Apparatus and methods for identity verification

• US 9,704,312 B2
• Filed: 04/29/2016
• Issued: 07/11/2017
• Est. Priority Date: 08/30/2013
• Status: Expired due to Fees

• Current Assignee: Cylon Global Technology Inc.
• Original Assignee: Cylon Global Technology Inc.
• Inventors: Webber, Glenn, Courtney, Eamonn, Cole-Courtney, Jacqueline
• Primary Examiner(s): Feild, Joseph
• Assistant Examiner(s): Mahase, Pameshanand
• Application Number:
  US15/143,269
• Publication Number:
  US 20160247337A1
• Time in Patent Office: 438 Days
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G06V 40/50 Maintenance of biometric data or enrolment thereof
• CPC Class Codes: G07C 2209/02 Access control comprising means for the enrolment of users
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/041 : Key generation or derivation
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements

Abstract

An identity verification device comprises a cellular telecommunications modem and a fingerprint scanner coupled to the modem, the verification device being configured for storing first fingerprint data in an enrolment process and being operable, in response to the modem receiving a verification command via a cellular telecommunications network, to perform a verification process in which the fingerprint scanner scans a fingerprint to obtain second fingerprint data, the first and second fingerprint data are compared with each other, and in the event of a match between the first and second fingerprint data, the modem transmits a response signal to a predetermined destination via the telecommunications network. The device may be used in a networked telecommunications system in which the electronic transactions may be initiated by smart cards and other devices.

Claims

1. A method of authorizing an electronic transaction or process to be performed utilizing an electronic transaction device which cooperates with a terminal apparatus which is responsive to said transaction device for generating instructions for the performance of said electronic transaction or process, the method comprising:

(a) receiving a verification command at a verification device which comprises a biometric sensor and has first biometric data stored therein, said verification device being separate from said transaction device and said terminal, said verification command being received via a telecommunications network independently of said terminal and said transaction device;

(b) responsive to receipt of said verification command, performing by the verification device an authentication process which comprises the verification device obtaining, from said biometric sensor, second biometric data and comparing the first and second biometric data with each other; and

(c) in the event of a match between said first and second biometric data, said verification device generating a response signal indicative of said match and transmitting said response signal, independently of said transaction device and said terminal, to a predetermined destination for authorizing said transaction or process.

2. A method according to claim 1, wherein said verification command is received by said verification device, via a cellular telecommunications network, at a cellular telecommunications modem of said verification device.

3. A method according to claim 1, in which a system password is received by said verification device with said verification command, and said verification device generates said response signal only if a system password stored in the verification device corresponds to the system password received with said command.

4. A method according to claim 3, wherein the verification device includes a response password in said response signal.

5. A, method according to claim 1, in which the biometric sensor is a fingerprint sensor and said first and second biometric data are first and second fingerprint identifying data respectively.

6. A method according to claim 2, wherein the verification command is in an SMS text message.

7. A method according to claim 2, wherein said response signal is transmitted via said cellular telecommunications network in an SMS text message.