Systems and methods utilizing biometric data

• US 7,079,007 B2
• Filed: 04/19/2002
• Issued: 07/18/2006
• Est. Priority Date: 04/19/2002
• Status: Active Grant

• Current Assignee: HID Global Corporation (Assa Abloy AB)
• Original Assignee: Cross Match Technologies Incorporated (Assa Abloy AB)
• Inventors: Cannon, Greg L., Siegel, William G., Fernandez, Frank E.
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): Dalencourt, Yves
• Application Number:
  US10/125,650
• Publication Number:
  US 20030197593A1
• Time in Patent Office: 1,551 Days
• Field of Search: 340/5.52, 340/5.53, 340/5.8, 340/5.82, 340/5.83, 340/5.85, 340/531, 382/115, 382/124, 382/125, 713/185, 713/186, 713/200, 235/379
• US Class Current: 340/5.52
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

Systems and methods perform access control and mobile identity verification utilizing a memory, maybe on a handheld device, that stores at least biometric data, such as minutia. The handheld device may also store other data, such as a threshold value and Wiegand data. The data may be stored in a memory, a magnetic strip, a code, a bar code, or in all of these devices associated with the handheld device. The handheld device may be a SmartCard or the like. The threshold value may be a required value or parameter generated from input criteria based on biometric data read and extracted by an extracting system during an enrolling process. The threshold value is used during extracting, matching, or both, to most accurately determine the identity and characteristics of an individual wanting access to an accessed system or being questioned by law enforcement in the field.

Claims

1. A method, comprising:

(a) reading information from a smart card of an enrollee at an access control location;

(b) transmitting the information via a network to a central processing location;

(c) generating image data from a live capture of an image of a biometric of the enrollee using a live capture device at the access control location;

(d) transmitting the image data via the network to the central processing location;

(e) accessing the image data from the central processing location at an extraction location via the network to extract extraction information from the accessed image data;

(f) transmitting the extraction information via the network to the central processing location;

(g) accessing the information from the smart card from the central processing location and the extraction information from the central processing location at a matching location via the network to generate a matching result through comparing the extracted information with the information from the smart card;

(h) transmitting the matching result to the central processing location via the network; and

(i) performing access control at the access control location via the network based on the matching result.

2. The method of claim 1, further comprising:

(j) using a system administrator at the central processing location to perform step (i).

3. The method of claim 2, wherein step (j) comprises:

using an access control device as the system administrator that compares the matching result to a threshold value.

4. The method of claim 2, further comprising:

using an operator as the system administrator that reviews the matching results against a threshold value.

5. The method of claim 2, wherein:

step (g) further comprises determining a threshold quality value of the enrollee from the information on the smart card; and

step (i) further comprises using the threshold quality value and the matching result to perform the access control.

6. The method of claim 2, wherein step (j) further comprises:

using the system administrator to at least one of initialize, configure, or update at least one or more devices utilized to perform steps (a)-(i).

7. The method of claim 2, wherein step (j) further comprises:

using the system administrator to access at least one of audit information, log information, status information, or polling information from one or more devices utilized to perform steps (a)-(i).

8. The method of claim 2, wherein step (j) further comprises:

using the system administrator to transmit one or more event commands to one or more devices used to perform steps (a)-(i).

9. The method of claim 1, wherein before step (e) the central processing location monitors a plurality of extraction locations coupled the network and chooses one of the plurality of extraction locations at which to perform step (e).

10. The method of claim 1, wherein before step (g) the central processing location monitors a plurality of matching locations coupled to the network and chooses one of the plurality of matching locations at which to perform step (g).

11. The method of claim 1, wherein:

before step (e) the central processing location monitors a plurality of extraction locations coupled the network and chooses one of the plurality of extraction locations at which to perform step (e); and

before step (g) the central processing location monitors a plurality of matching locations coupled to the network and chooses one of the plurality of matching locations at which to perform step (g).

12. A system, comprising:

a means for reading information from a smart card of an enrollee at an access control location;

a means for transmitting the information via a network to a central processing location;

a means for generating image data from a live capture of an image of a biometric of the enrollee using a live capture device at the access control location;

a means for transmitting the image data via the network to the central processing location;

a means for extracting that accesses the image data from the central processing location at an extraction location via the network to extract extraction information from the accessed image data;

a means for transmitting the extraction information via the network to the central processing location;

a means for matching that accesses the information from the smart card from the central processing location and the extraction information from the central processing location at a matching location via the network to generate a matching result through comparing the extracted information with the information from the smart card;

a means for transmitting the matching result to the central processing location via the network; and

a means for performing access control at the access control location via the network based on the matching result.

13. The system of claim 12, further comprising:

means for performing system administration at the central processing location coupled to the means for performing access control.

14. The system of claim 13, wherein said means for performing system administration at least one of initializes, configures, or updates at least one or more of the means coupled to the network.

15. The system of claim 13, said means for performing system administration access at least one of audit information, log information, status information, or polling information from one or more of the means coupled to the network.

16. The system of claim 13, wherein said means for performing system administration transmits one or more event commands to one or more means coupled to the network.

17. The system of claim 12, further comprising:

a means for monitoring a plurality of extraction locations coupled the network that chooses one of the plurality of extraction locations as the means for extracting.

18. The system of claim 12, wherein:

said means for matching determines a threshold quality value of the enrollee from the information on the smart card; and

said means for performing access control uses the threshold quality value and the matching result to perform the access control.

19. The system of claim 12, further comprising:

a means for monitoring a plurality of matching locations coupled the network that chooses one of the plurality of matching locations as the means for matching.

20. The system of claim 12, further comprising:

a means for monitoring a plurality of extraction locations coupled the network that chooses one of the plurality of extraction locations as the means for extracting; and

a means for monitoring a plurality of matching locations coupled the network that chooses one of the plurality of matching locations as the means for matching.

21. A distributed system for access control, comprising:

a reader that reads information from a smart card of an enrollee at an access control location;

a transmitter that transmits the information via a network to a central processing location;

an image generator that generates image data from a live capture of an image of a biometric of the enrollee using a live capture device at the access control location;

a transmitter that transmits the image data via the network to the central processing location;

an extraction service that accesses the image data from the central processing location at an extraction location via the network to extract extraction information from the accessed image data;

a transmitter that transmits the extraction information via the network to the central processing location;

a matching service that accesses the information from the smart card from the central processing location and the extraction information from the central processing location at a matching location via the network to generate a matching result through comparing the extracted information with the information from the smart card;

a transmitter that transmits the matching result to the central processing location via the network; and

an access controller at the access control location that controls access via the network based on the matching result.