System and method for tokenless biometric authorization of electronic communications

• US 9,294,481 B1
• Filed: 09/08/2014
• Issued: 03/22/2016
• Est. Priority Date: 11/28/1994
• Status: Expired due to Fees

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Hoffman, Ned
• Primary Examiner(s): Agwumezie, Charles C
• Application Number:
  US14/480,353
• Time in Patent Office: 561 Days
• Field of Search: 705/50, 705/64, 705/67, 902/3, 726/17, 726/21
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: G07F 9/009 User recognition or proximity detection
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

This invention is a method and system for tokenless biometric authorization of an electronic communication, using a biometric sample, a master electronic identicator, and a public communications network, wherein the method includes: an electronic communication formation step, wherein at least one communication comprising electronic data is formed; a user registration step, wherein a user electronically submits a registration biometric sample taken directly from the person of the user; a public network data transmittal step, wherein the registration biometric sample is electronically transmitted to a master electronic identicator via a public communications network, said master electronic identicator comprising a computer database which electronically stores all of the registration biometric samples from all of the registered users; a user registration biometric storage step, wherein the registration biometric sample is electronically stored within the master electronic identicator; a bid biometric transmittal step, wherein a bid biometric sample, taken directly from the person of the user, is electronically transmitted to at least one electronic identicator; a user identification step, wherein an electronic identicator compares the bid biometric sample to at least one registration biometric sample previously stored in an electronic identicator, for producing either a successful or failed identification of the user; an electronic communication authorization step, wherein upon a successful identification of the user by an electronic identicator, at least one electronic communication is authorized for execution; wherein an electronic communication is biometrically-authorized without the user having to present any personalized man-made memory tokens such as smartcards, or magnetic stripe cards.

Claims

1. A system, comprising:

at least one master electronic identicator, further comprising;

i) a computer database containing electronically stored biometric samples from all registered users;

ii) a comparator that electronically compares a received biometric sample with previously stored biometric samples to deliver either a successful or failed identification of a user;

an electronic communication authorization platform, connected to the master electronic identicator, that authorizes execution of at least one electronic communication upon a successful identification of the user by an electronic identicator;

a rule-module invocation platform, that invokes at least one previously designated user-customized rule-module upon successful identification of the user, wherein the user-customized rule module includes at least one user-customized pattern data associated with at least one user-customized execution command;

an electronic communication execution platform that executes at least one electronic communication upon the invocation of a user-customized rule-module per the execution command, wherein an electronic communication is biometrically-authorized in a tokenless manner.

2. The system of claim 1, wherein the master electronic identicator further comprises a computer database which is physically remote from the site at which the user submits a biometric sample.

3. The system of claim 1, further comprising a subset electronic identicator having:

a computer database containing a subset of all stored biometric samples from registered users, and;

a comparator that compares a received biometric sample with previously stored biometric samples to deliver either a successful or failed identification of the user.

4. The system of claim 1, wherein any component of the system is used in any of the following chronological sequences:

simultaneously, and;

separated by any increment of time including seconds, minutes, hours, days, weeks, months, and years.

5. The system of claim 3, further comprising:

an enterprise data input apparatus for an enterprise to electronically input registration identity data; and

an electronic communication authorization platform, that authorizes execution of an electronic communication upon a successful identification of the enterprise by an electronic identicator and a successful identification of the user by an electronic identicator, wherein an electronic communication is tokenlessly biometrically authorized.

6. The system of claim 5, wherein any component is used in any of the following chronological sequences:

simultaneously, and;

separated by any increment of time including seconds, minutes, hours, days, weeks, months, and years.

7. The system of claim 1, wherein a biometric sample comprises any of the following:

a fingerprint, a facial scan, a retinal image, an iris scan, and a voice print.

8. The system of claim 5, wherein the enterprise is a legally formed entity comprising any of the following:

a corporation, a foundation, a non-profit organization, a sole proprietorship, a limited liability company, and a partnership.

9. The system of claim 1, wherein:

the computer database further contains electronically stored personal identification codes from all registered users, the electronically stored personal identification codes being associated with all of the electronically stored biometric samples; and

the comparator electronically comparing a received biometric sample with previously stored biometric samples to deliver either a successful or failed identification of a user comprises the comparator comparing the received biometric sample with previously stored biometric samples associated with a received personal identification code.

10. The system of claim 5, further comprising a user re-registration platform, wherein the user'"'"'s registration biometric sample is compared by at least one electronic identicator to previously registered biometric samples wherein if a match occurs, the electronic identicator is alerted to the fact that the user has attempted to re-register.

11. The system of claim 9, further comprising a biometric theft resolution platform, wherein a user'"'"'s personal identification code is changed when the user'"'"'s registered biometric sample is determined to have been fraudulently duplicated.

12. The system of claim 1, wherein an electronic communication comprises any of the following:

an email, a telephone call, an encrypted data packet, an Internet telephony, and a facsimile.

13. The system of claim 1, wherein the components of the system communicate data via any of the following:

an extranet, a wide area network, a cable network, a wireless network, a telephone network, the Internet, an ATM network, or an X.25.

14. The system of claim 5, wherein registration identity data comprises any of the following:

an alpha-numeric code, a hardware identification code, an email address, a financial account, a biometric of an authorized enterprise representative, a non-financial data repository account, a telephone number, a mailing address, a digital certificate, a network credential, an Internet protocol address, a digital signature, an encryption key, and an instant messaging address.

15. The system of claim 1, wherein the electronic communication execution platform interconnects with one or more third-party servers in order to execute the electronic communication.

16. The system of claim 1, wherein pattern data comprises any of the following:

demographic information;

an email address;

a financial account;

internet browsing patterns;

a non-financial data repository account;

a telephone number;

a mailing address;

purchasing patterns;

database authorization fields;

financial credit report data;

a call-center queuing, routing and automated response program;

an email-center queuing, routing and automated response program;

data on pre-paid accounts or memberships for products or services;

electronic data utilization patterns;

employee status;

job title;

data on user behavior patterns;

a digital certificate;

a network credential;

an internet protocol address;

a digital signature;

an encryption key;

an instant messaging address;

user-customized medical records;

an electronic audio signature; and

an electronic visual signature.

17. The system of claim 1, wherein the execution commands further comprises a user-customized instructions for execution of any of the following:

accessing of stored electronic data, processing of electronic data, and presentation of electronic data.

18. The system of claim 17, wherein the accessing of stored electronic data further comprises execution of any of the following:

activation of an Internet-connected device;

accessing of a secured physical space, and unlocking of a secured physical device.

19. The system of claim 17, wherein the processing of electronic data further comprises invoking any of the following:

a digital certificate, an identity scrambler, a database authorization field, an electronic advertisement, an instant messaging program, real-time tracking of an incoming caller or an email sender, a time and attendance monitoring program, an emergency home alarm and personal safety notification program, a real-time challenge-response program, a call-center queuing prioritization program, a call-center routing prioritization program, an email-center queuing prioritization program, an email-center routing prioritization program, an automated caller or emailer response program, a call-forwarding program, and an electronic intelligent software program for electronic data search and retrieval.

20. The system of claim 19, wherein the presentation of electronic data comprises any of the following:

a print-out, a computer screen display, an audio message, a tactile sensation and a holographic image.

21. The system of claim 1, wherein the rule-module invocation platform is interconnected with one or more third-party computers.

22. The system of claim 1, further comprising a rule-module clearinghouse connected to the master electronic identicator;

and wherein the user-customized pattern data is provided to the electronic rule-module clearinghouse by any of the following;

the user, the electronic identicator, the electronic rule-module clearinghouse, and a user-authorized third party.

23. The system of claim 22, wherein:

the rule-module clearinghouse includes a master rule-module clearinghouse, comprising a computer database storing all rule-modules for all registered users; and

the system further comprises a subset rule-module clearinghouse, comprising a computer database storing a subset of all of the rule-modules for the registered users.

24. The system of claim 3, wherein the subset electronic identicator further comprises a computer database which is physically remote from the master identicator.

25. The system of claim 23, further comprising:

a subset rule-module invocation platform that invokes at least one user-customized rule-module, wherein if the subset rule-module invocation platform fails to invoke a user-customized rule-module, a request is transmitted to a master rule-module invocation platform;

the master rule-module invocation platform that invokes at least one user-customized rule-module per the request;

an electronic communication execution platform that executes at least one electronic communication upon the earliest invocation of a user-customized rule-module by a rule-module invocation platform.

26. The system of claim 23, wherein the subset rule-module clearinghouse is physically remote from the master rule-module clearinghouse.