Web-based, biometric authetication system and method

• US 6,182,076 B1
• Filed: 12/09/1998
• Issued: 01/30/2001
• Est. Priority Date: 06/09/1997
• Status: Expired due to Term

• Current Assignee: Philips Electronics North America Corporation (Koninklijke Philips N.V.)
• Original Assignee: Philips Electronics North America Corporation (Koninklijke Philips N.V.)
• Inventors: Wong, Stephen, Yu, Yuan-Pin, Hoffberg, Mark B.
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): Mills, John G.
• Application Number:
  US09/208,506
• Time in Patent Office: 783 Days
• Field of Search: 707/1-224
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

A Web-based authentication system and method, the system comprising at least one Web client station, at least one Web server station and an authentication center. The Web client station is linked to a Web cloud, and provides selected biometric data of an individual who is using the Web client station. The Web server station is also linked to the Web cloud. The authentication center is linked to at least one of the Web client and Web server stations so as to receive the biometric data. The authentication center, having records of one or more enrolled individuals, provides for comparison of the provided data with selected records. The method comprises the steps of (i) establishing parameters associated with selected biometric characteristics to be used in authentication; (ii) acquiring, at the Web client station, biometric data in accordance with the parameters; (iii) receiving, at an authentication center, a message that includes biometric data; (iv) selecting, at the authentication center, one or more records from among records associated with one or more enrolled individuals; and (v) comparing the received data with selected records. The comparisons of the system and method are to determine whether the so-compared live data sufficiently matches the selected records so as to authenticate the individual seeking access of the Web server station, which access is typically to information, services and other resources provided by one or more application servers associated with the Web server station.

Claims

1. A system for providing biometric authentication, the system using a Web cloud as a communication medium, the system comprising:

at least one Web client station linked to the Web cloud, the Web client station providing selected live data respecting biometric characteristics of an individual who is using the Web client station, the selected live data correlated to at least one parameter received by the Web client station via the Web cloud;

at least one Web server station linked to the Web cloud, access of the Web server station via the Web cloud being sought by the individual using the Web client station and being dependent on authentication of the individual; and

an authentication center linked to at least one of the Web client and Web server stations so as to receive the live data, the authentication center having records of biometric data of one or more enrolled individuals, the authentication center providing for comparison of the live data with selected records, the comparison being to determine whether the live data sufficiently matches the selected records as to authenticate the individual seeking access.

2. A system as claimed in claim 1, wherein the Web client stations and the Web server stations are linked to the Web cloud via Web connections, the Web connections supporting a secure transport protocol.

3. A system as claimed in claim 2, wherein the authentication center is linked to at least one of the Web client stations and Web server stations via authentication center connections, the authentication center connections supporting a secure transport protocol.

4. A system as claimed in claim 3, wherein at least one of the Web connections and the authentication center connections support HTTP.

5. A system as claimed in claim 3, wherein the authentication center connections are not via the Web cloud.

6. A system as claimed in claim 1, wherein one or more of the Web client stations comprise a Web client and a biometric I/O device, the biometric I/O device acquiring data respecting biometric characteristics of the individual and the Web, and the Web client being linked to the biometric I/O device for receiving the acquired data or data representative thereof.

7. A system as claimed in claim 6, wherein the Web client comprises an interface mechanism, the interface mechanism being associated with one or more biometric characteristics, and controlling the biometric I/0 device based on one or more parameters associated with biometric authentication, the parameters being provided from at least one of the Web server station, the authentication center and the Web client station.

8. A system as claimed in claim 7, wherein either or both of the Web client and the interface mechanism comprise, respectively, software programs, the software programs being any combination of destructive or non-destructive.

9. A system as claimed in claim 7, wherein the Web server station comprises a Web server, the Web server providing some or all of the parameters associated with biometric authentication.

10. A system as claimed in claim 9, wherein the authentication center comprises an authorization server linked to one or more biometric servers, each of the biometric servers being linked, respectively, to one or more biometric databases, the biometric databases being captive.

11. A system as claimed in claim 9, wherein the authentication center comprises an authorization server linked to one or more biometric servers, each of the biometric servers being linked, respectively, to one or more biometric databases, at least one of the biometric databases being independent.

12. A system as claimed in claim 1, wherein the Web server station comprises a Web server, the Web server providing to the Web client station parameters associated with biometric authentication.

13. A system as claimed in claim 1, wherein the authentication center comprises an authorization server linked to one or more biometric servers, each of the biometric servers being linked, respectively, to one or more biometric databases.

14. A system as claimed in claim 13, wherein at least one of the biometric servers is independent.

15. A system as claimed in claim 1, wherein the Web client station provides for the individual to have a claimed identity, and the authentication center supports (i) receiving said claimed identity, (ii) providing the selected records based on said claimed identity and (iii) comparing the live data with the so-provided, selected records.