Secure User Authentication Using Biometric Information

• US 20110083016A1
• Filed: 03/24/2010
• Published: 04/07/2011
• Est. Priority Date: 10/06/2009
• Status: Active Grant

• Current Assignee: Synaptics Incorporated
• Original Assignee: Validity Sensors Incorporated (Synaptics Incorporated)
• Inventors: Schwab, Frank, Baghdasaryan, Davit, Hattery, Larry, Chan, Philip Yiu Kwong, Kesanupalli, Ramesh
• Granted Patent: US 8,799,666 B2
• Time in Patent Office: Days
• US Class Current: 713/180
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

An apparatus includes a biometric sensor capable of identifying biometric information associated with a user. A storage device coupled to the biometric sensor stores user information. A biometric service is coupled to the biometric sensor and capable of communicating with the biometric sensor. A web browser application having a biometric extension communicates with the biometric sensor via the biometric service. The web browser'"'"'s biometric extension is capable of communicating with multiple web servers.

Claims

1. An apparatus comprising:

a biometric sensor configured to identify biometric information associated with a user;

a storage device coupled to the biometric sensor and configured to store user information;

a biometric service coupled to the biometric sensor and configured to communicate with the biometric sensor; and

a web browser application executing on the apparatus, wherein the web browser application includes a biometric extension configured to communicate with the biometric sensor via the biometric service, and wherein the biometric extension is further configured to communicate with a plurality of web servers.

2. The apparatus of claim 1, wherein the web browser application is further configured to receive user credentials associated with the user.

3. The apparatus of claim 1, wherein the web browser application is further configured to receive user credentials associated with the user from one of the plurality of web servers.

4. The apparatus of claim 1, wherein the storage device is configured to store a secret key associated with the user.

5. The apparatus of claim 1, further comprising an encryption key embedded within the biometric sensor.

6. The apparatus of claim 1, wherein the biometric extension has an associated digital signature.

7. The apparatus of claim 1, wherein the biometric sensor is further configured to release an authentication token to the biometric service upon authentication of the user.

8. The apparatus of claim 7, wherein the authentication token is a secret key.

9. The apparatus of claim 7, wherein the authentication token is a one time password.

10. The apparatus of claim 7, wherein the authentication token is an RSA signature.

11. The apparatus of claim 1, wherein the biometric sensor is a fingerprint sensor.

12. The apparatus of claim 11, wherein the fingerprint sensor is a placement fingerprint sensor.

13. The apparatus of claim 11, wherein the fingerprint sensor is a swipe fingerprint sensor.

14. A method comprising:

identifying a biometric sensor associated with a client device, wherein the biometric sensor is identified by a biometric extension associated with a web browser application;

receiving a token from the biometric sensor in response to a valid user activation of the biometric sensor;

communicating the token to a web server using the biometric extension;

communicating a user identifier associated with the user to the web server, wherein the user identifier is communicated by the biometric extension; and

communicating a biometric sensor identifier associated with the biometric sensor to the web server using the biometric extension.

15. The method of claim 14, further comprising generating a request to authenticate the user of the biometric sensor.

16. The method of claim 14, wherein the method is initiated in response to the web browser application accessing a web site that supports biometric authentication.

17. The method of claim 16, further comprising determining whether the user is enrolled with the web site being accessed.

18. The method of claim 14, further comprising creating a secure communication link between the biometric extension and the web server.

19. The method of claim 14, further comprising receiving a session identifier from the web server using the biometric extension.

20. The method of claim 14, wherein the token is one of a secret key, a one time password, and an RSA signature.

21. A method comprising:

identifying a biometric sensor associated with a client device, wherein the biometric sensor is identified by a biometric service in communication with a web browser application;

receiving a token from the biometric sensor in response to a valid user activation of the biometric sensor;

communicating the token to a web server using the biometric service;

communicating a user identifier associated with the user to the web server, wherein the user identifier is communicated by the biometric service; and

communicating a biometric sensor identifier to the web server using the biometric service.

22. The method of claim 21, further comprising generating a request to authenticate the user of the biometric sensor.

23. The method of claim 21, further comprising creating a secure communication link between the biometric extension and the web server.

24. The method of claim 21, further comprising receiving a session identifier from the web server using the biometric service.