Secure system using images of only part of a body as the key where the part has continuously-changing features

• US 6,175,923 B1
• Filed: 12/08/1998
• Issued: 01/16/2001
• Est. Priority Date: 12/08/1998
• Status: Expired due to Fees

• Current Assignee: eCryp, Inc. (InfoProtect Technologies Plc)
• Original Assignee: Senetas Corp. Ltd.
• Inventors: Bailey, Kenneth S.
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): Latham, Bryan
• Application Number:
  US09/208,283
• Time in Patent Office: 770 Days
• Field of Search: 713/186, 713/170, 382/115, 382/124, 382/125, 382/126, 382/127, 902/3, 356/71, 340/825.34, 705/76
• US Class Current: 713/186
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A secure system using a continuously-changing key that depends on the user'"'"'s body part. A preferred embodiment obtains an image of the user'"'"'s fingerprint and cements it according to a random generator. Only part of the image and not all of the image is sent at one time. The random segmentation insures that part of the image that is sent continuously varies from time to time. Therefore, an unauthorized receiver can receive only part but not all of the image. That only part of the image which is received will usually not be the same at the second as it is at the first time. Therefore, a received code cannot later be used to fool the system with the same credit card.

Claims

1. A method of verifying a remote transaction, comprising:

receiving information indicative of a look of a user'"'"'s unique body part, said information including only some, but not all, of the look of the user'"'"'s body part, said information including only samples of said body part along plural separated portions, and the information which is received being different at a first time than at a later time;

comparing said information with information in its own database; and

accepting a transaction only if the received information corresponds to the information in its own database; and

varying an interval between said separated portions at different times, so that a distance between said separated portions varies at a first time as compared with at a second time.

2. A method as in claim 1 wherein said varying is based on a random indicia.

3. A method as in claim 2 wherein said random indicia is based on a time stamp.

4. A credit card fraud reducing system, comprising:

a scanner which takes an image of a user'"'"'s body part; and

a processor, receiving said image, and transmitting only parts, but not all of said image, said only parts being a plurality of constantly-changing samples which are different at a first time than at a second time, said processor converting said information into numbers indicative of the information, and transmitting said information,

wherein said processor comprises a device which segments the image into a plurality of portions, which have constantly-changing spaces therebetween that are different at a first time than at a second time, and determines only an image sample along said portion, only said image part along said line being transmitted.

5. An apparatus as in claim 4 wherein said body part is a fingerprint, and said image part along said line includes an angle of the fingerprint relative to the line, and wherein said angles are transmitted.

6. A method of verifying a credit card transaction, comprising:

receiving a user'"'"'s credit card in a first remote computer;

receiving a user'"'"'s fingerprint also in said first remote computer;

obtaining a random number which changes to a new random number with each use;

using said random number to select only to a new random number multiple separated parts of the image of the user'"'"'s fingerprint that are separated by a separation that is based on said random number, and not all of the user'"'"'s fingerprint, for transmission;

converting said only part into numbers which indicate said only multiple separated parts, and which will be used to transmit said user'"'"'s fingerprint;

transmitting the credit card number, along with said only parts of the user'"'"'s fingerprint to a remote location for processing;

in said remote location, receiving said credit number, and obtaining an image of the user'"'"'s whole fingerprint;

receiving the only part of the user'"'"'s fingerprint, and determining if said only part of the user'"'"'s fingerprint matches the image of the whole user'"'"'s fingerprint in the memory of the remote computer, said determining including compensating for tilt relative to perpendicular in the user'"'"'s fingerprint, and if the user'"'"'s fingerprint does not match to the image of the fingerprint in memory, then determining if a tilt-compensated version of the image matches the image in memory.

7. A method as in claim 6, wherein said converting comprises converting said only part into angles of the fingerprint where they cross-align.

8. A method as in claim 6, wherein said random number is obtained from a clock of the PC, at the user'"'"'s end, and further comprising comparing said clock, at said remote end, with a clock at said remote end.