Secure network and networked devices using biometrics

• US 20030115490A1
• Filed: 07/12/2002
• Published: 06/19/2003
• Est. Priority Date: 07/12/2001
• Status: Abandoned Application

• Current Assignee: Atrua Technologies Incorporated (Apple Inc.)
• Original Assignee: Atrua Technologies Incorporated (Apple Inc.)
• Inventors: Roske, Thorsten, Russo, Anthony P., McCoy, Peter A.
• Application Number:
  US10/194,949
• Publication Number:
  US 20030115490A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06V 40/1335 Combining adjacent partial images (e.g. slices) to create a composite input or reference pattern; Tracking a sweeping finger movement
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A biometric data sample is taken and compared with stored biometric data. If the biometric data sample matches stored data, access to a secure data storage module is enabled. The secure data storage module contains data necessary for successful communication with a server, as detailed further below. Accordingly, a biometric data match enables sensitive data retrieval, and ultimately secure communication with another device. In a preferred embodiment, the Subscriber Identity Module (SIM) in a GSM phone provides stored biometric data and processing capabilities for the matching function within a cellular phone. By storing biometric data on the SIM (a type of smart card) and performing the biometric matching process on the SIM, the need to transmit or store biometric data in a way that leaves it available for retrieval or tampering is minimized.

Claims

1. A method for secure communication with a server, wherein said secure communication requires encryption information, said method comprising:

obtaining a biometric data sample;

comparing said biometric data sample to stored biometric data;

enabling access to said sensitive data if said biometric data sample matches said stored biometric data; and

communicating with said server using said sensitive data.

2. A method according to claim 1, wherein said secure communication comprises communicating message information, said communicating step further comprising encrypting said message information using said sensitive data.

3. A method according to claim 1, wherein said obtaining comprises processing a fingerprint scan.

4. A method according to claim 1, wherein said obtaining comprises processing an image.

5. A method according to claim 4, wherein said image is a facial image.

6. A method according to claim 1, wherein said obtaining comprises processing a speech sample.

7. A method according to claim 1, wherein said sensitive data includes a private encryption key.

8. A method according to claim 1, further comprising processing said biometric data sample.

9. A method for secure communication between a server and mobile device comprising:

obtaining a biometric data sample;

comparing said biometric data sample to stored biometric data;

transmitting acceptance result to said server if said biometric data sample matches said stored biometric data.

10. A device for securely communicating with a server, said device comprising:

a biometric sensor;

a secure data storage module containing stored biometric data and sensitive data required for communication with said server, in electronic communication with said biometric sensor;

matching logic in electronic communication with said sensor and said biometric data memory; and

a verification processor in electronic communication with said matching logic and said secure data storage module.

11. The device of claim 10, wherein said matching logic is provided on a SIM card.

12. The device of claim 10, wherein said matching logic is provided on a smart card.

13. The device of claim 10, wherein said verification processor is provided within a cellular phone.

14. The device of claim 13, wherein said biometric sensor is on a front surface of said cellular phone.

15. The device of claim 13, wherein said biometric sensor is on a rear surface of said cellular phone.

16. The device of claim 13, wherein said biometric sensor is below a keypad on a surface of said cellular phone.

17. The device of claim 13, wherein said biometric sensor is on a side surface of said cellular phone.

18. The device of claim 13, wherein said biometric sensor is embedded in a key on said cellular phone.

19. The device of claim 18, wherein said key is an ON key.

20. A device according to claim 10, further comprising an input device associated with said verification processor and wherein said biometric sensor is located on said input device.

21. A device according to claim 10, further comprising a display device associated with said verification processor and wherein said biometric sensor is located on said display device.

22. A device according to claim 10, wherein said verification processor is provided within a personal digital assistant.

23. A computer program product comprising a computer-readable memory encoded with an instruction set that when executed:

processes a biometric data sample;

compares said biometric data sample with stored biometric data;

enables access to sensitive data if said biometric data sample matches said stored biometric data; and

transmits an acceptance result.