VALIDATING BIOMETRICS WITHOUT SPECIAL PURPOSE READERS

• US 20170237731A1
• Filed: 05/04/2017
• Published: 08/17/2017
• Est. Priority Date: 03/25/2014
• Status: Active Grant

• Current Assignee: Identity.Ninja Inc.
• Original Assignee: Ravi Ganesan
• Inventors: GANESAN, Ravi
• Granted Patent: US 10,050,958 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/108 Source integrity

Abstract

To validate a user'"'"'s identity a network validation server receives a smartphone image of a preexisting user credential, including both a user biometric and a unique identifier associated with the credential and stores them in a database. The validation server also receives the unique identifier from a registrar network device seeking to validate the user, and in response transmits a validation code to the user'"'"'s smartphone for display by the user'"'"'s smartphone and/or the registrar'"'"'s network device for display by the registrar'"'"'s network device. The validation server additionally receives confirmation from the registrar'"'"'s network device that a validation code displayed on the user'"'"'s smartphone is the transmitted validation, thereby confirming that the user has been validated by the registrar.

Claims

1. A method of validating the identity of a user, comprising:

receiving, via a network by a validation service provider from a validation app executing on a smartphone of a user, a smartphone image of a preexisting credential of the user including both a biometric of the user and a unique identifier associated with the preexisting user credential;

storing, by the validation service provider, the received smartphone image;

receiving, via the network by the validation service provider from a validation application executing on a network device of a registrar seeking to validate the user, the unique identifier associated with the preexisting user credential;

transmitting, via the network in response to receipt of the unique identifier associated with the preexisting user credential, a validation code from the validation service provider to one of or both (a) the user'"'"'s smartphone for display by the validation app executing on the user'"'"'s smartphone and (b) the registrar'"'"'s network device for display by the validation application executing on the registrar'"'"'s network device; and

receiving, via the network by the validation service provider from the validation application executing on the registrar'"'"'s network device, confirmation that a validation code displayed on the user'"'"'s smartphone is the transmitted validation, thereby confirming that the user has been validated by the registrar.

2. The method according to claim 1, further comprising:

after receipt of the confirmation, transmitting, via the network, the stored preexisting user credential image from the validation service provider to the registrar'"'"'s network device for display by the validation application executing on the registrar'"'"'s network device, and use by the registrar to further validate the user.

3. The method according to claim 1, wherein:

the network is the Internet; and

the preexisting user credential is one of (i) a driver'"'"'s license including both the user'"'"'s photograph and a unique driver'"'"'s license number and (ii) a passport including both the user'"'"'s photograph and a unique passport number.

4. The method according to claim 1, further comprising:

prior to transmitting the validation code, validating, by the validation service provider, at least one of (i) that the preexisting user credential associated with the received unique identifier remains valid, and (ii) that a phone number of the user'"'"'s smartphone is a phone number associated with a name of the user.

5. The method according to claim 1, further comprising:

receiving, via the network by the validation service provider from the validation application executing on the user'"'"'s smartphone, a notification that a biometric has been used to unlock the user'"'"'s smartphone.

6. The method according to claim 1, further comprising:

again receiving, via the network by the validation service provider from the validation app executing on the user'"'"'s smartphone, the preexisting user credential image;

transmitting, via the network from the validation service provider to a network device of another registrar, the again received preexisting user credential for display by a validation application executing on the other registrar'"'"'s network device;

receiving, via the network by the validation service provider from the validation application executing on the other registrar'"'"'s network device, a request for a smartphone image of the user;

transmitting, in response to the received request, a request for a smartphone image of the user, via the network from the validation service provider to the user'"'"'s smartphone for display by the validation app executing on the user'"'"'s smartphone;

receiving, via the network by the validation service provider from the validation app executing on the user'"'"'s smartphone, a smartphone image of the user; and

transmitting, via the network from the validation service provider to the other registrar'"'"'s network device, the received smartphone image of the user for display by the validation application executing on the other registrar'"'"'s network device and for comparison by the other registrar with the image of the user included in the previously transmitted preexisting user credential to thereby validate the user to the other registrar.

7. The method according to claim 6, further comprising:

prior to transmitting the again received preexisting user credential, validating, by the validation service provider, that the again received preexisting user credential remains valid.

8. The method according to claim 6, wherein:

the again received preexisting user credential image is signed with a digital signature of the user; and

the transmitted again received preexisting user credential is the received digitally signed preexisting user credential.

9. The method according to claim 6, wherein:

the received request for a smartphone image of the user is a request for a smartphone image of the user in a particular pose; and

the transmitted request for a smartphone image of the user is a request for a smartphone image of the user in the particular pose.