System and method of secure personal identification

• US 9,948,638 B2
• Filed: 10/20/2016
• Issued: 04/17/2018
• Est. Priority Date: 12/07/2014
• Status: Active Grant

• Current Assignee: Chon Hock Leow
• Original Assignee: Chon Hock Leow
• Inventors: Leow, Chon Hock
• Primary Examiner(s): LE, NHAN T
• Application Number:
  US15/299,415
• Publication Number:
  US 20170048228A1
• Time in Patent Office: 544 Days
• Field of Search: 455 411- 413, 455410, 455411, 455418-420, 455422, 4554322, 4554323, 455557, 455558, 726 7, 726 9
• CPC Class Codes: H04B 1/385 Transceivers carried on the body, e.g. in helmets
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04M 1/724095 Worn on the wrist, hand or arm
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A system and method for securely and automatically identifying users to an inquirer for purposes of obtaining user identifying information is described. The system consisting of at least one client device associated with a user, at least one inquiring device associated with a host, a client information server and a network. The system allows computer based systems to automatically authenticate the identities of a plurality of users entering a physical space and obtain information pertaining to user preferences. The inquiring device may enable transactions with the user based on the authentication. The authentication may be enhanced by capturing biometric data from the user by the inquiring device as well as identifying known associates physically present with the user at the time of authentication.

Claims

1. An identity confirmation system and service provided by a computerized server connected to

a wide area network (WAN) storing and executing software from memory, comprising:

an interface, accessible on the WAN, provided by the software at the server, enabling a user to register for service with the server;

a computerized client device carried by a user and enabled to connect to the WAN, the client device including transmission and receiving hardware enabling wireless communication, the client device storing and executing an instance of the software from memory;

a computerized inquiring device connected to the WAN including transmission and receiving hardware enabling wireless communication, the inquiring device storing and executing an instance of the software from memory;

a database accessible to the server storing client identification data, profile data and preferences of the user; and

an identification token generated by the client device including the client identification data received from the server, the token stored on the client device;

wherein, upon the client device coming within geographic proximity enabling wireless communication with the inquiring device, the inquiring device requests the token from the client device, the client device forwards the token to the inquiring device which captures biometric data from the user, forwards the biometric data and the token to the server which analyzes and validates identity of the user and client device and forwards the stored profile data and preferences to the inquiring device.

2. The system of claim 1, wherein the biometric data includes anyone or more of user face recognition, fingerprints, retinal scans, voice recordings, handwriting and video of the user.

3. The system of claim 1 wherein facial characteristics of the user are captured and compared to a photograph of the user'"'"'s face stored in the database.

4. The system of claim 3, wherein a new photograph of the identified user is captured by the inquiring device and uploaded to the server to be stored for purposes of updating the facial characteristics of the user.

5. The system of claim 1, wherein the inquiring device sends second data identifying the inquiring device to the server with the token.

6. The system of claim 5, wherein the server issues a code providing the second data to the inquiring device at regular intervals or upon connection of the inquiring device with the server.

7. The system of claim 1 wherein the users profile data and preferences of the user includes any one or more of the user'"'"'s name, age, address, gender description, family members, general preferences regarding products, colors, music, literature, food and sport.

8. The system of claim 1, wherein the inquiring device utilizes the profile data received from the server to confirm identification of the user and facilitate transactions with the user.

9. The system of claim 1, wherein the server sends additional data along with profile data for the user including tracked historical data involving user'"'"'s contact with the system and data collected from third party servers about the user.

10. A method for providing an identity confirmation system and service provided by a computerized server connected to a wide area network (WAN) storing and executing software from memory, comprising the steps of:

(a) initially connecting to the server, via the WAN, a computerized client device carried by a user, the client device including transmission and receiving hardware enabling wireless communication, the client device storing and executing an instance of the software from memory;

(b) generating client identification data by the software at the server and sending it to the client device;

(c) receiving the client identification data at the client device and generating an identification token by an instance of the software at the client device;

(e) requesting the identification token from the client device, via wireless communication, by a computerized inquiring device, the client device being in a geographic proximity enabling the wireless communication;

(f) sending the token to the inquiring device which captures biometric data from the user and forwards the biometric data and identification token to the server; and

(g) receiving the biometric data and identification token at the server which validates identity of the user, client device and forwards stored profile information of the user to the inquiring device.

11. The method of claim 10, wherein the biometric data includes anyone or more of user face recognition, fingerprints, retinal scans, voice recordings, handwriting and video of the user.

12. The method of claim 11 wherein facial characteristics of the user are captured and compared to a photograph of the user'"'"'s face stored in the database.

13. The method of claim 12, wherein the inquiring device sends second data identifying the inquiring device to the server with the token.

14. An identity confirmation system and service provided by a computerized server connected to a wide area network (WAN) storing and executing software from memory, comprising:

an interface, accessible on the WAN, provided by the software at the server, enabling a user to register for service with the server by at least identifying and storing user preference and profile data;

a computerized client device carried by a user and enabled to connect to the WAN, the client device including transmission and receiving hardware enabling wireless communication, the client device storing and executing an instance of the software from memory;

a computerized inquiring device connected to the WAN including transmission and receiving hardware enabling wireless communication, the inquiring device storing and executing an instance of the software from memory;

a database accessible to the server storing client identification data generated by the server including at least identification of one or more known associates of the user, and the preference and profile data; and

an identification token generated by the client device including the client identification data received from the server, the token stored on the client device;

wherein, upon the client device coming within geographic proximity enabling wireless communication with the inquiring device, the inquiring device captures identification data of one or more associates physically present with the user and forwards the identification of the associates to the server with the token, the server confirming identity of the associates, based upon the stored client identification data, thereby increasing confidence in the identity of the user.

15. The system of claim 14, wherein the generation of client identification data including at least identification data of known associates of the user is obtained by the server from third parties including at least, phone conversations, friends and family on social media sites and historical data previously detected by the inquiring device, or another inquiring device connected to the server.

16. The system of claim 14, wherein identification of known associates of the user are provided by the user to the server.