Secure element biometric authentication system

• US 9,275,212 B2
• Filed: 12/26/2012
• Issued: 03/01/2016
• Est. Priority Date: 12/26/2012
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: Li, Yuk Lun, Venkataramu, Praveen
• Primary Examiner(s): Moorthy, Aravind
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US13/727,065
• Publication Number:
  US 20140181959A1
• Time in Patent Office: 1,161 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

An input device may be in communication with an application processor, wherein the input device may be configured to receive an input and the application processor may be configured to translate the input to a received template. A secure element may be in communication with the application processor and configured to receive the received template from the application processor. The secure element may include a matcher and an enrolled template database. The matcher may be configured to compare the received template from the application processor with an enrolled template within the enrolled template database and return a match status based on the comparison.

Claims

1. A system comprising:

an input device configured to receive a user biometric input;

an application processor configured to communicate with the input device, verify a timestamp of the user biometric input by determining whether the timestamp indicates a recent time that is within a predetermined range, and translate the user biometric input into a received template including a vector representation of the user biometric input, the application processor comprising part of a mobile computing device;

a secure element configured to be in selective communication with the application processor and to receive the received template from the application processor, the secure element including a matcher and an enrolled template database, the secure element comprising a user-associated integrated circuit card physically removable from the mobile computing device; and

wherein the matcher is configured to

compare the received template from the application processor with at least one enrolled template within the enrolled template database,

identify a match score indicating a fraction of the vector representation of the received template that matches the at least one enrolled template, and

return a match status based on the comparison to the application processor.

2. The system of claim 1, wherein the secure element comprises one of a Universal Integrated Circuit Card (UICC) or a Subscriber Identity Module (SIM) card.

3. The system of claim 1, wherein the matcher is further configured to determine a match within the secure element in response to the received template matching the at least one enrolled template.

4. The system of claim 3, wherein the matcher is further configured to associate at least one application type with the matched enrolled template.

5. The system of claim 4, wherein the matcher is further configured to send a message to the application processor granting access to the application associated with the matched enrolled template, whereby a match of the received template with the at least one enrolled template automatically opens the associated application.

6. The system of claim 4, wherein at least one of the enrolled templates and the associations with an enrolled template may be established via user input during an enrollment mode.

7. The system of claim 1, wherein the matcher is further configured to:

associate a threshold value with each enrolled template, wherein the match status is a pass status in response to the match score being greater than the threshold value associated with the matched enrolled template.

8. The system of claim 1, wherein the predetermined range includes at least one of hours and days before.

9. A method, comprising:

receiving, at a computing device, a user biometric input;

verifying a timestamp of the user biometric input by determining whether the timestamp indicates a recent time that is within a predetermined range;

converting, at an application processor comprising part of a mobile computing device, the user biometric input into a received biometric template including a vector representation of the user biometric input;

transmitting the received biometric template to a secure element, the secure element comprising a user-associated integrated circuit card physically removable from the mobile computing device;

comparing, at the secure element, the received biometric template with at least one enrolled template;

identifying a match score indicating a fraction of the vector representation of the received template that matches the at least one enrolled template; and

transmitting a status based on the comparison to the application processor.

10. The method of claim 9, further comprising:

identifying at least one match between the received biometric template and the at least one enrolled template; and

identifying an application associated with the matched enrolled template.

11. The method of claim 10, further comprising:

identifying at least one threshold value associated with the identified application; and

determining whether the match score exceeds the associated threshold value, wherein the match status includes a pass status in response to the match score exceeding the associated threshold value and the match status includes a fail status in response to the threshold value exceeding the match score.

12. The method of claim 10, further comprising receiving a request for access to an application and wherein the user biometric input is received in response to prompting a user for the input at the computing device.

13. The method of claim 10, wherein the received template is compared with the at least one enrolled template during an identification mode.

14. The method of claim 9, further comprising storing the enrolled templates within the secure element during an enrollment mode.

15. A non-transitory computer-readable medium tangibly embodying computer-executable instructions comprising:

receiving, at a computing device, a user biometric input;

verifying a timestamp of the user biometric input by determining whether the timestamp indicates a recent time that is within a predetermined range;

converting, at an application processor comprising part of a mobile computing device, the user biometric input into a received biometric template including a vector representation of the user biometric input;

transmitting the received biometric template to a secure element, the secure element comprising a user-associated integrated circuit card physically removable from the mobile computing device;

comparing, at the secure element, the received biometric template with at least one enrolled template;

identifying a match score indicating a fraction of the vector representation of the received template that matches the at least one enrolled template; and

transmitting a status based on the comparison to the application processor.

16. The medium of claim 15, further comprising:

identifying at least one match between the received biometric template and the at least one enrolled template; and

identifying an application associated with the matched enrolled template.

17. The medium of claim 16, further comprising identifying at least one threshold value associated with the identified application.

18. The medium of claim 17, further comprising determining whether the match score exceeds the associated threshold value.

19. The medium of claim 18, wherein the match status includes a pass status in response to the match score exceeding the associated threshold value.

20. The medium of claim 15, further comprising storing the enrolled templates within the secure element.

21. A mobile computing device, comprising:

an input device configured to receive a user biometric input;

an application processor configured to communicate with the input device, verify a timestamp of the user biometric input by determining whether the timestamp indicates a recent time that is within a predetermined range, and translate the user biometric input into a received template including a vector representation of the user biometric input;

an interface configured to;

send the received template from the mobile computing device to a user-associated integrated circuit card physically removable from the mobile computing device,

identify a match score indicating a fraction of the vector representation of the received template that matches the at least one enrolled template; and

receive a match status from the user-associated integrated circuit card based on comparison within the user-associated integrated circuit card of the received template with at least one enrolled template within an enrolled template database.

22. The mobile computing device of claim 21, wherein the user-associated integrated circuit card comprises one of a Universal Integrated Circuit Card (UICC) or a Subscriber Identity Module (SIM) card.