Object authentication system

• US 7,725,732 B1
• Filed: 12/16/2004
• Issued: 05/25/2010
• Est. Priority Date: 12/16/2003
• Status: Active Grant

• Current Assignee: Identity Validation Products LLC
• Original Assignee: Claudio Ballard
• Inventors: Ballard, Claudio R.
• Primary Examiner(s): Dada; Beemnet W
• Application Number:
  US11/014,368
• Time in Patent Office: 1,986 Days
• Field of Search: 713/182, 713/186, 713/168, 713/170, 726/6, 726/7, 726/18, 726/19
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system employing enrollment information and the quality of the enrollment information. The enrollment information includes data unique to the identification of a person. The system also stores biometric sensor quality information. When a person seeks to authenticate his/her identity, the sensor transmits the sensor quality data along with the biometric attribute data to the system. The transmitted data is correlated with the enrollment data, and quality of the enrollment data, to produce a score indicative of the probability of a correct identification.

Claims

1. A method of authenticating an identity of an object, comprising the steps of:

enrolling the object in a computer readable data base by storing identification information associated with each object of a plurality of objects in the computer readable database;

assigning a trust value to the identification information for each object to indicate a level of trust of the validity of the identification information, and storing the trust value in association with the identification information for each object;

carrying out an authentication session by receiving an request for identification of an object, and receiving identification data of the object to be identified from a sensor into which the identification information was input;

comparing the identification data received during the authentication session with the stored identification information received during the enrollment of the object to find a sufficient match therebetween;

using the trust value of the identification information stored during enrollment to derive a score;

using a predetermined trust value of the sensor to derive the score, where the trust value of the sensor is embedded in the sensor and signifies a level of confidence that the person inputting identification information therein is who they purport to be;

using the trust value of the sensor and the trust value of the identification information, and defining the score so that the score is no larger than either of the trust value of the sensor or the trust value of the identification information; and

providing a response indicating a sufficient match, and providing the score indicating a probability that the object is what the object is purported to be.

2. The method of claim 1, further including storing in the database a trust value having a value depending on whether the object was present before a certified agent when the identification information was enrolled and stored in the database.

3. The method of claim 1, further including using the data base in a computer controlled authentication system, and further including using a biometric sensor to collect the identification data, and transmitting the trust value associated with the sensor and a sensor identification to the authentication system during the authentication session.

4. The method of claim 1 further including defining the score as the lower of the trust value of the sensor or the enrollment identification information to prevent a high score if the trust value of the enrollment identification information is high, and the trust value of the sensor into which the identification information is input during the authentication session is low.

5. The method of claim 1, wherein said object comprises a living or a nonliving object.

6. The method of claim 1, further including storing in the database trust values having values as a function of a level of certification of an agent enrolling the identification information with the database.

7. The method of claim 1, further including the step of enrolling objects by storing identification information in the database, and allowing only a single enrollment for each object.

8. The method of claim 7, further including flagging a possible fraudulent enrollment when an object is attempted to be enrolled multiple times.

9. The method of claim 1, further including enrolling living persons by storing in the database identification information obtained from documents associated with each said person, and storing biometric identification information obtained from each enrolled person, and associating the documentary identification information and the biometric identification information of each enrolled person.

10. The method of claim 9, further including using an administrative enrolling agent who enrolls identification information of other persons, and assigning a trust value to the administrative enrolling agent, where the trust level of the administrative agent is higher than the trust value of the identification information of a person enrolled by the administrative agent.

11. The method of claim 1, further including receiving a trust value of a biometric sensor generating the biometric identification information, and correlating the trust value of the biometric identification information with the trust value of the enrolled identification information to define said score.

12. The method of claim 11, further including correlating the trust values using a first coordinate axis for the trust value of the enrollment identification information, and using a second coordinate axis for the trust value of the biometric sensor, and using a linear line defining a score that is correlated to both the trust values.

13. The method of claim 1, further including processing trust values of biometric sensors where the trust values of the biometric sensors are a function of the agent administering the biometric sensor to identify a person.

14. The method of claim 7, further including comparing identification information received during an authentication session with substantially all of the enrolled identification information stored in the database, and if multiple sufficient matches are found, generating a flag indicating a potential fraudulent enrollment.

15. A method of authenticating the identity of a person comprising the steps of:

enrolling the identity of a person in a computer-readable database by storing identification information relating to the identity of the person;

storing in association with the identification information a trust value which is a measure of the accuracy of the identification information identifying the person;

storing in the database biometric identification information of the person;

capturing biometric identification information of the person to be identified;

using a trust value of the biometric sensor used to identify the person, where the trust value is a measure of the accuracy of the biometric identification information in identifying the person; and

using the trust value of the biometric sensor and the trust value of the identification information stored in the database, and defining a score no larger than either of the trust values wherein the score provides an indication of the identity of the person.

16. The method of claim 15, further including forming a mathematical relationship between the trust value of the identification information stored in the database and the trust value of the biometric sensor before providing the indication of the identity of the person.

17. A method of authenticating an identity of a person, comprising the steps of:

using a computer-implemented program of an identification authentication system;

enrolling the identity of a person in a database of the system by accumulating identification information in the database, where the identification information is obtained from the person to be enrolled;

assigning a trust value to the enrolled identification information as a function as to whether the person to be enrolled is present and providing the identification information to an authorized agent, or whether the person is not present and is transmitting the identification information via a computer terminal for storage in the database;

receiving a request to identify a person together with identification information which is submitted by the person whose identity is to be determined;

receiving biometric identification information from the person whose identity is to be determined, and using a trust value of a biometric sensor which provides the biometric identification information; and

using the trust value of the enrolled identification information and the trust value of the biometric sensor to provide a score relating to a conclusion as to the identity of the person whose identity is to be determined wherein the score is no larger than the trust value of the enrolled identification information or the trust value of the biometric sensor.

18. The method of claim 17 further including assigning a numerical value to the trust value of the enrolled identification information, and assigning a numerical value to the trust value of the biometric sensor, and deriving the score based on the numerical values of the respective trust values.

19. The method of claim 17, further including assigning trust values to the biometric sensors, where each trust value is not unique and is an indication of the degree of confidence of the authenticity of the identification information input thereto, and where the trust value is a function of the environment in which the biometric sensor is placed, and is a function of whether the biometric sensor is supervised by a certified operator.