METHOD, SYSTEM, AND COMPUTER PROGRAM PRODUCT FOR PROVIDING AUTHENTICATION AND ENTITLEMENT SERVICES

• US 20070011463A1
• Filed: 07/06/2005
• Published: 01/11/2007
• Est. Priority Date: 07/06/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Garfinkle, Steven
• Application Number:
  US11/160,720
• Publication Number:
  US 20070011463A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition

Abstract

A method, system, and computer program product for providing authentication and entitlement services is provided. The method includes creating a profile record and associating an access element with the record, the access element coupled to a biometric scan device. The method also includes receiving a first instance of at least two biometric scans. The method further includes receiving a first sequence for the first instance, which specifies an order of the at least two biometric scans. The method also includes receiving an access request via the access element and the biometric scan device, which includes a second instance of at least two biometric scans, and which are received in a second sequence. The method further includes comparing the first and second instances and the first and second sequences, and granting the access request only if the first and second instances match and only if the first and second sequences match.

Claims

1. A method for providing authentication and entitlement services, comprising:

creating a profile record and associating an access element with the profile record, the access element communicatively coupled to at least one biometric scan device;

receiving a first instance of at least two biometric scans from an individual and storing the first instance in the profile record, wherein a first of the at least two biometric scans comprises a subject that is different than a second of the at least two biometric scans;

receiving a first sequence for the first instance and storing the first sequence in the profile record, the first sequence specifying an order of the at least two biometric scans;

receiving an access request via the access element and the at least one biometric scan device, the access request including a second instance of at least two biometric scans, the at least two biometric scans of the second instance received in a second sequence;

comparing the first and second instances and the first and second sequences; and

granting the access request only if the first instance matches the second instance and only if the first sequence matches the second sequence.

2. The method of claim 1, further comprising:

associating security information with the profile record, the security information including at least one of;

a password;

encryption key data; and

financial account data;

wherein the granting the access request includes at least one of;

providing access to the target system includes providing access to the security information; and

retrieving the security information and providing automatic access via the security information to at least one protected;

file, document, application, database, and account.

3. The method of claim 1, wherein the granting the access request includes providing access to a physical location.

4. The method of claim 1, further comprising:

receiving user-specified alert settings and storing the user-specified alert settings in the profile record, the user-specified alert settings including;

conditions for generating an alert, the conditions including at least one of;

a failed access attempt;

an access attempt occurring off-schedule; and

a defined number of failed access attempts reached;

a manner of conveying the alert, comprising at least one of;

email;

telephone call;

an alarm trigger; and

a pager alert; and

a destination for conveying the alert, comprising at least one of;

an individual that created the alert settings;

a security department;

a system administrator; and

police department.

5. The method of claim 1, wherein the access element comprises at least one of:

a personal computer;

a host-attached workstation;

a personal digital assistant;

a telephone;

an automated teller machine; and

a controlled access area.

6. The method of claim 1, wherein the biometric scans include at least one of:

finger print scan;

retina scan;

hand geometry; and

voice recognition.

7. The method of claim 1, wherein the biometric scan device comprises at least one of:

an optical scanner; and

a capacitance scanner.

20. The computer program product of claim 15, wherein the biometric scans include at least one of:

finger print scan;

retina scan;

hand geometry; and

voice recognition.

8. A system for providing authentication and entitlement services, comprises:

a host system in communication with an access element via a network, the access element communicatively coupled to at least one biometric scan device; and

a security scan application executing on the host system, the security scan application performing;

creating a profile record and associating the access element with the profile record;

receiving a first instance of at least two biometric scans from an individual and storing the first instance in the profile record, wherein a first of the at least two biometric scans comprises a subject that is different than a second of the at least two biometric scans;

receiving a first sequence for the first instance and storing the first sequence in the profile record, the first sequence specifying an order of the at least two biometric scans;

receiving an access request via the access element and the at least one biometric scan device, the access request including a second instance of at least two biometric scans, the at least two biometric scans of the second instance received in a second sequence;

comparing the first and second instances and the first and second sequences; and

granting the access request only if the first instance matches the second instance and only if the first sequence matches the second sequence.

9. The system of claim 8, wherein the security scan application further performs associating security information with the profile record, the security information including at least one of:

a password;

encryption key data; and

financial account data;

wherein the granting the access request includes at least one of;

providing access to the target system includes providing access to the security information; and

retrieving the security information and providing automatic access via the security information to at least one protected;

file, document, application, database, and account.

10. The system of claim 8, wherein the granting the access request includes providing access to a physical location.

11. The system of claim 8, wherein the security scan application further performs:

receiving user-specified alert settings and storing the user-specified alert settings in the profile record, the user-specified alert settings including;

conditions for generating an alert, the conditions including at least one of;

a failed access attempt;

an access attempt occurring off-schedule; and

a defined number of failed access attempts reached;

a manner of conveying the alert, comprising at least one of;

email;

telephone call;

an alarm trigger; and

a pager alert; and

a destination for conveying the alert, comprising at least one of;

an individual that created the alert settings;

a security department;

a system administrator; and

police department.

12. The system of claim 8, wherein the access element comprises at least one of:

a personal computer;

a host-attached workstation;

a personal digital assistant;

a telephone;

an automated teller machine; and

a controlled access area.

13. The system of claim 8, wherein the biometric scans include at least one of:

finger print scan;

retina scan;

hand geometry; and

voice recognition.

14. The system of claim 8, wherein the biometric scan device comprises at least one of:

an optical scanner; and

a capacitance scanner.

15. A computer program product for providing authentication and entitlement services, the computer program product including instructions for executing a method, the method comprising:

creating a profile record and associating an access element with the profile record, the access element communicatively coupled to at least one biometric scan device;

receiving a first instance of at least two biometric scans from an individual and storing the first instance in the profile record, wherein a first of the at least two biometric scans comprises a subject that is different than a second of the at least two biometric scans;

receiving a first sequence for the first instance and storing the first sequence in the profile record, the first sequence specifying an order of the at least two biometric scans;

receiving an access request via the access element and the at least one biometric scan device, the access request including a second instance of at least two biometric scans, the at least two biometric scans of the second instance received in a second sequence;

comparing the first and second instances and the first and second sequences; and

granting the access request only if the first instance matches the second instance and only if the first sequence matches the second sequence.

16. The computer program product of claim 15, wherein the method further comprises:

associating security information with the profile record, the security information including at least one of;

a password;

encryption key data; and

financial account data;

wherein the granting the access request includes at least one of;

providing access to the target system includes providing access to the security information; and

retrieving the security information and providing automatic access via the security information to at least one protected;

file, document, application, database, and account.

17. The computer program product of claim 15, wherein the granting the access request includes providing access to a physical location.

18. The computer program product of claim 15, wherein the method further comprises:

receiving user-specified alert settings and storing the user-specified alert settings in the profile record, the user-specified alert settings including;

conditions for generating an alert, the conditions including at least one of;

a failed access attempt;

an access attempt occurring off-schedule; and

a defined number of failed access attempts reached;

a manner of conveying the alert, comprising at least one of;

email;

telephone call;

an alarm trigger; and

a pager alert; and

a destination for conveying the alert, comprising at least one of;

an individual that created the alert settings;

a security department;

a system administrator; and

police department.

19. The computer program product of claim 15, wherein the access element comprises at least one of:

a personal computer;

a host-attached workstation;

a personal digital assistant;

a telephone;

an automated teller machine; and

a controlled access area.