Intelligent Peripheral Device and System for the Authentication and Verification of Individuals and/or Documents Through a Secure Multifunctional Authentication Service with Data Storage Capability

• US 20120139703A1
• Filed: 08/13/2010
• Published: 06/07/2012
• Est. Priority Date: 08/13/2009
• Status: Active Grant

• Current Assignee: Innovation In Motion, Inc. (authID, Inc.)
• Original Assignee: Innovation In Motion, Inc. (authID, Inc.)
• Inventors: Szoke, Thomas, Fozzati, Daniel, Vago, Andras
• Granted Patent: US 9,183,364 B2
• Time in Patent Office: Days
• US Class Current: 340/5.83
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A device possessing a secure multifunctional authentication service integrated with data storage capability, wherein the device is disposed to comprise a multifunctional intelligent peripheral or accessory device, which, upon implementation into a system, is disposed to control a set of transactions that the system is designated to perform by the device, in conjunction with a data transfer medium which is under the control of the device.

Claims

1. An intelligent peripheral device comprising:

a biometric authentication module;

an optical character recognition reader;

a radio frequency identification reader, wherein the radio frequency identification reader further comprises an antenna;

an optical document scanner;

a secure access module;

a machine readable zone reader;

a wireless communications module; and

a plurality of data storage modules wherein said biometric authentication module;

an optical character recognition reader;

a radio frequency identification reader, wherein the radio frequency identification reader, the biometric authentication module, the optical character recognition reader, the optical document scanner, the secure access module, the machine readable zone reader, the wireless communications module and the plurality of data storage modules are in electronic communication; and

wherein the device upon implementation into a system, is disposed to control a set of transactions that the system is designated to perform by the device, in conjunction with a data transfer medium which is under the control of the device.

2. The device of claim 1, wherein the biometric authentication module is disposed to capture a plurality of an individual'"'"'s fingerprints.

3. The device of claim 1, wherein the optical character recognition reader is disposed to translate a plurality of scanned images into a plurality of machine-encoded text.

4. The device of claim 1, wherein the radio frequency identification reader is disposed to read a plurality of contactless chips located within an electronic passport.

5. The device of claim 1, wherein the optical document scanner is disposed to capture a plurality of data contained with a plurality of documents in possession by an individual.

6. The device of claim 1, wherein the secure access module is disposed to interface with a data transfer medium to allow for the secure transfer of information to a plurality of remote databases.

7. The device of claim 1, wherein the wireless communications module is disposed to allow for data communication with a plurality of remote databases through a data transfer medium.

8. The device of claim 6, wherein the device is disposed to be in data communication with a plurality of databases.

9. The device of claim 1, wherein the device is disposed to allow for a plurality of biometric and non-biometric search and match functions for the identification and verification of a plurality of individuals.

10. The device of claim 6, wherein the device is disposed to allow for a remote identification and verification of a plurality of individuals.

11. The device of claim 1, wherein the device is disposed to allow for the identification and verification of a plurality of individuals and documents through the plurality of data storage modules stored on the device.

12. The device of claim 9, wherein the non-biometric functions of identification and verification are selected from the group consisting of:

name, vehicle registration, weapon registration, driver'"'"'s license, vehicle VIN and Visa.

13. The device of claim 12, wherein the device is disposed to allow for the authentication of a secure credential located within a document.

14. The device of claim 13, wherein the secure credential is located within a document selected from the group consisting of:

electronic passport, standard passport, National identification, driver'"'"'s license and any other government issued credentials.

15. The device of claim 1, wherein the plurality of data storage modules is disposed to store database information selected from the group consisting of:

denied person'"'"'s list, watch list and fingerprint list.

16. The device of claim 1, wherein the plurality of data storage modules are disposed to be in data communication with a plurality of remote databases to allow for updating of the of databases stored on the device.

17. The device of claim 1, wherein the device is disposed to be uniquely identifiable to ascertain which device obtains which database information.

18. The device of claim 1, wherein the data storage modules are disposed to be encrypted and deleted upon tampering by an individual without proper authorization.

19. The device of claim 7, wherein the computing device further comprises a border control mobile application disposed to allow for the control of the identification and verification of a plurality of individuals and documents.

20. The device of claim 19, wherein the border control mobile application is in data communication with the device.

21. The device of claim 19, wherein the border control mobile application is in data communication with a plurality of National State Host Machines.

22. The device of claim 1, wherein a plurality of local databases is disposed to be stored on the device.

23. The device of claim 22, wherein the plurality of local databases further comprises a plurality of database subsets and a plurality of log data.

24. The device of claim 1, wherein the device is disposed to be paired with a data transfer medium for the secure transfer of a plurality of information between the device and a plurality of remote databases.

25. The device of claim 24, wherein the device includes a secure information exchange device that is disposed to create a secure trusted environment between the device and a data transfer medium.

26. The device of claim 25, wherein the secure information exchange device is disposed to establish a secure encrypted environment for the exchange of information between the device and a plurality of remote databases.

50. The device of claim 1, wherein the device further comprises:

a camera;

a keyboard, wherein the keyboard is disposed to allow for the entry of a plurality of information by an operator;

a magnetic stripe reader;

a contact card reader.

27. A system for the authentication and verification of a plurality of individuals and documents through a secure multifunctional authentication service comprising:

an intelligent peripheral device, wherein the device upon implementation into the system, is disposed to control a set of transactions that the system is designated to perform by the device, in conjunction with a data transfer medium;

a data transfer medium, wherein the data transfer medium is disposed to be in data communication with the device and under the control of the device; and

a secure information exchange device, wherein the secure information exchange device is located on the device and disposed to create a secure environment between the device and a data transfer medium.

28. The system of claim 27, wherein the device further comprises a series of components in communication comprising:

a biometric authentication module;

an optical character recognition reader;

a radio frequency identification reader, wherein the radio frequency identification reader further comprises an antenna;

an optical document scanner;

a secure access module;

a machine readable zone reader;

a wireless communications module; and

a plurality of data storage modules, wherein the data storage modules, the biometric authentication module, the optical character recognition reader, the radio frequency identification reader, the optical document scanner, the secure access module, the machine readable zone reader, the wireless communications module and the plurality of data storage modules are in electronic communication.

29. The system of claim 27, wherein the device is in data communication with a plurality of remote databases through the data transfer medium.

30. The system of claim 27, wherein the secure information exchange device is disposed to authenticate the device and the data transfer medium.

31. A method for the secure pairing between a device and a data transfer medium utilizing the system of claim 27, the steps comprising:

transmitting a request for pairing to the device;

transmitting a request for pairing to the data transfer medium;

capturing a fingerprint of an operator of the system for an authentication query;

transmitting a digital certificate from the secure information exchange device to the device;

transmitting a digital certificate from the secure information exchange device to the data transfer medium;

authenticating the digital certificate of the secure information exchange device by the device;

authenticating the digital certificate of the secure information exchange device by the data transfer medium;

generating a key pair comprising a public key and a private key by the device;

generating a key pair comprising a public key and a private key by the data transfer medium;

transmitting the public key of the device and the data transfer medium to the secure information exchange device;

transmitting a data communication address from the device and the data transfer medium to the secure information exchange device;

transmitting the public keys of the device and the data transfer medium by the secure information exchange device to an external certificate authority device;

receiving a signed certificate by the secure information exchange device from the external certificate authority;

signing each certificate by the secure exchange information device with the private keys of the device and the data transfer medium;

generating a random string by the secure information exchange device; and

uploading the pairing information of the device and the data transfer medium.

32. The method of claim 31, wherein the pairing information is selected from the group consisting of:

digital certificate, data communication address, password and the fingerprint of the operator.

33. A method for the identification of an individual utilizing the system of claim 27, the steps comprising:

scanning a plurality of a subject'"'"'s credential'"'"'s using the machine readable zone reader of the device;

decoding the plurality of credential'"'"'s by the device;

selecting a search query by the device;

transmitting a search request by the device; and

receiving a response to the search request by the device.

34. The method of claim 33, further comprising the step of:

determining whether a chip is present on the subject'"'"'s credential'"'"'s by an operator of the system; and

reading the chip by the radio frequency identification reader on the device when the chip is present.

35. The method of claim 33, further comprising the step of:

capturing a plurality of a subject'"'"'s fingerprints using the biometric authentication module.

36. The method of claim 33, further comprising the step of:

packaging a subject'"'"'s information into a file; and

transmitting the file to a plurality of remote databases.

37. The method of claim 33, wherein the search query is selected from the group consisting of:

name, local fingerprint database, remote fingerprint database and other similar demographics.

38. The method of claim 33 wherein the search request is transmitted to a remote database selected from the group consisting of:

a National Stage Host, a Central database and an Automated Fingerprint Identification System.

39. The method of claim 33, further comprising the step of:

selecting a local database search by an operator of the system;

transmitting a search request by the device; and

transmitting a response to the search request to the device.

40. The method of claim 33, wherein the search query is selected from the group consisting of:

a person, a vehicle, a property, a boat and a gun.

41. The method of claim 40, wherein the search query for a person is disposed to include a plurality of search parameters selected from the group consisting of:

first name, last name, state, sex, race, data of birth and city.

42. The method of claim 40, wherein the search query for a vehicle is disposed to include a plurality of search parameters selected from the group consisting of:

license plate, state, style, year, vehicle identification number and make.

43. The method of claim 40, wherein the search query for a property is disposed to include a plurality of search parameters selected from the group consisting of:

serial number and type.

44. The method of claim 40, wherein the search query for a gun is disposed to include a plurality of search parameters selected from the group consisting of:

serial number, caliber and make.

45. The method of claim 40, wherein the search query for a boat is disposed to include a plurality of search parameters selected from the group consisting of:

hull number, registration number and state.

46. The method of claim 33, wherein the search query is disposed to identify an individual by validating a plurality of documents, further comprising the steps of:

selecting a document option on the device;

scanning a machine readable zone on the document by the device; and

transmitting the information contained within the machine readable zone to the plurality of remote databases by the device.

47. The method of claim 46, wherein the document is selected from the group consisting of:

a passport, an electronic passport, personal identification and a driver'"'"'s license.

48. The method of claim 46, further comprising the step of:

scanning a contactless chip contained within the document; and

transmitting the information within the contactless chip to the device.

49. The method of claim 46, further comprising the step of:

capturing a plurality of a subject'"'"'s fingerprint'"'"'s;

determining whether the document includes a plurality of fingerprint data;

verifying the subject'"'"'s fingerprint with the fingerprint data contained in the document.