Method and system for the generation, management, and use of a unique personal identification token for in person and electronic identification and authentication

• US 7,278,026 B2
• Filed: 12/18/2002
• Issued: 10/02/2007
• Est. Priority Date: 01/02/2002
• Status: Expired due to Fees

• Current Assignee: Tim Mcgowan
• Original Assignee: Tim Mcgowan
• Inventors: McGowan, Tim
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US10/321,472
• Publication Number:
  US 20040123114A1
• Time in Patent Office: 1,749 Days
• Field of Search: 713/186, 283/17
• US Class Current: 713/186
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An apparatus and methods for implementing a secure personal identification Token are disclosed. The Token may utilize biometric matching, encryption, access codes, holograms, and bar codes to improve security and confidentiality of data relating to the holder of the token. To further improve security, methods of ensuring the uniqueness of the holder may be implemented. Methods to protect unauthorized access to a holder'"'"'s Token are also disclosed.

Claims

1. A method of issuing a unique personal identification token comprising the steps of:

a. Receiving identity and biometric information to assist in establishing a unique identity,

b. Searching a database before issuing the token to determine whether a token was previously issued to a person having said identity and biometric information,

c. Registering the identity and biometric information in the database, and

d. Issuing the token.

2. The method of claim 1, further comprising the step of storing biometric and identity information in a memory of the token.

3. A method for determining whether a person in possession of a token is authorized to use the token, said method comprising the steps of:

a. Presenting a token to a relying party, said token comprising a memory containing a stored biometric template and a stored access code,

b. Collecting biometric data from the person,

c. Collecting an access code from the person,

d. Reducing said biometric data to a template,

e. Executing a program stored in the memory of the token that determines whether the stored access code matches said code collected in step c,

f. Outputting the result of the program of step e,

g. Executing a program stored in the memory of the token that calculates a reliability score based on the correlation of the template collected in step b and the biometric template stored in the memory of the token,

h. Outputting the result of the program of step g, and

i. Using the results of steps f and h to determine whether the person in possession of the token is authorized to use the token.

4. The method of claim 3, further comprising the steps of:

a. withdrawing decrypted electronic data from the token, and

b. comparing said decrypted electronic data to information provided on the exterior of the said token.

5. The method of claim 3, further comprising the steps of:

submitting a unique number associated with said token to an external database, and receiving revocation and suspension information relevant to said unique number.

6. The method of claim 3, further comprising using information provided on the exterior of the token in conjunction with results of steps f and h to determine whether the person in possession of a token is authorized to use the token.

7. The method of claim 6, wherein the exterior information is a photo of the applicant.

8. The method of claim 6, wherein the exterior information is a bar code.

9. The method of claim 3, further comprising the step of using a token reader to perform steps b and c.

10. A method of accessing information stored in a memory of a token comprising the steps of:

a. Providing a token with a memory for storing information,

b. Storing an access code in the memory of the token,

c. Providing a suspension phrase used to notify a relying party that reliance on the token has been suspended,

d. Storing a distress access code in the memory of the token, and

e. Notifying a relying party that the holder of the token is in distress by using said distress access code.

11. The method of claim 10, further comprising the step of storing a biometric template in the memory of the token.

12. The method of claim 10, further comprising the step of querying a real time authentication service to determine whether use of the token has been suspended.

13. A method of accessing information stored in a memory of a token comprising the steps of:

a. Providing a token with a memory for storing information,

b. Storing an access code in the memory of the token,

c. Providing a suspension phrase used to notify a relying party that reliance on the token has been suspended,

d. Storing a distress access code in the memory of the token, and

e. Providing said suspension phrase to a real time authentication service to suspend reliance on the token.

14. The method of claim 13, further comprising the step of querying a real time authentication service to determine whether use of the token has been suspended.

15. A method of issuing a unique personal identification token comprising the steps of:

a. Receiving identity and biometric information to assist in establishing a unique identity,

b. Reducing the biometric information to a template,

c. Searching a database before issuing the token to determine whether said template matches any existing templates stored in the database,

d. Registering the identity and biometric information in the database, and

e. Issuing the token.

16. The method of claim 15, comprising the step of searching a database before issuing the token to determine whether said identity information matches any existing identity information stored in the database.