Method and system for enabling free seating using biometrics through a centralized authentication

• US 6,920,561 B1
• Filed: 03/31/2000
• Issued: 07/19/2005
• Est. Priority Date: 03/31/2000
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Gould, Christopher Britton, Vanover, Michael T., Ward, James Peter, Locker, Howard Jeffery, Trotter, Andy Lloyd
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): STULBERGER, CAS P
• Application Number:
  US09/542,048
• Time in Patent Office: 1,936 Days
• Field of Search: 713/156, 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A method for providing an authentication of a user of a computer system in a network is disclosed. The method comprises capturing biometric data of a user; encrypting and signing the biometric data with a private key and sending the encrypted and signed data to a central server in the network. The method further comprises accepting and verifying credentials associated with the signed and encrypted data from the server utilizing the public key from the server. The method further comprises installing the credentials into the computer if the credentials are verified. In a method and system in accordance with the present invention, a user can walk up to any client within an enterprise and have their locally captured biometric input authenticated at a central server. The user can then have their individual credentials securely imported to the local client for subsequent use during that time period, without needing any additional identification or memory token such as a smartcard.

Claims

1. A method for providing an authentication of a user of a computer in a network, the method comprising the steps of:

(a) capturing biometric information of the user by the computer;

(b) encrypting the biometric information using a secure server'"'"'s public key and signing the biometric information with a private key of the computer system;

(c) sending the encrypted and signed information from the computer to the secure server in the network;

(d) accepting and verifying credentials associated with the signed and encrypted information from the secure server utilizing the public key from the secure server; and

(e) installing the credentials into the computer if the credentials are verified.

2. The method of claim 1 wherein the biometric information comprises fingerprint information.

3. The method of claim 1 wherein the biometric information comprises retinal information.

4. The method of claim 1 wherein the biometric information comprises voice information.

5. The method of claim 1 wherein the biometric information comprises handwriting information.

6. The method of claim 1 wherein the secure server comprises an authentication credential server.

7. A system for providing an authentication of a user of a computer system in a network;

the system comprising;

a secure server coupled to the computer system for authenticating biometric information of the user, wherein the secure server includes a database that stores credential information associated with biometric information; and

a biometric capture device within the computer system for receiving the biometric information of the user and sending the biometric information to the secure server,

wherein if the secure server authenticates the user via the biometric information, the secure server sends the associated credential information to the computer system such that the user can securely operate the computer system.

8. The system of claim 7 wherein the biometric information is encrypted utilizing a public key/private key pair.

9. The system of claim 7 wherein the biometric information comprises fingerprint information.

10. The system of claim 7 wherein the biometric information comprises retinal information.

11. The system of claim 7 wherein the biometric information comprises voice information.

12. The system of claim 7 wherein the biometric information comprises handwriting information.

13. The system of claim 7 wherein the secure server comprises an authentication credential server.