Personal Authentication Software and Systems for Travel Privilege Assignation and Verification

• US 20100299002A1
• Filed: 05/24/2010
• Published: 11/25/2010
• Est. Priority Date: 07/12/2002
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Tillack, Jonathan A., Johnson, Barry W., Abdallah, David S., Olvera, Kristen R.
• Application Number:
  US12/786,241
• Publication Number:
  US 20100299002A1
• Time in Patent Office: Days
• US Class Current: 701/2
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration

Abstract

A system for authenticating individuals traveling to and from various destinations at various times. Personal identity and travel privilege verification are coordinated for several modes of transportation, including aircraft, boats, buses, cars and trains. Travel privileges are considered to be the ability to leave the current location, travel to the desired location, travel at specific times, and use specific forms of transportation. The system specifically provides operator privilege verification, allowing individuals to receive vehicle operator privileges. These privileges are evaluated upon the individual'"'"'s application, and are periodically updated at the discretion of the controlling institution.

The system provides for verification of vehicle operator privileges while the vehicle is in transit, and an apparatus for docking the secure authentication apparatus within the vehicle.

Claims

1-20. -20. (canceled)

21. A system for ensuring the identity and travel privileges of potential travelers, comprising:

a. at least one institution for researching and recording an identity and at least one travel privilege for individuals;

b. at least one database maintained by the institution for associating identified individuals'"'"' names, an assigned asymmetric key pair, and the at least one travel privilege, said at least one travel privilege including;

i. at least one destination restriction;

ii. at least one date and time restriction;

iii. at least one mode of transportation restriction;

iv. at least one operator restriction; and

v. an expiration date for each at least one travel privilege;

c. at least one travel privilege certificate associated with the at least one travel privilege and further associated with an identified individual; and

d. at least one personal identification device including a means for authenticating at the personal identification device the identified individual based on a biometric, the personal identification device configured such that the biometric is not output from the personal identification device.

22. The system described in claim 21, wherein the travel privilege certificate comprises:

a. a name field, comprising the identified individual'"'"'s full name;

b. a date field, comprising a date when the identified individual is allowed to travel;

c. a time field, comprising a time when the identified individual is allowed to travel;

d. a mode of transportation field, comprising a list of the modes of transportation that the identified individual is allowed to employ;

e. a type of privilege field, comprising the type of privilege signified by the travel privilege certificate;

f. an issue date field, comprising the date when the travel privilege certificate is issued;

g. an expiration date field, comprising the date when the travel privilege certificate is no longer valid;

h. a unique serial number; and

i. a digital signature created by the issuer of the travel privilege certificate.

23. The system described in claim 22 wherein the type of privilege is selected from the group consisting of a reservation ticket, a boarding pass, a port-of-entry permission and a vehicle operator permission.

24. A processor-readable medium located at a personal identification device and storing instructions that when executed cause a processor to perform the following method:

authenticating, at a personal identification device, a biometric input from a user based on a biometric template stored at the personal identification device and associated with the user without sending the biometric template from the personal identification device; and

sending a request for a travel permission information from the personal identification device when the biometric input from the user is authenticated.

25. The processor-readable medium of claim 24, the method further comprising:

receiving the biometric input from the user before authenticating the biometric input from the user, the biometric input being at least one of a fingerprint information of the user, a retinal information of the user and an image information of the user.

26. The processor-readable medium of claim 24, the method further comprising:

sending an admission ticket information associated with the travel permission information when the biometric input from the user is authenticated at the personal identification device.

27. The processor-readable medium of claim 24, wherein the travel permission information is associated with an admission ticket of a travel provider.

28. The processor-readable medium of claim 24, wherein the travel permission information includes at least one of a time restriction, a mode of transportation restriction, a destination restriction, a date restriction, an operator restriction, and an expiration date restriction.

29. The processor-readable medium of claim 24, wherein the travel permission information is encrypted based on an asymmetric key pair associated with a travel governing authority.

30. The processor-readable medium of claim 24, the method further comprising:

sending an acknowledgement of an authentication of the biometric input of the user based on the biometric template associated with the user, the acknowledgement excluding the biometric input of the user and the biometric template associated with the user.

31. The processor-readable medium of claim 24, wherein the user is an operator of a vehicle, the biometric input of the operator is a first biometric input of the operator, the method further comprising:

receiving, at the personal identification device, the travel permission information;

authenticating, at the personal identification device, a second biometric input from the operator based on the biometric template stored at the personal identification device and associated with the operator; and

inhibiting output of the travel permission information to a kill switch coupled to the vehicle when the second biometric input of the operator is not authentic such that the kill switch disables operation of the vehicle.

32. The processor-readable medium of claim 24, wherein the user is an operator of a vehicle, the biometric input of the operator is a first biometric input of the operator, the method further comprising:

authenticating, at the personal identification device, a second biometric input of the operator of the vehicle substantially at a time of ignition of the vehicle and not before the ignition of the vehicle; and

authenticating, at the personal identification device, a third biometric input of the operator of the vehicle at least one time when the vehicle is in operation.

33. The processor-readable medium of claim 24, wherein the user is an operator of a vehicle, the method further comprising:

receiving, at the personal identification device, the travel permission information; and

sending from the personal identification device to a kill switch operatively coupled to the vehicle the travel permission information such that the kill switch disables operation of the vehicle when the travel permission information is invalid.

34. The processor-readable medium of claim 24, wherein the biometric input of the user is a first biometric input of the user, the user is an operator of a vehicle, the method further comprising:

receiving, at the personal identification device, the travel permission information; and

authenticating, at the personal identification device, a second biometric input from the operator based on the biometric template; and

sending from the personal identification device to at least one of a trucking company or a travel-governing institution via a transponder coupled to the vehicle the travel permission information when the second biometric input is authentic such that an identity of the operator is verified.

35. The processor-readable medium of claim 24, wherein the biometric input from the user is a first biometric input from the user, the user is an operator of a vehicle, the method further comprising:

receiving, at the personal identification device, the travel permission information;

authenticating, at the personal identification device, a second biometric input from the operator based on the biometric template; and

sending from the personal identification device to a kill switch operatively coupled to the vehicle the travel permission information to the kill switch when the second biometric input of the operator is authentic.

36. The processor-readable medium of claim 24, wherein the biometric template is stored only at the personal identification device.

37. The processor-readable medium of claim 24, wherein the personal identification device is configured to prevent output of the biometric template.

38. A processor-readable medium located at a processor device and storing instructions that when executed cause a processor to perform the following method:

receiving a request for a travel permission information from a personal identification device associated with a user, the request including an acknowledgement of an authentication of the biometric information of the user performed at the personal identification device without the biometric information of the user being sent from the personal identification device, the acknowledgement excluding biometric information; and

sending the travel permission information associated with the user based on the acknowledgement, the travel permission information being encrypted based on an asymmetric key pair.

39. The processor-readable medium of claim 38, wherein the request includes a personal identity credential of the user excluding biometric information, the method further comprising:

producing the travel permission information based on the personal identity credential of the user; and

sending the travel permission information associated with the user based on the personal identity credential of the user.

40. The processor-readable medium of claim 38, the method further comprising:

obtaining the travel permission information associated with the user from a database before sending the travel permission information, the database including at least one personal identity credential for each user from a plurality of users, each user from the plurality of users being associated with at least one travel permission information.

41. The processor-readable medium of claim 38, wherein the travel permission information is sent to the personal identification device of the user.

42. The processor-readable medium of claim 38, wherein the personal identification device is portable.

43. The processor-readable medium of claim 38, the method further comprising:

receiving from the personal identification device the travel permission information associated with the user substantially at a time of ignition of a vehicle and not before the ignition of the vehicle, the travel permission information excluding biometric information; and

receiving from the personal identification device the travel permission information associated with the user at least one time when the user is operating the vehicle, the travel permission information excluding biometric information.

44. The processor-readable medium of claim 38, the method further comprising:

receiving the travel permission information from a travel-governing authority associated with enrollment of the biometric information to the personal identification device.

45. The processor-readable medium of claim 38, wherein the user is an operator of a vehicle, the method further comprising:

sending the travel permission information associated with the operator to a kill switch operatively coupled to the vehicle when the travel permission information is received from the personal identification device; and

not sending the travel permission information associated with the operator to the kill switch when the travel permission information is not received from the personal identification device such that a kill switch disables operation of the vehicle.

46. The processor-readable medium of claim 38, wherein the user is an operator of a vehicle, the processor device being associated with a remote party, the method further comprising:

sending a kill signal from the processor device to a kill switch operatively coupled to the vehicle such that the kill switch disables operation of the vehicle when the travel permission information is invalid.