Personal biometric system and method for wireless device control

• US 8,812,863 B2
• Filed: 06/18/2012
• Issued: 08/19/2014
• Est. Priority Date: 06/18/2012
• Status: Active Grant

• Current Assignee: Willis D. Stinson III
• Original Assignee: Willis D. Stinson III
• Inventors: Stinson, Willis D. III
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US13/526,173
• Publication Number:
  US 20130339748A1
• Time in Patent Office: 792 Days
• Field of Search: 713/186, 726/18
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

In one embodiment, a biometric device includes a first portion having a processor and a second portion releasably coupled to the first portion. The processor is configured to determine whether the second portion is coupled to the first portion. The processor is configured to operate in an enrollment mode while the first portion is coupled to the second portion and operate in an authentication mode while the first portion is decoupled from the second portion. In one embodiment, a method of biometric authentication includes, first, coupling two portions of a biometric device to put it into an enrollment mode, collecting a biometric sample, and generating and storing a corresponding enrollment code; and second, decoupling the two portions of the biometric device, collecting a biometric sample, generating a corresponding access code, and granting or denying access to an asset based on comparison of the enrollment code and the access code.

Claims

1. A biometric device comprising:

a first portion including;

a processor;

a biometric sensor operatively coupled to the processor and configured to acquire biometric data from a user; and

a transmitter operatively coupled to the processor; and

a second portion releasably coupled to the first portion;

wherein the processor is configured to;

determine whether the second portion is coupled to the first portion;

operate in an enrollment mode while the first portion is coupled to the second portion;

receive the biometric data while operating in the enrollment mode and, in response thereto, generate an enrollment code based at least in part on the biometric data;

transmit a signal containing the enrollment code using the transmitter;

operate in an authentication mode while the first portion is decoupled from the second portion;

receive the biometric data while operating in the authentication mode and, in response thereto, generate an access code based at least in part on the biometric data;

determine whether the access code matches the enrollment code; and

transmit a signal containing the access code using the transmitter in response to determining a match between the access code and the enrollment code.

2. The biometric device of claim 1, wherein the biometric data represents at least one of a fingerprint, a palm vein scan, a facial image, an iris scan, a voice sample, and a DNA sample.

3. A protection device configured to communicate with a biometric device, the protection device comprising:

a first portion including;

a processor;

a receiver operatively coupled to the processor; and

a memory operatively coupled to the processor; and

a second portion releasably coupled to the first portion;

wherein the first portion is configured to be coupled to an asset in a manner that permits the first portion to restrict access to the asset;

wherein the processor is configured to;

determine whether the second portion is coupled to the first portion;

operate in an enrollment mode while the first portion is coupled to the second portion;

receive a signal containing an enrollment code using the receiver while operating in the enrollment mode and, in response thereto, store the enrollment code in the memory;

operate in an authentication mode while the first portion is decoupled from the second portion;

receive a signal containing an access code using the receiver while operating in the authentication mode;

compare the access code to the enrollment code stored in the memory while operating in the authentication mode; and

based on the comparison, cause the first portion to grant access to the asset if the access code matches the enrollment code stored in the memory, else cause the first portion to deny access to the asset.

4. A biometric authentication method comprising acts of:

coupling a first portion of a biometric device to a second portion of the biometric device;

coupling a first portion of a protection device to a second portion of a protection device;

acquiring enrollment biometric data from a user via a biometric sensor disposed on the first portion of the biometric device while the second portion of the biometric device is coupled to the first portion of the biometric device;

generating, by a processor operatively coupled to the biometric sensor, an enrollment code based at least in part on the enrollment biometric data;

wirelessly sending, by a transmitter operatively coupled to the processor, a signal containing the enrollment code from the first portion of the biometric device to the first portion of the protection device;

storing the enrollment code in a memory disposed in the first portion of the protection device while the second portion of the protection device is coupled to the first portion of the protection device;

decoupling the second portion of the biometric device from the first portion of the biometric device;

acquiring verification biometric data from the user via the biometric sensor while the second portion of the biometric device is decoupled from the first portion of the biometric device;

generating, by the processor operatively coupled to the biometric sensor, an access code based at least in part on the verification biometric data;

determining, by the processor operatively coupled to the biometric sensor, whether the access code matches the enrollment code; and

wirelessly sending, by the transmitter, a signal containing the access code from the first portion of the biometric device to the first portion of the protection device in response to determining a match between the access code and the enrollment code.

5. The biometric authentication method of claim 4, wherein the enrollment biometric data represents at least one of a fingerprint, a palm vein scan, a facial image, an iris scan, a voice sample, and a DNA sample.

6. The biometric authentication method of claim 4, further comprising an act of determining, by the processor, whether a first identification code associated with the first portion of the biometric device matches a second identification code associated with the second portion of the biometric device, wherein the act of wirelessly sending the enrollment signal is performed in response to determining a match between the first identification code and the second identification code.

7. The biometric authentication method of claim 4, wherein the verification biometric data represents at least one of a fingerprint, a palm vein scan, a facial image, an iris scan, a voice sample, and a DNA sample.

8. A biometric authentication method comprising acts of:

coupling a first portion of a biometric device to a second portion of the biometric device;

coupling a first portion of a protection device to a second portion of a protection device;

acquiring enrollment biometric data from a user via a biometric sensor disposed on the first portion of the biometric device while the second portion of the biometric device is coupled to the first portion of the biometric device;

generating, by a processor operatively coupled to the biometric sensor, an enrollment code based at least in part on the enrollment biometric data;

wirelessly sending, by a transmitter operatively coupled to the processor, a signal containing the enrollment code from the first portion of the biometric device to the first portion of the protection device;

storing the enrollment code in a memory disposed in the first portion of the protection device while the second portion of the protection device is coupled to the first portion of the protection device;

decoupling the second portion of the biometric device from the first portion of the biometric device;

decoupling the second portion of the protection device from the first portion of the protection device;

coupling the first portion of the protection device to an asset in a manner that permits the first portion of the protection device to restrict access by the user to the asset;

acquiring verification biometric data from the user via the biometric sensor while the second portion of the biometric device is decoupled from the first portion of the biometric device;

generating, by the processor operatively coupled to the biometric sensor, an access code based at least in part on the verification biometric data;

wirelessly sending, by the transmitter, a signal containing the access code from the first portion of the biometric device to the first portion of the protection device;

comparing, by a processor disposed in the first portion of the protection device, the access code to the enrollment code stored in the memory of the protection device while the second portion of the protection device is decoupled from the first portion of the protection device; and

based on the comparison, causing the first portion of the protection device to grant access to the asset if the access code matches the enrollment code stored in the memory of the protection device, else causing the first portion of the protection device to deny access to the asset.

9. An authentication apparatus comprising:

a first portion having a processor, a biometric sensor operatively coupled to the processor, and a transmitter operatively coupled to the processor; and

a second portion releasably coupled to the first portion,

wherein the processor is configured, in an enrollment mode of operation, to;

acquire biometric data from a user via the biometric sensor;

generate an enrollment code based at least in part on the biometric data; and

transmit a first signal containing the enrollment code using the transmitter,

wherein the processor is further configured, in an authentication mode of operation, to;

acquire biometric data from the user via the biometric sensor;

generate an access code based at least in part on the biometric data and the enrollment code;

determine whether the access code matches the enrollment code; and

transmit a second signal containing the access code using the transmitter in response to determining a match between the access code and the enrollment code, and

wherein the processor is further configured to operate in the enrollment mode of operation while the second portion is coupled to the first portion and in the authentication mode of operation while the second portion is decoupled from the first portion.

10. An authentication apparatus comprising:

a first portion having a processor, a memory operatively coupled to the processor, and a receiver operatively coupled to the processor, the first portion being configured to be coupled to an asset in a manner that permits the first portion to restrict access to the asset; and

a second portion releasably coupled to the first portion;

wherein the processor is configured, in an enrollment mode of operation, to;

receive a first signal containing an enrollment code using the receiver; and

store the enrollment code in the memory,

wherein the processor is further configured, in an authentication mode of operation, to;

receive a second signal containing an access code using the receiver;

compare the access code to the enrollment code stored in the memory; and

based on the comparison, cause the first portion to grant access to the asset if the access code matches the enrollment code stored in the memory, else cause the first portion to deny access to the asset, and

wherein the processor is further configured to operate in the enrollment mode of operation while the second portion is coupled to the first portion and in the authentication mode of operation while the second portion is decoupled from the first portion.