Remote authenticating biometric apparatus and method for networks and the like

• US 20020174345A1
• Filed: 05/17/2001
• Published: 11/21/2002
• Est. Priority Date: 05/17/2001
• Status: Abandoned Application

• Current Assignee: Patel, Pankaj B.
• Original Assignee: Patel, Pankaj B.
• Inventors: Patel, Pankaj B.
• Application Number:
  US09/859,608
• Publication Number:
  US 20020174345A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A secured biometric apparatus and method for authenticating only authorized users into secured networks where sensitive information is located and stored. The method having the steps of sending a random number from a remote site to a local site of a user, measuring a first biometric parameter from the user with a biometric reader, comparing the first biometric parameter with a previously stored second biometric parameter, operating on the random number with a math table to create a first cryptogram when a positive match occurs between the first and second biometric parameter, sending the first cryptogram from the local site to the remote site for comparison with an internally generated cryptogram.

Claims

1. A method for authenticating a user over a network comprising the steps of:

a) sending a random number from a remote site to a local site of a user,

b) measuring a first biometric parameter from said user with a biometric reader,

c) comparing said first biometric parameter with a previously stored second biometric parameter,

d) operating on said random number with a math table to create a first cryptogram when a positive match occurs between said first and second biometric parameter,

e) sending said first cryptogram from said local site to said remote site for comparison with an internally generated cryptogram.

2. A method for authenticating a user over a network as in claim 1 further comprising the step of encrypting said first biometric parameter to form a first encrypted biometric parameter.

3. A method for authenticating a user over a network as in claim 1 further comprising the step of generating a first cryptogram from said random number if said first encrypted biometric parameter positively matches said second encrypted biometric parameter.

4. A method for authenticating a user over a network as in claim 1 further comprising the step of sending said first generated cryptogram to said remote site for comparison with a second cryptogram.

5. A method for authenticating a user over a network as in claim 4 wherein said second cryptogram is generated from a site other than from said local site.

6. A method for authenticating a user over a network as in claim 1 further comprising the step of allowing user access if said first cryptogram matches said second cryptogram.

7. A method for authenticating a user over a network comprising the steps of:

a) sending a random number from a remote site to the site of the user,

b) measuring a biometric parameter from said user with a biometric reader,

c) comparing said first encrypted biometric parameter with a second encrypted biometric parameter previously stored on said biometric reader,

d) generating a second random number when said first encrypted biometric parameter does not positively match said second encrypted biometric parameter,

e) operating on said second random number with a math table to create a first cryptogram when a positive match fails to occur between said first and second biometric parameter,

f) sending said first cryptogram from said local site to said remote site for comparison with an internally generated cryptogram.

8. A method for authenticating a user over a network as in claim 7 further comprising the step of denying user access if said first cryptogram does not match said second cryptogram.

9. A method for authenticating a user over a network as in claim 7 further comprising the step of generating a first cryptogram from said second random when said first encrypted biometric parameter does not match said second biometric parameter.