Method and apparatus for biometric verification with data packet transmission prioritization

• US 7,512,807 B2
• Filed: 02/25/2003
• Issued: 03/31/2009
• Est. Priority Date: 02/25/2003
• Status: Active Grant

• Current Assignee: Activcard Ireland, Limited
• Original Assignee: Activcard Ireland, Limited
• Inventors: Hillhouse, Robert D.
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US10/372,093
• Publication Number:
  US 20040168091A1
• Time in Patent Office: 2,226 Days
• Field of Search: 713/186, 726/7
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/1365 Matching; Classification

Abstract

An authentication mechanism for use with biometric systems which optimizes data extraction on areas or regions having a high probability of matching a reference biometric template, allows a reduction in both the size and number of data packet transmissions to be made to a biometric matching engine and includes data packet transmission prioritization.

Claims

1. A method of biometric authentication from a biometric sample received by a local client, the method comprising:

defining a plurality of regions within the biometric sample;

identifying which of the plurality of regions includes biometric feature data having at least a predetermined probability of matching a pre-established reference;

extracting the biometric feature data from the identified regions;

incorporating the extracted biometric feature data into a plurality of data packets;

arranging the plurality of data packets in a hierarchy from highest probability to lowest probability based, at least in part, on the probability of matching the pre-established reference;

transmitting a data packet of the plurality of data packets having a highest known probability of the plurality of data packets of matching the pre-established reference to a biometric matching engine; and

iteratively transmitting another data packet of the plurality of data packets having a highest known probability of the remaining data packets of matching the pre-established reference, if previously transmitted data packets did not result in a match at the biometric matching engine.

2. The method of claim 1, wherein the known probability is a probability sufficient for successfully completing the biometric authentication.

3. The method of claim 1, wherein each of the data packets includes data relating to one of the regions of the biometric sample.

4. The method of claim 1, wherein each of data packets includes a single datum relating to one of the regions of the biometric sample.

5. The method of claim 1, further comprising determining selection criteria for the biometric feature data from output of the biometric matching engine.

6. The method of claim 5, wherein the selection criteria is a regional selection criteria.

7. The method of claim 1, wherein the biometric matching engine comprises a server based application.

8. The method of claim 1, wherein the biometric matching engine comprises a security token based application.

9. The method of claim 1, wherein the biometric matching engine comprises both a server based application and a security token based application.

10. The method of claim 1, wherein identifying which regions include biometric feature data is performed postliminary of defining a plurality of regions within the biometric sample.

11. The method of claim 1, wherein identifying which regions include biometric feature data is performed heuristically.

12. The method of claim 1, wherein identifying which regions include biometric feature data is performed both postliminary of defining a plurality of regions within the biometric sample and heuristically.

13. A system for biometric data extraction and transmission of extracted biometric data from a biometric sample received by a local client, the system comprising:

means for providing a biometric sample; and

means for processing the biometric sample, wherein the means for processing includes at least one biometric processing application programmed to perform a method comprising defining a plurality of regions within the biometric sample;

identifying which of the plurality of regions includes biometric feature data having at least a predetermined probability of matching a pre-established reference;

extracting the biometric feature data from the identified regions;

incorporating the extracted biometric feature data into a plurality of data packets;

arranging the plurality of data packets in a hierarchy from highest probability to lowest probability based, at least in part, on the probability of matching the pre-established reference;

transmitting a data packet of the plurality of data packets having a highest known probability of the plurality of data packets of matching the pre-established reference to a biometric matching engine; and

iteratively transmitting another data packet of the plurality of data packets having a highest known probability of the remaining data packets of matching the pre-established reference, if previously transmitted data packets did not result in a match at the biometric matching engine.

14. The system of claim 13, wherein the biometric processing application further includes means for preprocessing the biometric sample.

15. The system of claim 14, wherein the preprocessing means includes means for aligning the biometric sample according to alignment information supplied at least in part by the biometric matching engine.

16. The system of claim 13, wherein the biometric matching engine is installed in a server.

17. The system of claim 13, wherein the biometric matching engine is installed in a security token.

18. The system of claim 13, wherein the biometric matching engine is installed in both a server and a security token.

19. The system of claim 13, wherein the biometric processing application includes means for identifying the plurality of regions prospectively by preprocessing the received biometric sample.

20. The system of claim 13, wherein the biometric processing application includes means for identifying the plurality of regions retrospectively by processing the biometric data from the identified regions.

21. The system of claim 13, wherein the biometric processing application includes means for processing the biometric data to identify the plurality of regions both prospectively and retrospectively.

22. A computer readable medium having executable instructions stored therein that when executed by a computer enable the computer to perform a method comprising:

defining a plurality of regions within a biometric sample;

identifying which of the plurality of regions includes biometric feature data having at least a predetermined probability of matching a pre-established reference;

extracting the biometric feature data from the identified regions;

incorporating the extracted biometric feature data into a plurality of data packets;

arranging the plurality of data packets in a hierarchy from highest probability to lowest probability based, at least in part, on the probability of matching the pre-established reference;

transmitting a data packet of the plurality of data packets having a highest known probability of the plurality of data packets of matching the pre-established reference to a biometric matching engine; and

iteratively transmitting another data packet of the plurality of data packets having a highest known probability of the remaining data packets of matching the pre-established reference, if previously transmitted data packets did not result in a match at the biometric matching engine.

23. A method of biometric authentication, the method comprising:

extracting biometric feature data from a biometric sample, the extracted biometric feature data relating to features reproducibly extractable from said biometric sample;

grouping the extracted biometric feature data into a plurality of packets, the individual packets including a portion of the extracted biometric feature data from a different region of the biometric sample sufficient for identification of the biometric sample with a biometric matching engine, wherein the packets are ordered in a transmission order based, at least in part, on a likelihood of sufficient identification of the biometric sample;

transmitting a first packet to the biometric matching engine based on the transmission order; and

transmitting a second packet to the biometric matching engine based on the transmission order, wherein the second packet is only sent if the first packet did not result in a match at the biometric matching engine.

24. The method of claim 23, wherein the biometric feature data are organized in each packet in an order based on a likelihood of the respective feature contributing to a match by the biometric matching engine.

25. The method of claim 23, further comprising authenticating a user supplying the biometric sample based on at least one biometric datum of the first packet.

26. The method of claim 23 wherein the portion of extracted biometric feature data in each packet is likely sufficient for identification by the biometric matching engine within predetermined limits.

27. The method of claim 23 wherein the first packet includes a single biometric datum.

28. The method of claim 23 wherein the first packet includes a plurality of biometric feature data.

29. A system for biometric authentication, the system comprising:

a sensor for obtaining a biometric sample; and

a processor for extracting biometric feature data from the biometric sample, wherein the extracted biometric feature data relates to features reproducibly extractable from said biometric sample, wherein the processor is configured to

group the extracted biometric feature data into a plurality of packets, wherein the individual packets include a portion of the extracted biometric feature data sufficient for identification of the biometric sample by a biometric matching engine within predetermined limits, wherein the packets are ordered in a transmission order based, at least in part, on a likelihood of sufficient identification of the biometric sample;

transmit a first packet to the biometric matching engine based on the transmission order; and

transmit a second packet to the biometric matching engine based on the transmission order, wherein the second packet is only sent if the first packet did not result in a match at the biometric matching engine.

30. The system of claim 29, wherein the biometric feature data are organized in each packet in an order based on a likelihood of the respective feature contributing to a match by the biometric matching engine.

31. The system of claim 29, further comprising:

a security token interface port for interfacing with a security token carrying the biometric matching engine; and

a transceiver for transmitting the packets to the biometric matching.

32. The system of claim 29, wherein the processor is a first processor, the system further comprising:

a network interface port for interfacing with a network; and

a transceiver for transmitting the packets to the biometric matching engine operably coupled to a second processor in communication with the network via the network interface port.

33. A computer readable medium having executable instructions stored therein that when executed by a computer enable the computer to perform a method comprising:

extracting biometric feature data from a biometric sample, the extracted biometric feature data relating to features reproducibly extractable from said biometric sample;

grouping the extracted biometric feature data into a plurality of packets, the individual packets including a portion of the extracted biometric feature data from a different region of the biometric sample sufficient for identification of the biometric sample with a biometric matching engine, wherein the packets are ordered in a transmission order based, at least in part, on a likelihood of sufficient identification of the biometric sample;

transmitting a first packet to the biometric matching engine based on the transmission order; and

transmitting a second packet to the biometric matching engine based on the transmission order, wherein the second packet is only sent if the first packet did not result in a match at the biometric matching engine.

34. The computer readable medium of claim 33 wherein the computer readable medium is housed within a workstation in communication with a computer network, wherein the computer network includes an authentication server.

35. The computer readable medium of claim 33 wherein the computer readable medium is housed within a workstation comprising a port for communication with a security token including an authentication server.