Wireless biometric cardholder apparatus, method, & system

• US 20070040017A1
• Filed: 08/22/2005
• Published: 02/22/2007
• Est. Priority Date: 08/22/2005
• Status: Abandoned Application

• Current Assignee: Biometric Associates LP
• Original Assignee: Biometric Associates LP
• Inventors: Kozlay, Douglas
• Application Number:
  US11/208,945
• Publication Number:
  US 20070040017A1
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06K 19/07354 by biometrically sensitive means, e.g. fingerprint sensitive fingerprint sensors in general G06V40/12; biometrically activated access control G07C9/25
• CPC Class Codes: G06K 19/07741 comprising a first part operating as a regular record carrier and a second attachable part that changes the functional appearance of said record carrier, e.g. a contact-based smart card with an adapter part which, when attached to the contact card makes the contact card function as a non-contact card
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/062 Pre-authentication

Abstract

A wireless biometric cardholding apparatus is disclosed. The invention facilitates remote reading and writing smartcards after a user has been biometrically authenticated. The invention promotes secure, wireless exchange of data between standard smartcards and an application, via a remote external RF transceiver. This invention enables enrolled users to access physical, logical, or financial resources and/or other protected assets. The cardholding apparatus holds a conventional identifying card, badge, or smartcard. One preferred embodiment is constructed of clear plastic and/or is of sufficiently open design that it displays visible ID credentials. The invention actively reads identification data from the smartcard, cryptographically protects data, and transmits it by means of radio or other wireless communications to a reader terminal. The cardholding apparatus also contains a biometric authenticator that positively identifies the cardholder, and inhibits transmission until after successful authentication completion. The apparatus protects the cardholder from identity theft by preventing unauthorized tracking.

Claims

1. A cardholding apparatus adapted for wireless exchange of data between a smartcard and an application via an external RF transceiver, comprising:

a smartcard enclosure having an insertion slot for inserting said smartcard therewithin;

at least one processor;

an authentication subsystem adapted for biometric fingerprint authentication of a user;

a smartcard reader subsystem coupled to said insertion slot and adapted for reading data from said smartcard;

a wireless communications subsystem for exchanging data between said smartcard and said application via said external RF transceiver;

and

a power subsystem.

2. The apparatus of claim 1, wherein said biometric fingerprint authentication occurs prior to said wireless exchange of data, and wherein said successful biometric fingerprint authentication of said user enables said cardholding apparatus to access data disposed within said smartcard.

3. The apparatus of claim 1, wherein biometric fingerprint matching processing occurs on at least one of said cardholding apparatus and said smartcard and a host system.

4. The apparatus of claim 1, wherein said cardholding apparatus is further adapted to transmit a successful authentication completed signal to said application via said external RF transceiver to signify that at least one fingerprint of said user has been successfully authenticated by said authentication subsystem.

5. The apparatus of claim 1, wherein said smartcard enclosure further comprises transparent material to permit an inserted smartcard to be visually inspected without requiring removal from said enclosure.

6. The apparatus of claim 1, wherein fingerprint templates reside on at least one of said smartcard and said cardholding apparatus and a host system.

7. The apparatus of claim 1, wherein said smartcard insertion slot holds said smartcard by the bottommost part of said smartcard in order to sufficiently expose and present the topmost part of said smartcard for visual inspection.

8. The apparatus of claim 1, wherein said smartcard enclosure is comprised of material opaque to electromagnetic waves in order to block unauthorized wireless access to proximity card functions on said smartcard.

9. The apparatus of claim 1, further comprising a cryptographic subsystem.

10. The apparatus of claim 9, wherein said cryptographic subsystem is coupled to said wireless communications subsystem.

11. The apparatus of claim 9, wherein said cryptographic subsystem is adapted for encrypting data disposed upon said smartcard.

12. The apparatus of claim 9, wherein said cryptographic subsystem:

(1) is adapted to encrypt data transmitted from said apparatus to said application via said external RF transceiver prior to transmission thereof, (2) is adapted to decrypt data received from said external RF transceiver, and (3) is further adapted for authenticating both encrypted and decrypted data.

18. The apparatus of claim 1, further comprising a clip means for fastening said apparatus onto said user so said apparatus is suitable for use as an identification badgeholder.

13. A method of using a cardholding apparatus for wireless exchange of data between a smartcard and an application via an external RF transceiver, the steps comprising:

enrolling an authorized user into said cardholding apparatus;

issuing said cardholding apparatus for use by said authorized user;

inserting said smartcard into a smartcard insertion slot disposed upon said cardholding apparatus;

authenticating said authorized user with a biometric fingerprint authentication subsystem disposed upon said cardholding apparatus;

at least one of reading data from said smartcard and writing data to said smartcard, after said user has successfully completed biometric fingerprint authentication;

and

communicating via external RF transceivers said smartcard data to and from said application.

14. The method of claim 13, wherein said method additionally comprises the cryptographic data protection steps of:

(1) encrypting data disposed upon said smartcard, and (2) encrypting said data prior to transmission of said data to said application via said external RF transceiver, and (3) decrypting data received from said wireless smartcard reader when said received data is encrypted.

15. A system for secure and wireless exchange of data between a smartcard, a cardholding apparatus, and a user-selected application, via an external RF transceiver, said system comprising:

at least one authorized user;

said smartcard operated by an enrolled and authorized user;

said cardholding apparatus having a biometric fingerprint authentication subsystem;

said application;

and

said external RF transceiver.

16. The system of claim 15, further comprising a cryptographic subsystem for at least one of:

(1) encrypting data disposed within said smartcard;

(2) encrypting data extracted from said smartcard prior to transmission thereof;

(3) decrypting data received from said wireless external RF transceiver after reception thereof; and

(4) authenticating both encrypted and decrypted data in accordance with security policies.

17. The system of claim 15, where said at least one authorized user fingerprint is enrolled in at least one of said smartcard, said cardholding apparatus, and a host system.