UNIVERSAL SECURE REGISTRY

• US 20070288758A1
• Filed: 06/08/2007
• Published: 12/13/2007
• Est. Priority Date: 02/21/2006
• Status: Active Application

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Kenneth P. Weiss
• Inventors: WEISS, KENNETH
• Granted Patent: US 7,809,651 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 : Authentication

Abstract

A system and method for validating an identity of a user to enable or prevent an occurrence of an event is disclosed. In one embodiment, the system includes a first device including a wireless transmitter which is configured to transmit validation information, a second device including a wireless receiver configured to receive the validation information and to further transmit the validation information, and a secure system in communication with the second device. The secure system includes a database configured to receive the validation information transmitted from the second device, and to transmit additional information to the second device following a receipt of the validation information to assist the second device in either enabling or preventing the occurrence of the event.

Claims

1. A method of authenticating an identity of a first entity, comprising the acts of:

wirelessly transmitting from a first device, first encrypted authentication information of the first entity;

receiving with a second device the wirelessly transmitted first encrypted authentication information;

decrypting with the second device, the first wirelessly encrypted authentication information to provide the first authentication information of the first entity to the second device;

authenticating the identity of the first entity based upon the first authentication information; and

acting based on the authenticated identity of the first entity.

2. The method of claim 1, further comprising:

receiving first authentication information about the first entity with the first device;

transmitting the authentication information about the first entity to a secure database;

determining whether or not the first entity is allowed to access the first device based on the first authentication information; and

transmitting an enablement signal to the first device indicating to enable nor not enable the first entity to access the first device.

3. The method of claim 2, further comprising allowing or not allowing operation of the first device based on the enablement signal.

4. The method of claim 2, wherein the act of receiving the first authentication information of the first entity comprises receiving biometric information of the first entity by detecting the biometric information with the first device.

5. The method of claim 4, wherein the act of transmitting the first authentication information about the first entity to a secure database comprises generating a non-predictable signal from the biometric information.

6. The method of claim 5, wherein the act of generating the non-predictable signal from the biometric information comprises generating a time varying non-predictable signal from the biometric information.

7. The method of claim 5, wherein the act of receiving biometric information of the first entity comprises receiving a voice signature of the first entity with the first device;

and

the act of generating the non-predictable signal from the biometric information comprises mixing the voice signature of the first entity with a random code to generate the non-predictable signal.

8. The method of claim 7, wherein the act of transmitting the enablement signal to the first device comprises sending the random code to the first device.

9. The method of claim 5, wherein the act of receiving biometric information of the first entity comprises receiving fingerprint data of the first entity with the first device;

and

the act of generating the non-predictable signal from the biometric information comprises mixing the fingerprint data of the first entity with a random code to generate the non-predictable signal.

10. The method of claim 9, wherein the act of transmitting the enablement signal to the first device comprises sending the random code to the first device.

11. The method of claim 1, further comprising authenticating information of the first entity with the first device;

and

allowing or not allowing operation of the first device based on the act of authenticating the information.

12. The method of claim 11, wherein the act of authenticating the information of the first entity comprises authenticating biometric information of the first entity with the first device.

13. The method of claim 12, wherein the act of authenticating the biometric information of the first entity comprises authenticating a voice signature of the first entity.

14. The method of claim 12, wherein the act of authenticating the biometric information of the first entity comprises authenticating a finger print of the first entity.

15. The method of claim 11, wherein the act of authenticating the information of the first entity comprises authenticating a PIN of the first entity with the first device.

16. The method of claim 1, further comprising:

authenticating information of the second entity with the second device; and

allowing or not allowing operation of the second device based on the authenticated information of the second entity.

17. The method of claim 16 wherein the act of authenticating the information of the second entity comprises authenticating biometric information of the second entity with the second device.

18. The method of claim 17, wherein the act of authenticating the biometric information of the second entity comprises authenticating a voice signature of the second entity.

19. The method of claim 17, wherein the act of authenticating the biometric information of the second entity comprises authenticating a finger print of the second entity.

20. The method of claim 16, further comprising deleting any data stored on the respective device if the respective authentication information of the entity does not match stored authentication information.

21. The method of claim 16, further comprising transmitting second authentication information about the second entity to a secure database;

and

determining whether the second entity is allowed access to the secure database.

22. The method of claim 21, further comprising acts of:

transmitting from the second device to the secure registry database the first authentication information;

using the first authentication information, by the secure database, to access first authenticating indicia of the first entity; and

transmitting the first authenticating indicia from the secure database to the second device.

23. The method of claim 22, further comprising an act of generating a non-predictable code at the second device from the first authentication information.

24. The method of claim 23, wherein the non-predictable code is a time-varying code.

25. The method of claim 24, further comprising acts of:

communicating the time-varying code from the second device to the secure registry database; and

determining at the secure registry database from the time-varying code the first authentication information.

26. The method of claim 22, further comprising communicating with the secure database over any of a wide area network, the Internet, and a wireless network.

27. The method of claim 1, wherein the act of wirelessly transmitting is by any of a Bluetooth wireless signal, an infrared wireless signal, an RF wireless signal or an electromagnetic wireless signal.

28. The method of claim 1, further comprising storing public keys of a plurality of first entities on the second device.

29. The method of claim 28, further comprising looking up the public key of the first entity on the second device;

and

wherein the act of decrypting of the first authentication information by the second device is done with the public key of the first entity.

30. The method of claim 29, wherein the first authentication information includes any of a name, an identification number, an e-mail address, and at least a portion of a picture of the first entity.

31. The method of claim 28, further comprising storing a private key of the second entity on the second device.

32. The method of claim 28, further comprising the act of periodically updating the second device with the public keys of the plurality of first entities.

33. The method of claim 1, wherein the act of authenticating the identity of the first entity comprises accessing picture data stored on the second device based on the decrypted first authentication information;

and

viewing the picture information by the second entity.

34. The method of claim 33, wherein the act of transmitting the first encrypted authentication information comprises transmitting a portion of the picture of the first entity.

35. The method of claim 34, wherein the act of accessing picture data stored on the second device comprises accessing a remainder of the picture of the first entity, and combining the portion of the picture of the first entity and the remainder of the picture of the first entity to provide the picture of the first entity.

36. The method of claim 1, further comprising requiring communication by at least one of the first and second devices with the secure database at periodic intervals so as to remain active.

37. The method of claim 35, further comprising deleting data stored on the respective device if the communication is not periodically done.

38. The method of claim 1, wherein the act of transmitting the first encrypted authentication information comprises transmitting the encrypted authentication information which has been encrypted with a first private key of the first entity.

39. The method of claim 1, further comprising deleting any data stored on either the first or second device in response to receipt of a delete command from a remote secure database.

40. The method of claim 1, further comprising the act of requesting, with the second device, the first encrypted authentication information from the first device.

41. A system for validating an identity of a first entity, comprising:

a first wireless device comprising;

a first wireless transmitter and receiver configured to transmit a first wireless signal including first encrypted authentication information;

a first processor configured to compare stored biometric data with detected biometric data of the first entity and configured to enable or disable use of the first device based on a result of the comparison, and configured to encrypt first authentication information with a first private key into the first encrypted authentication information;

a first biometric detector for detecting biometric data of the first entity; and

a first memory for storing biometric data of the first entity, a private key of the first entity authorized to use the first device, and the first authentication information.

42. The system of claim 41, further comprising a second wireless device comprising:

a second wireless transmitter and receiver configured to receive the first wireless signal and to process the first wireless signal;

a second processor configured to compare detected biometric data of a second entity with stored biometric data and configured to enable or disable use of the second device based upon a result of the comparison, and configured to decrypt the first authentication information received in the first wireless signal with a first public key of the first entity;

a biometric detector for detecting biometric data of a second entity;

a second memory storing biometric data of the second entity and a plurality of first public keys of a plurality of first entities.

43. The system of claim 42, wherein in each of the first wireless transmitter/receiver and the second wireless device are any of Bluetooth enabled devices, IR enabled devices, RF enabled devices, and electromagnetic enabled devices.

44. The system of claim 42, wherein the biometric data is fingerprint data and each biometric detector is a fingerprint sensor.

45. The system of claim 42, wherein the second processor is configured to use the public key of the first entity to decrypt the encrypted first authentication information.

46. The system of claim 41, wherein the first encrypted authentication information includes a public ID of the first entity including any of a name, an identification number and an e-mail address.

47. The system of claim 41, wherein the first encrypted authentication information includes an encrypted DES key of the first entity.

48. The system of claim 47, wherein the first encrypted authentication information also includes a DES key encrypted portion of biometric data of the first entity.

49. The system of claim 48, wherein the portion of biometric data is a portion of a digital image of the first entity.

50. The system of claim 41, wherein the first encrypted authentication information comprises a digital signature of the first entity.

51. The system of claim 41, wherein the first encrypted authentication information comprises a one-time random code of the first entity.

52. The system of claim 41, wherein the first memory further comprises a portion of authentication data of a plurality of second entities.

53. The system of claim 41, wherein the first memory further comprises public keys of a plurality of second entities.

54. The system of claim 53, wherein the first wireless transmitter/receiver is also configured to receive and process a second wireless signal comprising second encrypted authentication information of the second entity.

55. The system of claim 42, wherein the second memory also comprises a private key of the second entity.

56. The system of claim 42, wherein the second memory also comprises a portion of authentication data of a plurality of first users.

57. The system of claim 42, wherein the biometric data of the plurality of first users comprises at least a portion of a digital image of the plurality of first users.

58. The system of claim 42, wherein the second wireless transmitter/receiver is also configured to transmit a second wireless signal comprising a second encrypted authentication information of the second entity.

59. The system of claim 42, wherein at least one of the first and second wireless devices further comprise an additional wireless transmitter/receiver for communicating wirelessly.

60. The system of claim 42, wherein the first and second wireless devices can be any of a handheld device, a cell phone, a PDA, a PC, a credit card sized device, an ID badge, a key FOB, a passport, and a wrist watch.

61. The system of claim 42, wherein the respective processor of one of the first wireless device and second wireless device is configured to delete data stored in the respective memory if the biometric information of the respective entity does not match the biometric data stored in the respective memory.

62. The system of claim 42, further comprising a secure database comprising biometric information of a plurality of first entities.

63. The system of claim 62, wherein the biometric information of the plurality of first entities includes at least a portion of digital image data of the plurality of first entities.

64. The system of claim 62, wherein the secure database comprises data of a plurality of second entities authorized to access the secure database.

65. The system of claim 62, wherein the respective processor of one of the first and second devices is configured to delete data stored on the respective device if the respective device does not periodically communicate with the secure database.

66. The system of claim 62, wherein the respective processor of the first and second device is configured to delete data stored in the respective memory in response to receipt of a delete data command from the secure database.

67. A first wireless device, comprising:

a processor configured to enable operation of the first wireless device if it receives an enablement signal validating first biometric information of a first entity and configured to generate a non-predictable signal from the biometric information;

a first wireless transmitter and receiver configured to transmit a first wireless signal including first encrypted biometric information of the first entity and to receive the enablement signal; and

a first biometric detector for detecting the first biometric information of the first entity.

68. The first wireless device of claim 67, wherein the biometric detector comprises a fingerprint detector that detects a fingerprint of the first entity.

69. The first wireless device of claim 67, wherein the biometric detector comprises a voice signature detector that detects a voice signature of the first entity.

70. A system, comprising:

the first wireless device of claim 67, and;

further comprising a secure database configured receive the first wireless signal, to authenticate or not authenticate the first biometric information of the first entity, and to provide the enablement signal validating or not validating the first biometric data of the first entity.

71. The system of claim 70, wherein the secure database further comprises biometric data of a plurality of first entities.

72. The system of claim 70, wherein the processor is configured to generate the non-predictable signal from the biometric information by generating a time varying non-predictable signal from the biometric information.

73. The system of claim 72, wherein the processor is configured to generate the non-predictable signal from the biometric information by mixing the biometric information of the first entity with a random code to generate the non-predictable signal.

74. The system of claim 73, wherein the secure database is configured to transmit the enablement signal to the first device including the random code so as to authenticate the secure database to the first device.

75. The first wireless device of claim 67, further comprising memory for storing a private key of the first entity authorized to use the first device.