Method and system to electronically identify and verify an individual presenting himself for such identification and verification

• US 8,392,721 B2
• Filed: 12/01/2004
• Issued: 03/05/2013
• Est. Priority Date: 12/02/2003
• Status: Active Grant

• Current Assignee: Sureshwara Incorporated
• Original Assignee: Karsof Systems, LLC
• Inventors: Kaleedhass, Karthik, Kaleedhass, Lalitha, Narayanaswamy, Srikanthan
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): LEWIS, LISA C
• Application Number:
  US10/581,496
• Publication Number:
  US 20070253601A1
• Time in Patent Office: 3,016 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G07C 2209/12 Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition

Abstract

A method and a system of electronically identifying and verifying an individual utilizing at least one biometric features of the individual is disclosed. The method includes the steps of activating an access apparatus with a means to capture at least one biometric feature of an individual in a secure manner using dynamic encryption, capturing the biometric feature of an individual wherein key features of biometric raw data are extracted, encrypting in a dynamic manner the biometric features, transmitting the encrypted data of the biometric feature to at least one server; and verifying the biometric features captured in the fruit step with a pre-stored biometric feature in the server. Wherein upon positive identification and verification of the individual access is given to an auxiliary means such as but not limited to access to secured doors, database, computer network and servers.

Claims

1. A method of electronically identifying and verifying an individual utilizing at least one biometric feature of the individual including the steps of:

enrolling an individual into a database including;

(a) inputting required particulars of the individual into the database and ascertaining the existence or otherwise of the particulars of the individual in the database, wherein the particulars include at least one of images and binary data, wherein the binary data include any representation capable of being stored in a binary form;

(b) capturing the biometric features of the individual wherein key features of the biometric raw data are extracted;

(c) encrypting in a dynamic manner the biometric features, the method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth; and

(d) transmitting the encrypted data of the biometric features to the server and storing the encrypted data in relation to the particulars of the individual obtained in step (a) above;

verifying an individual in the database including;

(i) activating an access apparatus with a means to capture at least one biometric feature of an individual in a secure manner using dynamic encryption;

(ii) capturing the at least one biometric feature of an individual wherein key features of biometric raw data are extracted;

(iii) encrypting in a dynamic manner the at least one biometric feature, a method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth;

(iv) transmitting the encrypted data of the at least one biometric feature from the access apparatus to at least one server in the access apparatus or to at least one server spatially separated from the access apparatus, wherein in a first attempt the access apparatus will attempt to send the encrypted data to the spatially separated server and upon detecting a failure in the first attempt, the access apparatus will in a second attempt send the encrypted data to any other designated server in a network, wherein the designated servers are either servers spatially separated from the access apparatus or the servers in the access apparatus; and

(v) verifying the at least one biometric feature captured in step (i) with a pre-stored biometric feature in the server in step (iv),

wherein at least one spatially separated server is located outside the country and wherein upon positive identification and verification of the individual access is given to an auxiliary means including access to secured doors, database, computer network and servers, and wherein the biometric features include fingerprint, retina, iris, palm print, face, handwriting, handprint, signature and voice recording biometric features capable of being captured by a scanner.

2. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the server is either spatially separated from the access apparatus or is contained within the access apparatus.

3. A method of electronically identifying and verifying an individual as claimed in claim 1, wherein the particulars in step (a) further include alpha-numeral data.

4. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the server is provided in a storage medium or other device capable of recording data.

5. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the identification of the individual is executed by comparing the biometric features of the individual captured in step (ii) of claim 1 with known biometric features of the individual previously captured and stored in a database and picked out from the database by the use of a unique personal identification number (PIN) allocated to the individual and to the records in the database.

6. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the identification of the individual is executed by comparing the biometric features of the individual captured in step (ii) of claim 1 with known biometric features of the individual previously captured and stored in the database without the use of any PIN numbers.

7. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the biometric features of the individual to be identified and verified are stored in a server instead of in any storage medium held in possession by or issued to individual.

8. A method of electronically identifying and verifying an individual as claimed in claim 1 wherein the encrypted biometric features of the individual are processed by an biometric server software located at the server instead of at the point where the biometric features of an individual presenting for identification and verification are captured.

9. An electronic means of identifying and verifying an individual presenting for such identification and verification including:

a means to enroll an individual into a database including;

(a) a means to input required particulars of the individual into the database and ascertaining the existence or otherwise of the particulars of the individual in the database, wherein the particulars include at least one of images and binary data, wherein the binary data include any representation capable of being stored in a binary form;

(b) a means to capture the biometric features of the individual wherein key features of the biometric raw data are extracted;

(c) a means to encrypt in a dynamic manner the biometric features, the method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth; and

(d) a means to transmit the encrypted data of the biometric features to the server and storing the encrypted data in relation to the particulars of the individual obtained in step (a) above;

a means to verify an individual in the database including;

(i) a means to capture at least one type of biometric features of the individual;

(ii) a software means to encrypt in a dynamic manner the biometric features captured in (i), a method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth;

(iii) a transmission means wherein the encrypted biometric features of the individual are transmitted from an access apparatus to a server;

(iv) a software means to capture the encrypted biometric features presented for identification and verification against stored encrypted biometric features of a purported individual; and

(v) a means to give access to other database or software if a positive identification and verification is made and to deny such access if a negative identification and verification is made,

wherein the biometric features include fingerprint, retina, iris, palm print, face, handwriting, handprint, signature and voice recording biometric features capable of being captured by a scanner.

10. An electronic means of identifying and verifying an individual as claimed in claim 9 wherein identifying the individual comprises:

a PIN number for each stored encrypted biometric features of an individual; and

a means to access the stored encrypted biometric features of an individual by the provision of a correct PIN number by an individual presenting for identification and verification and a means to compare the captured biometric features of the individual with a given PIN number with the stored biometric features of the purported individual.

11. A method of electronically identifying and verifying an individual as claimed in claim 9 wherein the biometric features further include finger print, retina scan, iris scan or any other unique biometric features capable of being captured by sensors.

12. An electronic means of identifying and verifying an individual as claimed in claim 9 wherein the biometric features further include finger print, retina scan, iris scan or any other unique biometric features capable of being captured by sensors.

13. An electronic means of identifying and verifying an individual presenting for such identification and verification including:

a means to enroll an individual into a database including;

(a) a means to input required particulars of the individual into the database and ascertaining the existence or otherwise of the particulars of the individual in the database, wherein the particulars include at least one of images and binary data, wherein the binary data include any representation capable of being stored in a binary form;

(b) a means to capture the biometric features of the individual wherein key features of the biometric raw data are extracted;

(c) a means to encrypt in a dynamic manner the biometric features, the method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth; and

(d) a means to transmit the encrypted data of the biometric features to the server and storing the encrypted data in relation to the particulars of the individual obtained in step (a) above;

a means to verify an individual in the database including;

(i) access apparatus with a means to capture at least one biometric raw data of an individual in a secure manner using dynamic encryption, wherein the biometric raw data include fingerprint, retina, iris, palm print, face, handwriting, handprint, signature and voice recording biometric features capable of being captured by a scanner;

(ii) circuitry to extract any features of the biometric raw data from the means to capture the biometric raw data;

(iii) circuitry to encrypt the key features of the biometric raw data in a dynamic manner, a method of encryption selected based on factors including the computing power of a registration computer, the computing power of a server computer, and network bandwidth;

(iv) transmission means to transmit encrypted data of the biometric features from the access apparatus to at least one server;

(v) at least one server to receive and store the encrypted data of the biometric feature of the individual; and

(vi) circuitry to at least one of verify and identify the encrypted data against pre-stored encrypted biometric data in the server.

14. An electronic means of identifying and verifying an individual as claimed in claim 13 wherein the server is either spatially separated from the access apparatus or is contained within the access apparatus.

15. An electronic means of identifying and verifying an individual as claimed in claim 13, which includes circuitry of transmission of encrypted biometric data to a pre-designated server, wherein if transmission of encrypted biometric data to a pre-designated server fails, the encrypted biometric data is routable to at least one other designated server in a pre-designated sequence.

16. An electronic means of identifying and verifying an individual as claimed in claim 13, wherein a token encoding data unique to the individual presenting for identification and verification has to be introduced into the access apparatus before the biometric feature of the individual is captured.

17. An electronic means of identifying and verifying an individual as claimed in claim 13, wherein the biometric data of an individual is stored in a encrypted manner in server and in any tokens if used.

18. An electronic means of identifying and verifying an individual as claimed in claim 13, wherein the means requires the introduction of a personal identification number (PIN) of an individual presenting for identification and verification into the access apparatus.

19. An electronic means of identifying and verifying an individual presenting for such identification and verification as claimed in claim 13, wherein the biometric raw data in step (i) further include finger print.