User Enrollment via Biometric Device

• US 20110083170A1
• Filed: 03/24/2010
• Published: 04/07/2011
• Est. Priority Date: 10/06/2009
• Status: Abandoned Application

• Current Assignee: Synaptics Incorporated
• Original Assignee: Validity Sensors Incorporated (Synaptics Incorporated)
• Inventors: Schwab, Frank, Baghdasaryan, Davit, Hattery, Larry, Chan, Philip Yiu Kwong, Kesanupalli, Ramesh
• Application Number:
  US12/731,027
• Publication Number:
  US 20110083170A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

A web-enabled application identifies a biometric device installed in a client device. The system identifies biometric information associated with a user and creates a biometric template associated with the biometric information. The system then receives user credentials associated with the user and binds the user credentials with the biometric template.

Claims

1. A method comprising:

identifying a biometric device installed in a client device with a web-enabled application;

identifying biometric information associated with a user;

creating a biometric template associated with the biometric information;

receiving user credentials associated with the user; and

binding the user credentials with the biometric template.

2. The method of claim 1, further comprising asking the user whether they want to use enhanced security through biometrics for more secure authentication with a web site.

3. The method of claim 1, further comprising storing the user credentials and the fingerprint template in a secure storage device.

4. The method of claim 1, further comprising storing the user credentials and the fingerprint template in a storage device on the client device.

5. The method of claim 1, wherein the user credentials include a password.

6. The method of claim 1, wherein the user credentials include a cryptographic key.

7. The method of claim 1, wherein the user credentials include a random seed.

8. The method of claim 1, wherein the biometric information includes fingerprint characteristics.

9. The method of claim 1, wherein sensing fingerprint information includes reading fingerprint information during a plurality of finger swipes across the fingerprint sensor.

10. The method of claim 1, wherein the web-enabled application is a web browser application.

11. The method of claim 1, wherein the web-enabled application is a web browser plug-in.

12. The method of claim 1, wherein the web-enabled application is a software application running in an operating system and consisting of a plurality of components.

13. The method of claim 1, wherein the method is initiated in response to the user accessing a web site that supports biometric authentication.

14. The method of claim 1, further comprising binding the biometric template with a web site location.

15. The method of claim 1, further comprising binding the biometric template with a shared secret.

16. The method of claim 1, further comprising receiving a message from a web server indicating that it requires a biometric authentication.

17. The method of claim 16, wherein the message is received from the web server through an HTML tag.

18. The method of claim 1, wherein the message is received from the web server through a browser plug-in, browser extension or ActiveX control.

19. A method comprising:

accessing a web site that supports biometric authentication with a web-enabled application;

determining whether a biometric device is installed in a device accessing the web site; and

if the device accessing the web site has an installed biometric device, offering enhanced security through use of the biometric device to a user of the device accessing the web site.

20. The method of claim 19, further comprising, if the user accepts the offer of enhanced security:

generating a shared secret; and

communicating the shared secret to the device accessing the web site.

21. The method of claim 19, further comprising communicating a web site location along with the shared secret to the device accessing the web site.

22. The method of claim 19, further comprising enrolling the user if the user accepts the offer of enhanced security.

23. The method of claim 19, further comprising retrieving a unique identifier associated with the biometric device.

24. The method of claim 19, wherein offering enhanced security through use of the biometric device to a user includes inserting an HTML tag in HTML code associated with the web site.

25. The method of claim 19, wherein the web-enabled application is a web browser application.

26. The method of claim 19, wherein the web-enabled application is a web browser plug-in.

27. The method of claim 19, wherein the web-enabled application is a web browser extension.