Digital certificate system incorporating voice biometric processing

• US 20040010698A1
• Filed: 05/29/2003
• Published: 01/15/2004
• Est. Priority Date: 05/30/2002
• Status: Abandoned Application

• Current Assignee: Authentify, Inc. (Early Warning Services, LLC)
• Original Assignee: Authentify, Inc. (Early Warning Services, LLC)
• Inventors: Rolfe, Andrew R.
• Application Number:
  US10/448,253
• Publication Number:
  US 20040010698A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A digital certificate registration and verification system and method incorporate a unique identifier of a voice biometric data profile from an applicant into a certificate. The profile can subsequently be retrieved and compared to a profile from a party initiating a transaction. Results can be incorporated into a decision as to the authenticity of the party that has initiated the transaction.

Claims

1. A method of issuing a digital certificate comprising:

providing a first network connection;

collecting at least biometric data from an applicant via the network connection for incorporating into a digital certificate;

obtaining an identifier associated with the applicant for a terminal on another network;

forwarding identification information, via the first network, to the applicant;

receiving as feedback via the another network, the identification information from the applicant;

evaluating the information received from the applicant to establish its similarity to the identification, information, and, if identical enough, obtaining an applicant specific indicium in real-time from the applicant; and

combining a representation of the applicant specific indicium with the biometric data for use in defining the certificate.

2. A method as in claim 1 which includes combining issuing authority indicia with the combined applicant specific indicium and biometric data.

3. A method as in claim 2 which includes issuing the certificate.

4. A method as in claim 3 wherein the issuing step includes making a representation of the certificate available to third parties for subsequent use.

5. A method as in claim 3 wherein the issuing step includes providing a representation of the certificate to the applicant for subsequent use.

6. A method as in claim 1 wherein the first network comprises a plurality of network service providers wherein user communication is substantially carried out in a non-audible format.

7. A method as in claim 6 wherein the other network comprises a public telephone network wherein user communication is substantially carried out audibly.

8. A method as in claim 7 wherein the identifier comprises an applicant'"'"'s telephone number.

9. A method as in claim 7 wherein the receiving step comprises receiving audio via the telephone network from the applicant.

10. A method as in claim 9 wherein the evaluating step comprises evaluating received audio.

11. A method as in claim 9 wherein the audio comprises applicant'"'"'s speech and including carrying out speech recognition processing with respect to received audio.

12. A method as in claim 11 which includes placing a call via the telephone network to the applicant while the applicant is providing data via the first network.

13. A method as in claim 11 which includes comparing current audio to previously processed audio, and responsive thereto, adapting the prestored representation.

14. A method as in claim 13 which includes modifying the previously issued certificate in accordance with an adapted representation.

15. A method as in claim 1 which includes accessing pre-stored data bases to obtain additional information relative to the applicant.

16. A method as in claim 1 which includes obtaining a current sample of applicant'"'"'s speech and conducting analysis thereof.

17. A method as in claim 16 which includes comparing the analyzed current sample to a pre-stored prior sample.

18. A method as in claim 17 which includes carrying out a verification process using at least the current sample.

19. A method as in claim 18 which includes making a determination to permit a requested transaction based on the results of the verification process.

55. A method as in claim 1 where the identifier would be obtained from one of pre-stored data or from the applicant.

20. A system comprising:

instructions executable at a respective processor for receiving a request for a digital certificate from an applicant via a first communications link;

instructions executable at a respective processor for requesting information from the applicant via the link;

instructions executable at a respective processor for producing and forwarding authentication information to the applicant;

instructions executable at a respective processor for obtaining contact information associated with the applicant relative to a second link;

instructions executable at a respective processor for contacting the applicant, via the second link;

instructions executable at a respective processor for analyzing audible responses from the applicant received via the second link and authenticating the applicant in response thereto;

instructions executable at a respective processor for forming a binary representation of at least part of the audible responses from the applicant; and

instructions executable at a respective processor for combining the binary representation with other applicant related information to form a digital certificate.

21. A system as in claim 20 which includes executable instructions for issuing the certificate to the applicant.

22. A system as in claim 20 which includes executable instructions for posting a representation of the certificate at a publicly available site.

23. A system as in claim 20 which includes executable instructions for responding to a third party inquiring as to the authenticity of the issued certificate.

24. A system as in claim 23 which includes executable instructions for providing authenticity related information pertaining to the certificate to the third party.

25. A system as in claim 20 wherein the contacting instructions comprise instructions for communicating via both links simultaneously.

26. A system as in claim 25 which includes executable instructions for issuing the certificate to the applicant.

27. A system as in claim 20 which includes instructions executable by a processor for accessing pre-stored data in response to information received from the applicant for use in authenticating the identity of the applicant.

28. A system as in claim 25 which includes executable instructions for posting a representation of the certificate at a publicly available site.

29. A system as in claim 25 which includes executable instructions for responding to a third party inquiring as to the authenticity of the issued certificate.

30. A system as in claim 20 wherein the analyzing instructions comprise instructions for carrying out biometric processing of the audible responses from the applicant.

31. A system as in claim 30 wherein the instructions for forming a binary representation comprise forming an applicant specific profile of the processed audio responses from the applicant.

56. A system as in claim 20 where the instructions for obtaining contact information obtain it from at least one of a pre-stored data source or the applicant.

32. A certificate issuing system comprising:

pre-stored first instructions to receive a telephone number and digitized representations of biometric data;

pre-stored second, instructions to create a digital certificate which includes the phone number and the digitized representations; and

pre-stored third instructions for digitally signing the certificate, the instructions executable by a respective processor.

33. A certificate issuing system as in claim 32 which includes prestored fourth instructions for storing a representation of the certificate at a publicly accessible location.

34. A certificate issuing system as in claim 32 which includes additional pre-stored, instructions, responsive to an inquiry, to compare biometric information as stored in the certificate to currently obtained biometric information.

35. A certificate issuing system as in claim 32 which includes instructions to query at least one pre-stored data base in connection with creating the digital certificate, the instructions being pre-stored in at least one of a computer readable magnetic or optical medium.

36. A certificate system comprising:

a first system for issuing a digital certificate;

a second system for verifying the authenticity of a person desirous of using the certificate, the second system including first software for obtaining a current voice sample from the person,

second software for retrieving a previously stored voice sample for the user and comparing the two samples, and

third software for making an authenticity determination based on the results of comparing the two samples, the software executable by at least one processor.

37. A system as in claim 36 which includes additional software for interrogating at least one pre-stored data base for additional information relative to the person.

38. A system as in claim 36 which includes additional software for updating the previously stored voice sample for the user.

39. A system as in claim 36 where the second and third software are executed by different processors.

40. A system of instructions pre-recorded on at least one computer readable medium comprising:

first instructions for receiving a request for a digital certificate from an applicant via a first communications link;

second instructions for requesting information from the applicant via the link;

third instructions for producing and forwarding authentication information to the applicant;

fourth instructions for obtaining contact information associated with the applicant relative to a second link;

fifth instructions for contacting the applicant, via the second link;

sixth instructions for analyzing audible responses from the applicant received via the second link and authenticating the applicant in response thereto;

seventh instructions for forming a binary representation of at least part of the audible responses from the applicant; and

eighth instructions for combining the binary representation with other applicant related information to form a digital certificate.

41. A system as in claim 40 which includes instructions for issuing the certificate to the applicant.

42. A system as in claim 40 which includes instructions for posting a representation of the certificate at a publicly available site.

43. A system as in claim 40 which includes instructions for responding to a third party inquiring as to the authenticity of the issued certificate.

44. A system as in claim 43 which includes instructions for providing authenticity related information pertaining to the certificate to the third party.

45. A system as in claim 40 wherein the contacting instructions comprise instructions for communicating via both links simultaneously.

46. A system as in claim 45 which includes instructions for issuing the certificate to the applicant.

47. A system as in claim 40 which includes instructions executable by a processor for accessing pre-stored data in response to information received from the applicant for use in authenticating the identity of the applicant.

48. A system as in claim 45 which includes instructions for posting a representation of the certificate at a publicly available site.

49. A system as in claim 45 which includes commands for responding to a third party inquiring as to the authenticity of the issued certificate.

50. A system as in claim 40 wherein the analyzing instructions comprise instructions for carrying out biometric processing of the audible responses from the applicant.

51. A system as in claim 50 wherein the instructions for forming a binary representation comprise forming an applicant specific profile of the processed audio responses from the applicant.

52. A system as in claim 40 where the fourth instructions request the applicant to provide the contact information relative to the second link.

53. A system comprising:

software executable by a respective processor to establish a unique voice biometric data profile from an applicant desirous of obtaining issuance of a digital certificate;

software executable by a respective processor for incorporating at least a representation of the voice biometric profile into the certificate;

software executable by a respective processor for obtaining a current voice biometric profile from a party initiating a transaction for biometric verification;

software executable by a respective processor for comparing the current biometric profile to the representation incorporated into the certificate; and

software executable by a respective processor for verifying the authenticity of the party initiating the transaction.

54. A verification method comprising:

establishing a unique voice biometric profile from an applicant desirous of obtaining issuance of a digital certificate;

incorporating at least a representation of the profile into the certificate;

obtaining a current voice biometric profile from a person initiating a transaction that involves the certificate;

comparing the current voice biometric profile to the representation in the certificate; and

determining if the party initiating the transaction can be expected to be the applicant for the certificate.