Fingerprint-based authentication using radio frequency identification

• US 20060170530A1
• Filed: 02/02/2005
• Published: 08/03/2006
• Est. Priority Date: 02/02/2005
• Status: Abandoned Application

• Current Assignee: Enenia Biometrics Incorporated
• Original Assignee: Enenia Biometrics Incorporated
• Inventors: Nwosu, Daniel Chukwuemeka, Agbemabiese, William, Ezeanuna, Zeribe Pius, Nwosu, Kingsley Chukwudum
• Application Number:
  US11/049,328
• Publication Number:
  US 20060170530A1
• Time in Patent Office: Days
• US Class Current: 340/5.530
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method, apparatus and system that allows an individual to authenticate his identity by storing his or her biometric profile and other information in a smart device. The smart device is always under the control of the owner during and after enrollment. The smart device holder'"'"'s identity is authenticated by matching the stored fingerprint template against the live fingerprint of the smart device holder scanned on the smart device. When an enrolled smart device is within the proximity of a system radio frequency identification reader, the associated application via the radio frequency identification reader interacts with the smart device to authenticate the identity of the person holding the device. The smart device can also be attached to a personal computer, without a radio frequency identification reader via a wired interface. The application performs the applicable transaction only when the identity of the smart device holder is successfully authenticated.

Claims

1. A system for biometric authentication of the identity of the owner of a smart device that is in communication with a host application on a computer or a radio frequency identification reader, comprising:

a smart device, further comprising;

a radio frequency identification reader status area for storing the status of the requesting radio frequency identification reader;

a radio frequency identification reader information area for storing the encrypted result of a biometric matching process;

a biometric template area for storing both the live and stored biometric feature of the smart device owner;

a biometric scanner for scanning a live biometric feature of the owner of the smart device and storing the live biometric feature temporarily in the biometric template area;

a personal information area for storing the personal and account information of the owner of the smart device;

a verifier for matching the live biometric features against the biometric features of the owner of the smart device stored in the biometric template area;

a radio frequency identification reader in wireless communication with the smart device and by wire-line communication with a computer for reading the authentication result from the smart device;

a host application that runs on said computer wherein said radio frequency identification reader and host application reads the status from the radio frequency identification reader status area and extracts information from the radio frequency identification reader'"'"'s information area and personal information area.

2. The system of claim 1, wherein the smart device contains a light emitting diode used to indicate various states of the smart device.

3. The system of claim 1, wherein the smart device communicates with the host application on the personal computer via wired communication channel.

4. The system of claim 1, wherein the smart device contains a reserved area for storing vendor or company specific information.

5. The system of claim 1, wherein the smart device is embedded in a cellular phone or any other portable communication device.

6. The system of claim 1, wherein the smart device is powered by an internal rechargeable or non-rechargeable battery or solar energy.

7. A method for authenticating a smart device holder in a biometric authentication system comprising a radio frequency identification reader, computer, host application residing in the computer and smart device, comprising the steps of:

activating the smart device by the smart card holder by depressing the scanning area on the smart device;

checking the smart device'"'"'s enrollment status in the biometric authentication system by the smart device;

clearing the radio frequency identification reader status area on the smart device by the smart device if the smart device is enrolled;

scanning the live biometric feature of the smart device holder in the smart device;

comparing the live biometric feature of the smart device holder with the stored biometric feature in the smart device;

checking the radio frequency identification reader status area in the smart device to determine if any other radio frequency identification reader or any other host application has requested for the smart device holder'"'"'s authentication in the radio frequency identification reader status area in the smart device;

encrypting and writing the biometric profile data containing the radio frequency identification reader identification or host application identification, radio frequency identification tag, and authentication result into the radio frequency identification reader information area of the smart device, wherein said encrypting and writing is performed by the smart device, whereby the transaction requested by the smart device owner is allowed to be processed.

8. The method of claim 7, wherein the smart device is in an enrolled state or un-enrolled state.

9. The method of claim 7, wherein the personal and account information of the smart device holder are stored in the smart device after encryption using proprietary or open encryption algorithm or method.

10. The method of claim 7, wherein the authentication is activated periodically by the host application or by an explicit request from the host application.

11. The method of claim 7, wherein the authentication is terminated by a periodic activity of the host application or by an explicit request from the host application or inactivity by the smart device.

12. The method of claim 7, wherein the host application via the radio frequency identification reader is capable of determining whether the data in the shared memory area is intended for its radio frequency identification reader.

13. The method of claim 7, wherein the host application is capable of decrypting the data retrieved from the smart device to extract the matching result, associated tag identification and biometric profile code.

14. The method of claim 7, wherein the host application generates a transaction code for payment processing.

15. The method of claim 7, wherein the host application transmits the transaction code in encrypted form to a remote back-end system for transaction processing.

16. The method of claim 7, wherein the authentication data is transmitted to the host application via a wired or wireless communication channel from the smart device.

17. The method of claim 7, wherein the unique data generated from the tag identification of the radio frequency identification reader can be used as the record indexing key.

18. The method of claim 7, wherein the verifier module can modify the shared memory areas.

19. The method of claim 7, wherein the verifier module is capable of determining whether there is any radio frequency identification reader within range using radio frequency detection.

20. The method of claim 7, wherein the smart device uses a light emitting diode to signal the states of the smart device and to indicate when fingerprint scanning begins and ends.

21. The method of claim 7, wherein the radio frequency identification reader selects one smart device from a plurality of available smart devices by default, or as specified by the host application.

22. A method for enrolling a smart device holder as the smart device owner in a biometric authentication system comprising the steps of:

depressing the smart device scanner area by the smart device holder to activate the smart device;

determining that the smart device is in an un-enrolled state by the smart device;

scanning the fingerprints templates of the smart device holder on the smart device;

storing the fingerprint templates in the fingerprint template area of the smart device by the smart device;

starting the host application by the smart device;

displaying a form on the personal computer to enter the personal and account information by the host application;

entering the personal and account information on the form by the smart device owner;

formatting and encrypting the personal and account information by the host application; and

saving the personal and account information in the personal information storage area and reserved area of the smart device by the host application.

23. The method of claim 22, wherein the smart device is attached to a personal computer via a wire-line communication channel.

24. The method of claim 22, wherein the personal computer contains a host application for communicating with the smart device.

25. The method of claim 22, wherein the smart device is an integrated device comprising a biometric scanner, an radio frequency identification card, and shared memory areas.

26. The method of claim 22, wherein depressing the smart device scanning area activates the smart device and releasing the scanning area de-activates the smart device.

27. The method of claim 22, wherein enrollment is performed only when the smart device is in an un-enrolled state.

28. The method of claim 22, wherein the personal information may include the photo image of the device owner.

29. The method of claim 22, wherein the encryption uses open or private encryption algorithm.

30. The method of claim 22, wherein the reserved area is used for application or vendor specific information.