selecting a plurality of separated portions of said electronic information based on said random value.

15. A method as in

claim 14

wherein said biometric information is a fingerprint, and said electronic information is information that is indicative of an image of said fingerprint.

16. A method as in

claim 14

, wherein said random value is used to segment electronic information into separated segments.

17. A method as in

claim 15

wherein said effectively random number is used to form pitches between different separated portions of the image.

18. A method as in

claim 14

wherein said effectively random value is based on an indicia of time.

19. A method as in

claim 18

wherein said indicia of time includes a time of day.

20. A method as in

claim 18

, wherein said indicia of time includes a date.

21. A method as in

claim 18

, wherein said indicia includes both a time of day and a date.

22. A method as in

claim 18

, further comprising decoding, at a remote end, said plurality of separated portions, obtaining said random value, and comparing said random value to a current indicia to determine if said current indicia is close to an indicia represented by information in said random value.

23. A method as in

claim 14

, further comprising receiving said plurality of separated portions at a remote end, and verifying an identity based on said remote portions.

24. A method as in

claim 14

, further comprising compensating for a rotation of said fingerprint prior to sampling the information.

25. A method, comprising:

obtaining a constantly changing value which is different at a first time than it is at a second time;

using said value to select portions of a biometric information data set; and

sending information indicative of said portions and not information about at least a plurality of areas other than said portions, to a remote location as an identifying data set.

26. A method as in

claim 25

wherein said biometric information data set includes biometric data indicative of a biometric scan.

27. A method as in

claim 26

wherein said biometric scan is a scan, which can be represented as an image of a body part.

28. A method as in

claim 27

wherein said body part is a fingerprint.

29. A method as in

claim 27

wherein said body part is a retina.

30. A method as in

claim 25

wherein said constantly changing value is a random number.

31. A method as in

claim 30

, wherein said random number is based on an indicia indicative of a current time and/or date.

32. A method as in

claim 28

further comprising determining values indicating an angle represented by a portion of the fingerprint at said portions.

33. A method as in

claim 25

further comprising, at the remote location, receiving said portions, determining, from a database in said remote locations, whether said portions correspond to specified information in its own database, and establishing an identification based on said determining.

34. A method as in

claim 33

wherein said biometric information is a fingerprint.

35. A method as in

claim 34

wherein said fingerprint information includes information indicative of an angle of the fingerprint portion along a specified line.

36. A system, comprising:

a biometric reader, which obtains data indicative of a biometric;

a first generator which obtains a constantly varying value;

a data sending element, which selects parts of said data, but does not select other parts of said data, based on said constantly varying value, and which only sends said parts, and does not send said other parts.

37. A system as in

claim 36

, wherein said biometric reader is a fingerprint scanner.

38. A system as in

claim 37

, further comprising a memory, storing information indicative of a whole fingerprint, and wherein said data sending element selects only some of the information in said memory for sending and does not send information other than said some.

39. A system as in

claim 38

, further comprising, at a remote end, a receiver receiving said information, which is sent.

40. A system as in

claim 38

wherein said receiver includes a database with whole fingerprint information, indicative of a whole fingerprint, and compares said information with said whole fingerprint to determine a match between said information and said whole fingerprint information.

41. A system as in

claim 36

wherein said first generator produces said constantly varying value based on an indicia of current time.

42. A system as in

claim 41

wherein said current time includes current time of day.

43. A system as in

claim 41

wherein said current time includes date.

44. The system as in

claim 41

further comprising a real-time clock, which produces a stamp indicative of current time.

45. A system as in

claim 41

, further comprising, at a remote end, a receiver including a database having information indicative of the fingerprint and which compares said information with said data.

46. A system as in

claim 45

wherein said receiver also includes a real-time clock.

47. A system as in

claim 46

, further comprising an element at said receiver which determines said constantly varying value, determines an indicia of time from said constantly varying value, and compares said indicia of time with a current time from said real clock to determine correspondence therebetween.

48. The system as in

claim 47

wherein said clock is determined to be correct if the indicias of time agree within ten minutes.

49. A system as in

claim 41

wherein said indicia of current time is based on an Internet based time standard.

50. A method of identification, comprising:

storing, at a first location, a database including a plurality of biometric information parts;

obtaining, at a second location, a biometric information part;

determining a constantly changing value, and using said constantly changing value to sample and obtain a plurality separated values indicative of said biometric information part to be identified, wherein said values are separated by an amount based on said constantly changing value; and

sending said separated values, but not sending values indicative of areas between said separated values to said first location and using said separated values at said first location to compare said biometric information part to information in said database.

51. A method as in

claim 50

, wherein said constantly changing value is a random value from a random value generator.

52. A method as in

claim 51

wherein said biometric information part is a fingerprint.

53. A method as in

claim 51

wherein said biometric information part is a retina.

54. A method as in

claim 51

, wherein said biometric information part produces biometric information of a form, which can be represented as an image.

55. A method as in

claim 54

, wherein said separated values are portions of the image, which are separated from one another.

56. A method as in

claim 55

further comprising, prior to said sending, encrypting said information using an encryption scheme.

57. A method, comprising:

receiving a signal which includes plural samples of biometric information, said plural samples including separated parts of a continuous stream of biometric information, which separated parts are separated by a separation amount; and

comparing said samples to information in a database, which information represents an entirety of the biometric information, to determine whether or not the information matches the information in the database.

58. A method as in

claim 57

, further comprising comparing said samples to other samples which have been sent to determine if said samples and said other samples are the same, and producing an indication if said samples are the same.

59. A method as in

claim 57

further comprising receiving clock information within said samples, and comparing said clock information to local time.

60. A method as in

claim 59

, wherein said receiving clock information comprises comparing clock information within a signal from a local real-time clock.

61. A method as in

claim 57

, wherein said biometric information is fingerprint information.

62. A method as in

claim 61

, wherein said samples are samples along lines of said fingerprint, which are spaced by a specified random amount.

66. A method as in

claim 57

, wherein said biometric information is a retinal scan.

63. A method as in claimed 57 further comprising adjusting an orientation of the biometric information, prior to said comparing.

64. A method as in claimed 61, further comprising adjusting an orientation of the fingerprint, prior to said comparing.

65. A method as in

claim 64

, wherein said adjusting an orientation comprises rotating the orientation of the fingerprint.

67. A method of transmitting biometric information, comprising:

obtaining a biometric feature which can be represented as an image;

obtaining a number which is effectively random;

using said number to form separated samples of the image representing the biometric feature; and

sending only said separated samples, and not the entire image, to a remote location.

68. A method as in

claim 67

, further comprising, at the remote location, comparing said separated samples with a database including an image of the entire biometric feature, and establishing a match based on said comparing.

69. A method as in

claim 67

wherein said obtaining a number which is effectively random comprises using at least one of date and/or time of day to form a random number.

70. A method comprising:

obtaining a signal indicative of a sample indicative of a part of a user'"'"'s body;

altering said signal to form a second sample which forms a constantly-changing personal access code which is representative of only a portion of said sample.

71. A method as in

claim 70

, wherein said part of the user'"'"'s body includes a fingerprint.

72. A method as in

claim 70

, further comprising adding a timestamp indicating a time of said obtaining.

73. A method as in

claim 70

, further comprising encrypting said constantly changing personal access code.

74. A method as in

claim 73

, further comprising using said constantly changing personal access code to verify a transaction remotely.

75. A method as in

claim 70

, wherein said altering comprises taking only part of said sample and sending only said part according to a segmentation of data that represents said sample.

76. A method as in

claim 71

, further comprising obtaining an image of said fingerprint, selecting a segmentation pitch, and segmenting said image according to said segmentation pitch, said constantly changing access code representing portions of the signal obtained from said segmentation pitch.

77. A method as in

claim 76

, further comprising obtaining an indication of a current time, and using said indication to carry out said segmentation.

78. A method as in

claim 77

, wherein said indication represents a day.

79. A method as in

claim 77

, wherein said indication represents an hour and/or minute of the day.

80. A method as in

claim 70

, wherein said obtaining a sample comprises obtaining a sample of a whole of a part of the users body, and said altering comprises selectively reading out only part of said sample.

81. A method as in

claim 74

, wherein said the transaction is carried out over a phone line.

82. A method, comprising:

obtaining biometric information, indicative of a biometric part;

segmenting said biometric information in a way which is effectively random; and

forming a signal representing only segmented parts of the biometric information, and not the whole biometric information.

83. A method as in

claim 82

, wherein said segmenting comprises forming an image indicative of the biometric part, and selecting only specific parts of the image based on specified segmentation information.

84. A method as in

claim 83

, wherein said specified segmentation information is based on clock data.

85. A method as in

claim 84

, wherein said clock data includes both date and time.

86. A method as in

claim 83

, wherein said clock data includes data received over a network.

87. A method as in

claim 82

, wherein said obtaining comprises obtaining information indicative of the whole biometric part, and said segmenting comprises reading out only part of said information based on the specified criteria.

88. A method as in

claim 87

, wherein said information is a type of information, which can be represented as an image.

89. A method as in

claim 88

, wherein said information includes fingerprint information.

90. A method as in

claim 82

, further comprising encrypting said signal.

91. A method as in

claim 90

, further comprising using said signal to verify a remote transaction.

92. A method as in

claim 82

, wherein said segmenting is based on clock data.

93. A method as in

claim 92

, further comprising using said signal to verify a remote transaction, wherein said signal is verified by comparing said clock data to local clock data.

94. A method, comprising:

obtaining biometric information indicative of a biometric part;

adding information indicative of clock data to said biometric information;

encrypting a message including said clock data information, and said information indicative of the biometric part; and

verifying said information, by decrypting the message, and comparing the clock data information to local clock data information.

95. A method as in

claim 94

, wherein said verifying establishes a message as being accepted if said clock data information agrees with said local clock information by a predetermined threshold.

96. A method as in

claim 95

, wherein said predetermined threshold is a specified number of minutes.

97. A method as in

claim 95

, further comprising, if said clock data does not agree with said local clock information, sending a message indicating that clock data should be calibrated.

98. A method as in

claim 94

, wherein said clock data is data based on an Internet based time standard.

99. A method, comprising:

obtaining biometric information which can be represented as an image;

sending only part of said biometric information to a remote receiver; and

using said only part of said information to compensate for tilt of said image as part of verifying said biometric information.

100. A method as in

claim 99

, further comprising extracting specified angles from said biometric information, and wherein said compensate for tilt comprises determining if all angles are in error by a specified amount.

101. A method as in

claim 100

, wherein said biometric information is a fingerprint.

102. A method as in

claim 101

, wherein said specified angles include angles of features of said fingerprint.

103. A method as in

claim 99

, wherein said sending comprises encrypting said only part of said biometric information prior to said sending.

104. A method as in

claim 103

, wherein said encrypting comprises using clock data as part of the message prior to said encrypting.

105. A method as in

claim 99

, wherein obtaining comprises obtaining an entire sample of biometric information, and said sending only part comprises taking only part of said sample.

106. A method as in

claim 105

, wherein said taking only part comprises determining a value which is effectively random, and using said value to determine which part of said sample to take.

107. A method as in

claim 106

, wherein said value, which is effectively random, is based on clock data.

108. A method as in

claim 106

, further comprising processing said value which is effectively random to determine if said value has been previously used within a specified time.

109. A method, comprising:

obtaining biometric information;

obtaining a value which is effectively random;

determining if said value which is effectively random has been used for other samples within a specified time;

if said value has been used for other samples within the specified time, then selecting a new value; and

using said value to process said biometric information.

110. A method as in

claim 109

, wherein said using said value to process comprises using said value to select a portion of said biometric information.

111. A method as in

claim 109

, wherein said portion comprises separated segmented portions.

112. A method as in

claim 109

, wherein said biometric information is information, which can be represented as an image.

113. A method as in

claim 112

, wherein said portion comprises separated segmented portions of said image along specified parts of said image.

114. A method as in

claim 112

, wherein said biometric information includes fingerprint information.

115. A method as in

claim 114

, wherein said processing of said biometric information comprises determining angles of said fingerprint at specified portions based on said value.

116. A method comprising:

obtaining biometric information;

obtaining an indication of time from a network;

selecting only at part of said biometric information based on a value which is effectively random;

combining said only part, and said indication of time into a message;

encrypting said message; and

using said message to verify a transaction.

117. A method as in

claim 116

, wherein said message is used to verify the transaction over the network.