Method and system for the generation, management, and use of a unique personal identification token for in person and electronic identification and authentication

• US 20040123114A1
• Filed: 12/18/2002
• Published: 06/24/2004
• Est. Priority Date: 01/02/2002
• Status: Active Grant

• Current Assignee: Tim Mcgowan
• Original Assignee: Tim Mcgowan
• Inventors: McGowan, Tim
• Granted Patent: US 7,278,026 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method and system for the generation, use, and management of a unique personal identification token with real time revocation and suspension.

Claims

1. A method for establishing a unique personal identification token comprising the steps of:

a. an application step, wherein the applicant claims an identity and provides biometric information to assist in establishing the unique identity;

b. a checking step, wherein the biometric is matched against all other biometric information provided by previous applicants;

c. an issuance step, wherein the issuing authority issues a unique personal identification token to the applicant including exterior printing and writing data to the electronic memory of said unique personal identification token;

d. an enrollment step, wherein the token is registered.

2. The method of claim 1 wherein the unique personal identification token is used to uniquely identify the holder of said unique personal identification token comprising the steps of:

a. a use step, wherein the holder provides said access code and said biometric for matching against data stored on said unique personal identification token;

b. a data transfer step, wherein encrypted data stored on said unique personal identification token is transmitted to a relying party;

c. a decryption step, whereby said encrypted data is decrypted by said relying party;

d. an authentication step, wherein the relying party may in real time determine the validity of said unique personal identification token;

e. a revocation step, wherein the issuing authority can in real time revoke the unique personal identification token;

f. a suspension step, wherein the holder can in real time suspend reliance on said unique personal identification token;

g. a decision step, whereby the relying party elects to accept the identity established by said Unique Personal Identification Token;

h. a re-authentication step, wherein the holder can in real time rescind the suspension on said unique personal identification token.