System and method of providing system integrity and positive audit capabilities to a positive identification system

• US 5,790,674 A
• Filed: 07/19/1996
• Issued: 08/04/1998
• Est. Priority Date: 05/08/1995
• Status: Expired due to Term

• Current Assignee: Image Data Corporation, LexisNexis Risk Solutions, Inc. (RELX PLC)
• Original Assignee: Image Data Corporation
• Inventors: Houvener, Robert C., Hoenisch, Ian P.
• Primary Examiner(s): BARRON JR, GILBERTO
• Application Number:
  US08/684,677
• Time in Patent Office: 746 Days
• Field of Search: 380/23, 382/115, 340/825.34
• US Class Current: 713/185
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/253 visually
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1075 PIN is checked remotely

Abstract

The present invention is a system and method of providing system integrity and positive audit capabilities to a positive identification system. The use of access authority information units to gain access to the positive identification system solves the problems of open, unsecured and unauditable access to data for use in point of use identification systems. In order to secure the rights to the data that is needed to make mass identification systems operate, it must be shown that records will be closed and secure, as well as that there will be an audit trail of access that is made to the data. This system solves those problems through the use of a system and method for identification with biometric data and/or personal identification numbers and/or personalized devices embedded with codes unique to their assigned users.

Claims

1. A system for providing access integrity and positive audit capabilities to a positive identification system comprising:

a point of identification terminal having a means for accepting an access authority information unit presented by a user of the system in order to gain access to the system, a means for accepting information presented by a person to be positively identified at a point of identification and a means for displaying digital photographic images of persons;

at least one remote database site having stored therein a database comprising a plurality of said access authority information units and a plurality of digital photographic images of persons to be identified, wherein each of said access authority information units corresponds to a single system user and at least one of said digital photographic images corresponds to said information accepted at the point of identification terminal;

a means of communciating between said point of identification terminal and said remote database site to interchange information between the two;

a means for verifying that said point of identification terminal is authorized to access said remote database site; and

a means for verifying that said system user has compared the digital photographic images displayed on the display means with the physical appearance of said person being identified at the point of identification terminal and that a match exists between at least one of said digital photographic images and the physical appearance of said person being identified.

2. The system for providing access integrity and positive audit capabilities to a positive identification system of claim 1, wherein each said access authority information unit comprises a memorized personal identification number assigned to each authorized user of the system.

3. The system for providing access integrity and positive audit capabilities to a positive identification system of claim 1, wherein each said access authority information unit comprises an electronic key-based personal identification number assigned to each authorized user of the system.

4. The system for providing access integrity and positive audit capabilities to a positive identification system of claim 1, wherein each said access authority information unit comprises a memorized personal identification number and an electronic key-based personal identification number both assigned to a user of the system.

5. A method for providing access integrity and positive audit capabilities to a positive identification system comprising the steps of:

registering a plurality of system users by assigning at least one unique access authority information unit to each said system user;

logging a system user onto the positive identification system by inputting at least one access authority information unit assigned to said system user into said positive identification system;

establishing communications between a point of identification terminal and at least one database site having maintained therein a database comprising a plurality of valid access authority information units and a plurality of biometric images associated with persons to be identified, verifying that said positive identification terminal is authorized to access said remote database site and interchanging information, including biometric images between the two;

comparing each said access authority information unit input into said positive identification system with said database of valid access authority information units maintained at said remote database site;

granting access to said system user if a match exists between each said access authority information unit input into the system and a valid access authority information unit maintained in said valid access authority information unit database;

accepting information presented by a person to be positively identified at a point of identification and inputting said information presented into said positive identification system;

comparing at least one digital biometric image displayed on a display means at said point of identification terminal with a physical biometric of the person to be positively identified;

acknowledging the verification of the identity of the person to be identified if a match exists; and

storing the access authority information unit along with said information presented at said point of identification in a transaction record.

6. The method for providing access integrity and positive audit capabilities to a positive identification system as claimed in claim 5, wherein the step of registering said plurality of system users comprises assigning a unique personal identification number to each system user as said unique access authority information unit.

7. The method for providing access integrity and positive audit capabilities to a positive identification system as claimed in claim 5, wherein the step of registering said plurality of system users comprises assigning a unique electronic key to each system user as said unique access authority information unit, wherein each said electronic key comprises a unique code to be read by said system.

8. The method for providing access integrity and positive audit capabilities to a positive identification system as claimed in claim 5, wherein the step of registering said plurality of system users comprises assigning a unique electronic key and a unique personal identification number to each system user as said unique access authority information units, wherein each said electronic key comprises a unique code to be read by said system and said personal identification number is memorized by said system user.

9. The method for providing access integrity and positive audit capabilities to a positive identification system as claimed in claim 5 further comprising the step of analyzing transactions off-line to identify out of norm patterns in order to detect fraudulent transactions.

10. A method for providing access integrity and positive audit capabilities to a positive identification system comprising the steps of:

registering a plurality of system users by assigning at least one unique access authority information unit to each said system user;

mapping a biometric associated with each system user to each unique access authority information unit assigned to said system user;

logging a system user onto the system by inputting at least one of said access authority information units assigned to said system user into said positive identification system;

comparing each said access authority information unit input into said positive identification system with a database of valid access authority information units maintained by the positive identification system at a remote database site;

displaying said biometric mapped to said access authority information unit input into said positive identification system at said point of identification;

performing a third party comparison of said biometric displayed at said point of identity verification with the corresponding physical biometric of said system user present at the point of identification;

indicating that a match exists by inputting an access authority information unit assigned to the third party responsible for verifying the identity of the system user into the system at the point of identification;

storing the third parties access authority information unit with the system user'"'"'s authority information unit as a system user verification transaction record;

granting access to said system user if a biometric match exists and a match exists between each said access authority information unit input into the system and a valid access authority information unit maintained in said valid access authority information unit database;

accepting information presented by a person to be positively identified at a point of identification and inputting said information presented into said positive identification system;

comparing a second, identifying information unit provided at the point of identification with a biometric of the person to be positively identified;

verifying the identity of the person to be identified if a match exists; and

storing the access authority information unit along with said information presented at said point of identification and said identifying information unit as a transaction record.

11. The method for providing access integrity and positive audit capabilities to a positive identification system of claim 10, wherein said biometric associated with each system user is a digital image of said user.