Use sensitive identification system

• US 5,802,199 A
• Filed: 03/17/1997
• Issued: 09/01/1998
• Est. Priority Date: 11/28/1994
• Status: Expired due to Term

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Smarttouch Incorporated
• Inventors: Lee, Jonathan Alexander, Hoffman, Ned, Pare, Jr., David Ferrin
• Primary Examiner(s): Boudreau, Leo
• Assistant Examiner(s): Tadayon, Bijan
• Application Number:
  US08/818,872
• Time in Patent Office: 533 Days
• Field of Search: 340/825.34, 340/825.33, 340/825.31, 395/244, 395/241, 395/243, 380/21, 380/24, 902/26, 902/1, 902/2, 902/3, 902/4, 902/5, 902/6, 902/8, 902/9, 902/10, 902/12, 902/13, 902/22, 902/23, 902/24, 902/25, 902/27, 235/380, 235/375, 235/376, 235/379, 235/381, 235/382, 235/383, 235/382.5, 235/384, 235/385, 235/386, 382/115, 382/116, 382/117, 382/118, 382/119, 382/124, 382/128, 382/181, 382/190, 382/209
• US Class Current: 382/115
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G07C 2209/14 With a sequence of inputs of different identification information
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/10 : together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 9/001 : Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: G07F 9/002 : Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The system includes a master computer having a master computer comparator. The master computer comparator further having a master user biometric database which contains or stores the biometric samples of all users registered with the identification computer system. The master computer further includes a user personal identification code group database which contains the personal identification codes of said users. The identification computer system further includes at least two local computers which are physically remote from each other. Each local computer further includes a biometric scanner; a local comparator; a data entry device; and a local user biometric database containing a subset of the biometric samples contained in the master biometric database. First interconnectors that interconnects each local computer to the master computer. When the user enters their bid biometric sample and bid personal identification code into a first local computer, the first local computer comparator compares the bid biometric sample and bid personal identification code against biometric samples and personal identification codes contained in the first local computer database to produce either a failed or successful first identification result. If the first local computer returns a failed identification result, the bid biometric sample and bid personal identification code are transmitted to the master computer for comparison of the entered bid biometric sample and bid personal identification code to personal identification codes and biometric samples stored in the master computer for producing either a failed or successful second identification result. The result of the first or second identification result is externalized from the identification computer system or displayed to the user by a display unit.

Claims

1. An identification computer system which is sensitive to use or decrease use, for determining an individual'"'"'s identity from comparison of previously recorded biometric samples and personal identification codes with a bid biometric sample and a bid identification code, said system comprising:

a. a master computer further comprising a master computer comparator, a master comparator biometric database containing the biometric samples of all users registered with the identification computer system, and a user personal identification code group database containing the personal identification codes of said users;

b. at least two local computers, physically remote from each other, each local computer further comprising;

i) a biometric scanner;

ii) a local comparator;

iii) a data entry device;

iv) a local user biometric database containing a subset of the biometric samples contained in the master biomertic database; and

v) a personal identification code database;

c. first interconnecting means for interconnecting each local computer to the master computer;

wherein

i) the user presents their bid biometric sample and bid personal identification code to a first local computer, the first local computer comparator compares the bid biometric sample and bid personal identification code with biometric samples and personal identification codes contained in the first local computer database to produce either a failed or successful first identification result;

ii) wherein if the first local computer returns a failed identification result, the bid biometric sample and bid personal identification code are transmitted to the master computer for comparison of the entered bid biometric sample and bid personal identification code to personal identification codes and biometric samples stored in the master computer for producing either a failed or successful second identification result; and

d. at least one display unit wherein said first or second identification result is externalized.

2. The system of claim 1 wherein upon return of a failed first identification result and return of a successful second identification result, the master computer transmits the biometric sample and personal identification code of the identified user to the first local computer.

3. The system of claim 1 wherein the personal identification code and biometric sample of a user is deleted from the local computer biometric databases if there has boon no attempt to identify an individual upon expiration of a predetermined time limit.

4. The system of claim 1, the at least two local computer further comprises:

a. at least one terminal apparatus that is functionally partially or fully integrated with the biometric scanner;

b. at least one code entry pad; and

c. second interconnecting means for interconnecting said biometric scanner, terminal apparatus and said code entry pad.

5. The system of claim 1 further comprising encryption and decryption means, wherein communications between the master computer and local computer are encrypted.

6. The system of claim 1 further comprising third interconnecting means for interconnecting the local computer to each other.

7. The system of claim 6 wherein the local computers have a different subset of biometric samples and personal identifications codes from each other and from the master computer.

8. The system of claim 6 wherein the first and third interconnecting means is one or more of the group comprising an ATM network, the Internet, a private intranet, a telephone network, or a cable TV network.

9. The system of claim 1 further comprising a fraud detector module further comprising a fraud biometric comparator and fraud biometric data boacs containing a subset of the biometric samples stored in the master computer.

10. The system of claim 1 further comprising means for purging biometric samples and personal identification codes from the master computer and local computer databases.

11. The system of claim 1 further comprising a computer system authenticator wherein a private code, distinet from the personal identification code and not used to gain access to the computer system, is previously gathered from the user and recorded in the master computer data bases, and is presented to only the user after an identification attempt, whereby the user is assured that the authentic computer system was used To process the account access because a false computer system would not be able to present the customer'"'"'s private code.

12. The system of claim 1 wherein the personal identification code is not unique to the user in that biometric samples from different individuals are stored in the same biometric basket.

13. An identification computer system for determining an individual'"'"'s identity from comparison of previously registered biometric samples and personal identification codes with a bid biometric sample and a bid identification code, and sensitive to use or decrease use, said system comprising;

a. a master computer further having a master computer comparator, a master user biometric database containing the biometric samples of all users registered with the computer system, and a user personal identification code group database containing the personal identification codes of said users;

wherein the personal identification codes of users are not unique to each user;

b. at least two local computers, physically remote from each other, each local computer further comprising;

i) a biometric scanner;

ii) a local comparator;

iii) a data entry device;

iv) a local user biometric database containing a subset of the biometric samples contained in the master biomertic database; and

v) a personal identification code database;

c. at least two intermediary computers, each having an intermediary computer comparator, intermediary computer user biometric sample database containing a subset of biometric samples of the master computer biometric sample database, and a different subset of biometric sample database contained in the local computer biometric sample database, and a user personal identification code group database containing the personal identification codes of said users;

wherein the personal identification codes of users are not unique to each user;

d. first interconnecting means for interconnecting each local computer with only one intermediary computer, and second interconnecting means for interconnecting each intermediary computer to the master computer;

wherein

i) the user enters their bid biometric sample and bid personal identification code into a first local computer, the first local computer comparator compares the bid biometric sample and bid personal identification code with registered biometric samples and personal identification codes contained in the first local computer for producing either a failed or successful first identification result;

ii) wherein if the first local computer returns a failed identification result, the bid biometric sample and bid personal identification code are transmitted to the intermediary computer it is connected to, for comparison of the entered bid biometric sample and bid personal identification code to personal identification codes and biometric samples stored in the intermediary computer for producing either a failed or successful second identification result;

iii) wherein if the intermediary computer returns a failed identification result, the bid biometric sample and bid personal identification code are transmitted to the master computer for comparison of the entered bid biometric sample and bid personal identification code to personal identification codes and biometric samples stored in the master computer for producing either a failed or successful third identification result; and

e. at least one display unit wherein said first, second or third identification result is externalized.

14. The system of claim 13 wherein upon return of a failed first and second identification results, and upon return of a successful third identification result, the master computer transmits the biometric sample and personal identification code of the identified user to the intermediary computer for storage, and wherein, the intermediary computer transmits the biometric sample and personal identification code of the identified user to the local computer.

15. A tokenless method for rapid search of previously stored biometric samples from individuals using at least two biometric baskets, at least one biometric basket containing at least two algorithmically unique biometric samples from different individuals, each biometric basket containing less than the total number of samples registered with the system, and each biometric basket being identified by a personal identification code, the method comprising;

a. a storage step further comprising;

i. gathering a biometric sample from an individual;

ii. selecting a personal identification code that indexes a biometric basket;

iii. locating the biometric basket identified by the personal identification code;

iv. comparing the biometric sample gathered from said individual, with all previously stored biometric samples in the biometric basket, to make sure that the biometric sample gathered from the individual is algorithmically unique from all biometric samples currently stored in said biometric basket for producing a successful or failed uniqueness result; and

v. upon return of a successful uniqueness result, storing of the entered biometric sample gathered from said individual in the selected biometric basket; and

b. a bid step further comprising;

i. entering a bid personal identification code by a candidate individual;

ii. entering a bid biometric sample by said candidate individual; and

;

c. a comparison step further comprising;

i. locating the biometric basket that is identified by the bid personal identification code entered by said candidate individual; and

ii. comparison of the bid biometric sample from said candidate individual with all of the biometric samples stored in the identified biometric basket for producing either a successful or failed identification result.

16. An identification computer system sensitive to use, for determining a user'"'"'s identity from comparison of previously stored biometric samples and personal identification codes with a bid biometric sample and a bid identification code, said system comprising:

a. at least two master computers each having a master computer comparator and data bases, wherein each master computer contains a different subset of all biometric samples and personal identification codes of users registered with the identification computer system;

b. at least two local computers, physically remote from each other,

i. each local computers connected through a first interconnecting means to only one master computer,

ii. each local computer containing a subset of the biometric samples and personal identification codes contained in the at least two master computers, and

iii. each local computer having a local comparator;

c. second interconnecting means for interconnecting the at least two master computers to each other;

wherein

i) the user enters their registered bid biometric sample and bid personal identification code into a first local computer, the first local computer comparator compares the bid biometric sample and bid personal identification code with biometric samples and personal identification codes contained in the first local computer for producing either a failed or successful first identification result;

ii) wherein if the first local computer returns a failed identification result, the bid biometric sample and bid personal identification code are transmitted to a first master computer for comparison of the entered bid biometric sample and bid personal identification code to personal identification codes and biometric samples stored in the first master computer for producing either a failed or successful second identification result;

iii) wherein if the first master computer returns a failed identification result, the first master computer transmits the bid identification code and bid biometric sample to at least one second master computer for comparison of the bid biometric sample and bid personal identification code to biometric samples and personal identification codes stored in the second master computer for producing a failed or successful third identification result; and

d. at least one display unit wherein said identification result is externalized.

17. The system of claim 16 wherein upon return of a failed first and second identification results, and upon return of a successful third identification result, the second master computer transmits the biometric sample and personal identification code of the identified user to the first master computer for storage, thereafter, the first master computer transmits the biometric sample and personal identification code of the identified user to The first local computer.

18. The system of claim 16, the at least two master computers each further comprising a purge engine.

19. The system of claim 18, wherein after the second master computer transmits the biometric sample and personal identification code of the identified user to the first master computer, the second master computer purges the biometric sample and personal identification code of the identified user from its data bases.

20. The system of claim 18, wherein after the second master computer transmits the biometric sample and personal identification code of the identified user to the first master computer, the second master computer purges the biometric sample and personal identification code of the identified user from the intermediary computer it is connected to.

21. The system of claim 18 wherein the purge engine deletes the biometric sample and personal identification code of any user from the first local computer upon expiration of a predetermined time limit.