Apparatus and methods for identity verification

• US 9,330,511 B2
• Filed: 04/25/2014
• Issued: 05/03/2016
• Est. Priority Date: 08/30/2013
• Status: Expired due to Fees

• Current Assignee: Cylon Global Technology Inc.
• Original Assignee: Cylon Global Technology Inc.
• Inventors: Webber, Glenn, Courtney, Eamonn, Cole-Courtney, Jacqueline
• Primary Examiner(s): Mehmood, Jennifer
• Assistant Examiner(s): Mahase, Pameshanand
• Application Number:
  US14/262,217
• Publication Number:
  US 20150061826A1
• Time in Patent Office: 739 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G06V 40/50 Maintenance of biometric data or enrolment thereof
• CPC Class Codes: G07C 2209/02 Access control comprising means for the enrolment of users
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/041 : Key generation or derivation
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements

Abstract

An identity verification device comprises a cellular telecommunications modem and a fingerprint scanner coupled to the modem, the verification device being configured for storing first fingerprint data in an enrollment process and being operable, in response to the modem receiving a verification command via a cellular telecommunications network, to perform a verification process in which the fingerprint scanner scans a fingerprint to obtain second fingerprint data, the first and second fingerprint data are compared with each other, and in the event of a match between the first and second fingerprint data, the modem transmits a response signal to a predetermined destination via the telecommunications network. The device may be used in a networked telecommunications system in which the electronic transactions may be initiated by smart cards and other devices.

Claims

1. A network system for performing electronic transactions or processes comprising:

(a) terminal apparatus for generating instructions for the performance of said electronic transactions or processes;

(b) at least one computer separate from the terminal apparatus and for performing the electronic transactions or processes;

(c) a plurality of verification devices each comprising a cellular telecommunications modem and a biometric sensor, each verification device for storing first biometric data in an enrollment process, for performing a verification process in response to a verification command received by said modem, and for transmitting a response signal to a predetermined destination by said modem in the event the result of the verification process is positive, wherein each of the verification devices is separate from the terminal apparatus;

(d) a data storage device configured for storing data identifying said verification devices;

(e) a verification command generator for generating verification commands; and

(f) a receiver for receiving the response signals;

wherein;

(g) said terminal apparatus, without communication to said verification devices, generates said instructions and transmits said instructions to said at least one computer via a telecommunications network connecting the terminal apparatus to the at least one computer,

(h) said at least one computer in response to receipt of said instruction causes said verification command generator to generate said verification command,

(i) said verification command generator causes the verification command to be transmitted to said verification device whose identity is determined in dependence upon data in the instruction and data in the data storage device,

(j) the verification process performed by the verification device comprises obtaining second biometric data from said biometric sensor, comparing the first and second biometric data with each other and, in the event of a match between said first and second biometric data, generating said response signal indicative of said match and transmitting said response signal to said receiver,

(k) said at least one computer is configured to not authorize said transaction or process unless said response signal indicating said match is received by said receiver, and

(l) said verification command is transmitted to said verification device and said response signal is transmitted to said receiver via a cellular telecommunications network without communication to said terminal apparatus, the cellular telecommunications network connecting each of the verification devices to the receiver.

2. A system according to claim 1, including a transmitter for transmitting a system password with said verification command, and wherein each verification device is configured for storing a system password and to perform said verification process only if the stored system password corresponds to the system password received with said command.

3. A system according to claim 1, including memory for storing a plurality of system passwords each associated with a respective different electronic transaction or process and each for transmission with said verification command, and wherein each verification device is configured for storing a plurality of system passwords and to perform said verification process only if one of the stored system passwords corresponds to a system password received with said verification command.

4. A system according to claim 3, in which the biometric sensor is a fingerprint sensor and said first and second biometric data are first and second fingerprint identifying data respectively.

5. A system according to claim 4, wherein each verification device:

(a) is configured for storing a plurality of said first fingerprint identifying data,

(b) is configured for performing a plurality of said enrollment processes in respective different ones of which first fingerprint identifying data relating to respective different fingers may be stored, and

(c) is configured for comparing, in said verification process, the second fingerprint identifying data to said plurality of stored first fingerprint identifying data relating to said different fingers.

6. A system according to claim 5, wherein each verification device:

(a) is configured for associating respective different ones of said plurality of system passwords stored in the verification device with respective different ones of said plurality of stored first fingerprint identifying data,

(b) is configured for generating said response signal only if;

(i) the received system password corresponds to one of the system passwords stored in the verification device, and

(ii) the second fingerprint identifying data that is obtained in the verification process matches the stored first fingerprint identifying data that is associated with said one system password.

7. A system according to claim 6, wherein each verification device is configured for storing a plurality of response passwords each associated with a respective said system password and is operable to include the associated response password in the response signal.

8. A system according to claim 4, in which

(a) the enrollment process comprises:

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in a memory which also contains other data values thereby to conceal the first fingerprint template,

(iii) deriving an encryption key from the first fingerprint template,

(iv) encrypting an item of information by an encryption algorithm which utilizes said encryption key, and

(v) storing said encrypted item of information;

(b) and said verification process comprises;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from the first fingerprint template, and

(iv) decrypting the encrypted item of information utilizing the regenerated encryption key.

9. A system according to claim 8, wherein said item of information comprises the unencrypted template.

10. A system according to claim 9, wherein the or each item of information includes further information additional to the system or response password.

11. A system according to claim 8, wherein said other data comprises random or pseudorandom numbers.

12. A system according to claim 8, wherein the or each first fingerprint template is broken up into components which are stored in disparate locations in said memory.

13. A system according to claim 1, wherein each verification device is configured for storing a response password and is configured to include said response password in the response signal.

14. A system according to claim 1, wherein each verification device is configured for storing a plurality of response passwords and is configured to include a selected one of said response passwords in the response signal, the selected response password being dependent upon the origin of the verification command.

15. A system according to claim 1, including a transmitter for transmitting a system password with said verification command, and wherein each verification device is configured for storing a system password and to perform said verification process only if the stored system password corresponds to the system password received with said command,

wherein the biometric sensor is a fingerprint sensor and said first and second biometric data are first and second fingerprint identifying data respectively,

wherein

(a) the enrollment process comprises:

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in a memory which also contains other data values thereby to conceal the first fingerprint template,

(iii) deriving an encryption key from the first fingerprint template,

(iv) encrypting an item of information by an encryption algorithm which utilizes said encryption key, and

(v) storing said encrypted item of information;

(b) and said verification process comprises;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from the first fingerprint template, and

(iv) decrypting the encrypted item of information utilizing the regenerated encryption key, and

wherein the item of information comprises the or each system password.

16. A system according to claim 1, wherein each verification device is configured for storing a response password and is configured to include said response password in the response signal,

wherein the biometric sensor is a fingerprint sensor and said first and second biometric data are first and second fingerprint identifying data respectively,

wherein

(a) the enrollment process comprises:

(i) deriving a first fingerprint template from a finger,

(ii) storing the first fingerprint template in unencrypted form in a memory which also contains other data values thereby to conceal the first fingerprint template,

(iii) deriving an encryption key from the first fingerprint template,

(iv) encrypting an item of information by an encryption algorithm which utilizes said encryption key, and

(v) storing said encrypted item of information;

(b) and said verification process comprises;

(i) deriving a second fingerprint template from a finger,

(ii) performing a matching process to match the second fingerprint template with the stored first fingerprint template,

(iii) if the matching process is successful, regenerating the encryption key from the first fingerprint template, and

(iv) decrypting the encrypted item of information utilizing the regenerated encryption key, and

wherein the item of information comprises the or each response password.

17. A system according to claim 1, wherein one or more of said terminals comprises a card reader for initiating the electronic transaction or process in relation to a smartcard.

18. A system according to claim 1, wherein one or more of said terminals comprises a tag reader for electronically reading a tag and initiating the electronic transaction or process.

19. A system according to claim 1, wherein one or more of said terminals is arranged to initiate said electronic transaction or process in response to entry into said terminal of data relating to a smartcard.

20. A system according to claim 1, in which each verification device includes a digital signal processor coupled to the biometric sensor for processing signals therefrom, the modem being operable to activate the digital signal processor for the performance of a biometric scan in response to receipt of the verification command.

21. A system according to claim 1, wherein each verification command is in an SMS text message.

22. A system according to claim 1, wherein each response signal is in an SMS text message.

23. A system according to claim 1, having a plurality of said verification devices each constructed in the form of a card.

24. A system according to claim 23, in which the dimensions of the card are no more than 100 mm×

60 mm×

5 mm.

25. A system according to claim 23, in which the dimensions of the card are 85 mm×

54 mm×

3.5 mm.

26. A system according to claim 23, wherein the card has a power supply circuit which includes a current booster which is rendered operable in response to the modem searching for a base station and inoperable when the modem is in communication with a base station, so that additional current is supplied to the modem when searching for a base station.

27. A system according to claim 26, in which the modem has a status contact whose voltage changes dependent upon whether the modem is searching for or is in communication with a base station, and in which a sensing circuit is operable to sense the voltage on the status contact and to render the current booster operable or inoperable dependent upon the sensed voltage.

28. A system according to claim 27, in which the current booster is powered from the status contact.

29. A system according to claim 26, in which the current booster comprises a voltage converter.

30. A system according to claim 26, including a battery for powering the verification device, said battery having a rating of approximately 3.2 or 3.5 V and 200 mA hours.

31. A system according to claim 1, including said verification device in the form of a smart phone or tablet computer.

32. A system according to claim 1, wherein each of the verification devices is further configured to perform the enrollment process in response to the cellular telecommunications modem of the corresponding verification device receiving an enrollment command via said cellular telecommunications network.

33. A verification device for verifying the identity of an individual, comprising:

a processor circuit;

a memory circuit in communication with the processor circuit;

a communications modem in communication with the processor circuit; and

a biometric sensor in communication with the processor circuit,

wherein the processor circuit is configured to;

receive, in an enrollment process, first biometric data from the biometric sensor,

store, in the enrollment process, the first biometric data in the memory circuit,

receive a verification command from a verification command generator via the communications modem, the verification command being generated by the verification command generator in response to a computer receiving instructions for the performance of an electronic transaction or process from a terminal apparatus, the terminal apparatus being separate from the computer, the instructions being generated by the terminal apparatus and being transmitted from the terminal apparatus to the computer via a communications network without communication to the verification device, the communications network connecting the terminal apparatus to the computer, the verification command being received by the communications modem via a cellular telecommunications network without communication between the verification device and the terminal apparatus,

perform a verification process in response to receiving the verification command, the verification process comprising;

i) receiving second biometric data from the biometric sensor, ii) comparing the first biometric data with the second biometric data, iii) in the event of a match between said first and second biometric data indicating that the verification process is positive, generating a response signal indicative of a match, and iv) controlling the communications modem to transmit the response signal to a receiver, the response signal sent from the communications modem to the computer causing the computer to perform the electronic transaction or process, and not transmitting the response signal from the communications modem to the computer thereby causing the computer to not authorize of the electronic transaction or process, based on the comparison of the first biometric data with the second biometric data,

wherein receiving the verification command from the verification command generator is based on data in the instructions received by the computer and data stored in a data storage device of the computer,

when receiving the verification command from the verification command generator is via the cellular telecommunications network without communication with the terminal apparatus, and

control the communications modem to transmit the response signal to the receiver via the cellular telecommunications network without communication to the terminal apparatus.

34. The verification device of claim 33, wherein the memory circuit is configured to store a plurality of first system passwords, and wherein the processor circuit is further configured to perform the verification process only if one of the first system passwords stored in the memory circuit corresponds to a second system password received with the verification command, a plurality of second system passwords are each associated with a respective different electronic transaction or process, the second system password received with the verification command being transmitted from the verification command generator.

35. The verification device of claim 33, wherein the memory circuit is configured to store a plurality of response passwords and wherein the processor circuit is configured to include a selected one of the response passwords in the response signal, the processor circuit being configured to select the response password dependent upon the origin of the verification command.

36. The verification device of claim 33, wherein the biometric sensor comprises a fingerprint sensor and the first and second biometric data are respectively first and second fingerprint identifying data.

37. The verification device of claim 36, wherein the processor circuit is configured to:

derive a first fingerprint template from a finger,

store the first fingerprint template in unencrypted form in the memory circuit, the memory circuit also containing other data values so as to conceal the first fingerprint template,

derive an encryption key from the first fingerprint template,

encrypt an item of information by an encryption algorithm which utilizes the encryption key, and

store the encrypted item of information,

derive a second fingerprint template from a finger,

perform a matching process to match the second fingerprint template with the stored first fingerprint template,

if the matching process is successful, regenerate the encryption key from the first fingerprint template, and

decrypt the encrypted item of information utilizing the regenerated encryption key.

38. A computer system for performing an electronic transaction or process, comprising:

a processor circuit;

a data storage device in communication with the processor circuit, the data storage device being configured to store data identifying a plurality of verification devices;

a receiver in communication with the processor circuit and configured to receive a response signal;

a verification command generator; and

a transmitter in communication with the processor circuit, the receiver and transmitter being connected to the verification devices,

wherein the processor circuit is configured to;

receive instructions for the performance of the electronic transaction or process from a terminal apparatus via a communications network, the terminal apparatus being separate from the verification devices, the communications network connecting the terminal apparatus to the processor circuit, the instructions received by the processor circuit being generated by the terminal apparatus and transmitted to the processor circuit without communication to the verification devices,

control the verification command generator to generate a verification command in response to receiving the instructions, the verification command generator transmitting the verification command to a selected one of the verification devices based on the data identifying a plurality of verification devices stored in the data storage device, the verification command being transmitted to the selected verification device via a cellular telecommunications network without communication to the terminal apparatus and causing the selected verification device to;

i) receive first biometric data from a biometric sensor of the verification device, ii) compare the first biometric data with second biometric data previously received from the biometric sensor and stored in a memory circuit of the verification device, iii) in the event of a match between the first and second biometric data indicating that the verification process is positive, generate the response signal indicative of a match, and iv) control a communications modem of the verification device to transmit the response signal to the receiver, the receiver receiving the response signal from the verification device via the cellular telecommunications network without communication to the terminal apparatus,

perform the electronic transaction or process in response to the receiver receiving the response signal from the communications modem, and

not authorize the electronic transaction or process unless the receiver receives the response signal.

39. The computer system of claim 38, wherein the data store is configured to store a plurality of first system passwords each associated with a respective different electronic transaction or process, the verification command generator being configured to transmit one of the system passwords with the verification command, the system password being received by the selected verification device causing the selected verification device to perform the verification process only if one a plurality of second system passwords stored in the memory circuit of the verification device corresponds to the first system password received with the verification command.