Method for using fingerprints to distribute information over a network

• US 6,122,737 A
• Filed: 11/14/1997
• Issued: 09/19/2000
• Est. Priority Date: 11/14/1997
• Status: Expired due to Term

• Current Assignee: Digital Persona Inc (Assa Abloy AB)
• Original Assignee: Digital Persona Inc (Assa Abloy AB)
• Inventors: Bjorn, Vance, Righi, Fabio
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): Smithers, Matthew
• Application Number:
  US08/971,157
• Time in Patent Office: 1,040 Days
• Field of Search: 395/200.55, 382/116, 380/23, 380/30, 713/182, 713/186, 705/51
• US Class Current: 713/186
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A method, apparatus, and article of manufacture for distributing information from a provider to a user over a network. User fingerprint data is obtained from the user and transferred to the provider via the network. The provider injects the user fingerprint data into an information access program and transfers the information access program back to the user via the network. Direct user fingerprint data is then obtained from the user and compared to the injected user fingerprint data. If there is a match, the user is enabled to use the information access program.

Claims

1. A method for distributing information from a provider to a user over a network comprising:

transferring first user fingerprint data to the provider via the network;

injecting the first user fingerprint data into an information access program of the provider; and

transferring the information access program including the injected first user fingerprint data to the user via the network.

2. The method of claim 1 further comprising:

obtaining direct user fingerprint data from the user;

comparing the direct user fingerprint data with the previously injected first user fingerprint data; and

enabling the information access program to access information if there is a match between the direct user fingerprint data and the previously injected first user fingerprint data.

3. The method of claim 2 wherein said obtaining of direct user fingerprint data comprises obtaining a live fingerprint from the user.

4. The method of claim 2 wherein said obtaining of direct user fingerprint data comprises obtaining fingerprint data from a virtual address book.

5. The method of claim 2 wherein said obtaining of direct user fingerprint data comprises obtaining fingerprint data from a smart card.

6. The method of claim 2 wherein said enabling of the information access program to access information comprises decrypting the information access program previously encrypted with the injected user fingerprint data as a cryptographic key.

7. The method of claim 2 further comprising:

transferring second user fingerprint data to the provider via the network; and

injecting the second user fingerprint data into the information access program.

8. The method of claim 7 further comprising:

comparing the direct user fingerprint data with the previously injected first and second user fingerprint data; and

enabling the information access program to access information if there is a match between the direct user fingerprint data and the previously injected second user fingerprint data.

9. The method of claim 1 further comprising:

encrypting a data file using the first user fingerprint data as a cryptographic key;

injecting the first user fingerprint data into the data file; and

transferring the data file to the user via the network.

10. An apparatus for distributing information from a provider to a user over a network, the apparatus comprising:

a digital computer having input means for allowing the entering of first user fingerprint data;

means coupled to the network and the digital computer for transferring first user fingerprint data to the provider via the network;

means coupled to the network for injecting the first user fingerprint data into an information access program of the provider; and

means coupled to the network for transferring the information access program including the injected first user fingerprint data to the user via the network.

11. The apparatus of claim 10 further comprising:

means operated by the digital computer for obtaining direct user fingerprint data from the user;

means operated by the digital computer for comparing the direct user fingerprint data with the previously injected first user fingerprint data; and

means operated by the digital computer for enabling the information access program to access information if there is a match between the direct user fingerprint data and the previously injected first user fingerprint data.

12. The apparatus of claim 11 wherein the means operated by the digital computer for obtaining direct user fingerprint data comprises means for obtaining a live fingerprint from the user.

13. The apparatus of claim 11 wherein the means operated by the digital computer for obtaining direct user fingerprint data comprises means for obtaining fingerprint data from a virtual address book.

14. The apparatus of claim 11 wherein the means operated by the digital computer for obtaining direct user fingerprint data comprises means for obtaining fingerprint data from a smart card.

15. The apparatus of claim 11 wherein the means operated by the digital computer for enabling the information access program to access information comprises means for decrypting the information access program previously encrypted with the injected user fingerprint data as a cryptographic key.

16. The apparatus of claim 11 further comprising:

means operated by the digital computer for transferring second user fingerprint data to the provider via the network; and

means coupled to the network for injecting the second user fingerprint data into the information access program.

17. The apparatus of claim 16 further comprising:

means operated by the digital computer for comparing the direct user fingerprint data with the previously injected first and second user fingerprint data; and

means operated by the digital computer for enabling the information access program to access information if there is a match between the direct user fingerprint data and the previously injected second user fingerprint data.

18. The apparatus of claim 10 further comprising:

means coupled to the network for encrypting a data file using the first user fingerprint data as a cryptographic key;

means coupled to the network for injecting the first user fingerprint data into the data file; and

means coupled to the network for transferring the data file to the user via the network.

19. An article of manufacture for use in a computer system for distributing information from a provider to a user over a network, the computer having a keyboard, pointing device, visual display, and data storage device, the article of manufacture comprising a computer usable medium having computer readable program code means embodied in the medium, the program code means including:

computer readable program code means embodied in the computer usable medium for causing a computer to transfer first user fingerprint data to the provider via the network;

computer readable program code means embodied in the computer usable medium for causing a computer to inject the first user fingerprint data into an information access program of the provider; and

computer readable program code means embodied in the computer usable medium for causing a computer to transfer the information access program including the injected first user fingerprint data to the user via the network.

20. The article of manufacture of claim 19 further comprising:

computer readable program code means embodied in the computer usable medium for causing a computer to obtain direct user fingerprint data from the user;

computer readable program code means embodied in the computer usable medium for causing a computer to compare the direct user fingerprint data with the previously injected first user fingerprint data; and

computer readable program code means embodied in the computer usable medium for causing a computer to enable the information access program to access information if there is a match between the direct user fingerprint data and the previously injected first user fingerprint data.

21. The article of manufacture of claim 20 wherein the means for causing a computer to obtain direct user fingerprint data comprises means embodied in the computer usable medium for causing a computer to obtain a live fingerprint from the user.

22. The article of manufacture of claim 20 wherein the means for causing a computer to obtain direct user fingerprint data comprises means embodied in the computer usable medium for causing a computer to obtain fingerprint data from a virtual address book.

23. The article of manufacture of claim 20 wherein the means for causing a computer to obtain direct user fingerprint data comprises means embodied in the computer usable medium for causing a computer to obtain fingerprint data from a smart card.

24. The article of manufacture of claim 20 wherein the means for causing a computer to enable the information access program to access information comprises means embodied in the computer usable medium for causing a computer to decrypt the information access program previously encrypted with the injected user fingerprint data as a cryptographic key.

25. The article of manufacture of claim 20 further comprising:

means embodied in the computer usable medium for causing a computer to transfer second user fingerprint data to the provider via the network; and

means embodied in the computer usable medium for causing a computer to inject the second user fingerprint data into the information access program.

26. The article of manufacture of claim 25 further comprising:

means embodied in the computer usable medium for causing a computer to compare the direct user fingerprint data with the previously injected first and second user fingerprint data; and

means embodied in the computer usable medium for causing a computer to enable the information access program to access information if there is a match between the direct user fingerprint data and the previously injected second user fingerprint data.

27. The article of manufacture of claim 19 further comprising:

means embodied in the computer usable medium for causing a computer to encrypt a data file using the user fingerprint data as a cryptographic key;

means embodied in the computer usable medium for causing a computer to inject the user fingerprint data into the data file; and

means embodied in the computer usable medium for causing a computer to transfer the data file to the user via the network.