Biometric authentication system

• US 7,545,961 B2
• Filed: 12/22/2005
• Issued: 06/09/2009
• Est. Priority Date: 12/22/2005
• Status: Active Grant

• Current Assignee: Corporation DAON Technology
• Original Assignee: Daon Holdings Limited
• Inventors: Peirce, Michael, Ahern, James
• Primary Examiner(s): Desire; Gregory M
• Application Number:
  US11/316,213
• Publication Number:
  US 20080101658A1
• Time in Patent Office: 1,265 Days
• Field of Search: 382/115, 382/124, 382/125, 713/186
• US Class Current: 382/115
• CPC Class Codes: G06F 18/21 Design or setup of recognition systems or techniques; Extraction of features in feature space; Blind source separation
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 10/70 using pattern recognition or machine learning optical pattern recognition or electronic computations therefor G06V10/88
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities

Abstract

A biometric authentication engine includes components which are configured to authenticate a user based on at least one presented biometric.The system makes use of multiple threshold parameters or scores so that the authentication process is better tailored to match the specifics of the authentication request.

Claims

1. A biometric authentication system configured to enable an authentication process, the process having predefined parameters associated therewith, the process providing for authentication of a user based on a comparison of a presented biometric with at least one previously stored biometric, said authentication system comprising:

a matching system providing as an output an output matching score based on the comparison of the presented and the at least one previously stored biometric, said authentication system being configured to authenticate the user on determining that a parameter based on the output matching score meets a threshold score, wherein the output matching score results from a combination of multiple output matching scores, or values transformed from the combination of multiple output matching scores, when compared against a single threshold score; and

interrogation means configured to interrogate the authentication process so as to extract and use the predefined parameters to select an appropriate threshold score from a plurality of available threshold scores, each of the plurality of available threshold scores being previously generated for specific parameters.

2. The system as claimed in claim 1 wherein a meeting of the threshold score is determined if the parameter based on the output matching score is equal to the threshold score.

3. The system as claimed in claim 1 wherein a meeting of the threshold score is determined if the parameter based on the output matching score is less than the threshold score.

4. The system as claimed in claim 3 wherein the threshold score is a False Match Rate threshold score and the output matching score must be less than the threshold score to enable the user to be authenticated.

5. The system as claimed in claim 1 wherein a meeting of the threshold score is determined if the parameter based on the output matching score is greater than the threshold score.

6. The system as claimed in claim 1 wherein the parameter based on the output score is the output matching score.

7. The system as claimed in claim 1 wherein the parameter based on the output matching score is a transformed value of the output matching score.

8. The system as claimed in claim 1 wherein the predefined parameters are selected from a user population type, a user gender, a user age, a biometric sample type, a hardware type, an algorithm used in the matching system, an algorithm used in an enrollment process, a quality assessment algorithm used in an acquisition process, environmental factors, a user identity, and a user group.

9. The system as claimed in claim 1 wherein the thresholds or parameters are selected based on an identity of the user being authenticated.

10. The system as claimed in claim 9 wherein said authentication system is configured to maintain historical data relating to each of a plurality of users, and wherein the authentication process is configured to select a first set of thresholds or parameters for a first user and a second set of thresholds or parameters for a second user, the first and second sets being generated through use of said authentication system by the first and second users.

11. The system as claimed in claim 1 wherein the authentication process is configured to authenticate the user on the basis of providing a threshold score that is a result of a combination of a plurality of threshold scores.

12. The system as claimed in claim 1 wherein said interrogation means is further configured to determine parameters associated with enrolment of the user and to determine parameters associated with an authentication request, such that an enrollment threshold score is provided when determining parameters associated with enrollment and an authentication threshold score is provided when determining parameters associated with the authentication request, and wherein the appropriate threshold score is determined as a result of combining the enrollment and authentication threshold scores.

13. The system as claimed in claim 1 wherein said interrogation means is further configured to interrogate an authentication request so as to select a correct threshold score, the correct threshold score having been previously defined for specifics of the enrollment and authentication request parameters for a user making the authentication request.

14. The system as claimed in claim 1 wherein each of the threshold scores are parameters resulting from analysis of biometric accuracy tables or statistics.

15. The system as claimed in claim 14 wherein the biometric accuracy tables or statistics are derived from one of individual receiver operator characteristic curve data, individual cumulative match characteristic data, individual false acceptance rate data, and individual score distribution data.

16. The system as claimed in claim 1 further including an audit module configured to monitor the authentication process and to provide at least one revised threshold score, the at least one revised threshold score being provided based on an analysis of the performance of said authentication system over a predefined time period using current threshold scores.

17. The system as claimed in claim 16 wherein the at least one revised threshold score is used to update the current threshold scores periodically so as to provide a tuning of said authentication system based on usage of said authentication system.

18. A distributed network of authentication systems, at least one of said authentication systems being configured to enable an authentication process, the process having predefined parameters associated therewith and providing for authentication of a user based on a comparison of a presented biometric with at least one previously stored biometric, said at least one authentication system comprising:

a matching system providing as an output an output score based on the comparison of the presented biometric and the at least one previously stored biometric, said at least one authentication system being configured to authenticate the user on determining that a parameter based on the output score meets a threshold score; and

interrogation means configured to interrogate the authentication process so as to extract and use the predefined parameters to select an appropriate threshold score from a plurality of available threshold scores, each of the plurality of available threshold scores being previously generated for specific parameters, wherein said network comprises at least one audit module configured to

receive data relating to the authentication process from at least one of said authentication systems within said network,

process the received data so as to provide an analysis of the performance of said at least one of said authentication systems using current threshold scores, and

generate at least one revised threshold score to supplement the current threshold scores used at one or more of said authentication systems within said network.

19. The network as claimed in claim 18 wherein each of said authentication systems within said network includes an audit module.

20. The network as claimed in claim 19 wherein each of said audit modules is configured to communicate with others of said audit modules so as to enable a transfer of revised threshold scores between said authentication systems.

21. The network as claimed in claim 18 wherein said at least one audit module is provided distinct from said authentication systems, said at least one audit module being configured to communicate with at least one of said authentication systems so as to receive and transmit data relating to threshold scores used within individual ones of said authentication systems.

22. A method of authenticating a user based on a biometric sample presented by the user, said method comprising:

receiving a request for authentication, the request for authentication including a presented biometric;

analyzing specifics of the request so as to extract at least one parameter specific to the request;

matching the presented biometric with a previously stored biometric for the user so as to provide a matching score;

determining an appropriate threshold score from a plurality of available threshold scores by using a set of parameters specific to the request to ascertain which of a plurality of threshold tables is most appropriate for the set of parameters;

extracting a threshold score from the appropriate threshold table, on selecting the appropriate threshold table;

comparing the threshold score with the matching score; and

authenticating the user on determining that the matching score exceeds the threshold score, wherein said method is performed using a computer.

23. The method as claimed in claim 22, wherein the authentication request is performed at a time of capturing the presented biometric.

24. The method as claimed in claim 22 wherein the authentication request is performed at a time subsequent to capturing the presented biometric.

25. The method as claimed in claim 24 further comprising capturing the presented biometric at a first location and transporting the presented biometric to a second location for matching using an appropriate threshold table.

26. The method as claimed in claim 25 wherein the appropriate threshold table is generated from a specific population subset.

27. The method as claimed in claim 24 wherein the user is a non-cooperative user.

28. The method as claimed in claim 27 wherein the presented biometric is captured during surveillance activities without the knowledge of the user.

29. The method as claimed in claim 22 wherein in response to the request for authentication a plurality of biometrics are received, the authentication of the user resulting from a matching of one or more of each of the plurality of biometrics.

30. The method as claimed in claim 29 wherein the user is authenticated irrespective of whether all presented biometrics match, the authentication being determined based on a confidence level associated with the plurality of presented biometrics being met.

31. The method as claimed in claim 22 further comprising monitoring a performance of the authentication process and generating at least one revised threshold score for use in future authentication processes based on historical authentication processes.

32. The method as claimed in claim 31 further comprising comparing the at least one revised threshold score with the existing threshold scores and generating an alert on detecting a predetermined variance between the at least one revised threshold score and the existing threshold scores.