System and method for multi-party validation, authentication and/or authorization via biometrics

• US 7,130,452 B2
• Filed: 12/03/2002
• Issued: 10/31/2006
• Est. Priority Date: 12/03/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dorai, Chitra, Ratha, Nalini K., Bolle, Rudolf M., Noronha, Sunil J.
• Primary Examiner(s): Mancuso, Joseph
• Assistant Examiner(s): Yuan, Kathleen
• Application Number:
  US10/308,664
• Publication Number:
  US 20040104266A1
• Time in Patent Office: 1,428 Days
• Field of Search: 382/115
• US Class Current: 382/115
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system and method for multi-party authentication is described. The multi-party authentication process uses synchronous and persistent biometrics signals received from parties to a transaction, based on a policy, to approve a transaction request. The biometrics signals preferably are expressed as compressed video signals having steganographically inserted challenge response data. Several business applications are described that are based on the multi-party authentication engine.

Claims

1. A computer system for conducting a multi-party electronic transaction, comprising:

circuitry for initiating a multi-party transaction with a party at a client computer by sending a request to a transaction management server;

circuitry, responsive to a policy defined for the transaction, for contacting at least one other client computer associated with at least one other party to the transaction and requesting the parties to provide biometrics signals;

a challenge generator for generating a challenge to all parties to the transaction;

circuitry for receiving the challenge at the client computers and for combining, at each client computer, provided biometrics signals with challenge response data; and

circuitry for separating the challenge response data from the biometrics signals at the transaction management server, for verifying temporal synchronicity and persistence of biometrics signals acquisition between the multiple participating parties as specified by the policy and, if the verification is successful, for certifying the authenticity of the parties to the multi-party electronic transaction requested by the initiating party.

2. A computer system as in claim 1, where provided biometrics signals comprise audio signals representing a voice of a party to the transaction.

3. A computer system as in claim 1, where provided biometrics signals comprise image signals representing a fingerprint of a party to the transaction.

4. A computer system as in claim 1, where provided, biometrics signals comprise image signals representing a face of a party to the transaction.

5. A computer system as in claim 1, where provided biometrics signals comprise image signals representing a feature of the eye of a party to the transaction.

6. A computer system as in claim 1, where provided biometrics signals comprise image signals representing the hand geometry of a party to the transaction.

7. A computer system as in claim 1, where provided biometrics signals comprise compressed signals.

8. A computer system as in claim 1, where provided biometrics signals comprise compressed video signals having steganographically inserted challenge response data.

9. A computer system as in claim 1, where the circuitry that combines provided biometrics signals with a challenge response data compresses a generated image to create a compressed image with a plurality of frequency components, each with a respective spatial frequency and a respective amplitude;

selects a selected set of a plurality of the frequency components having high spatial frequencies and large amplitudes;

randomly selects from the selected set to create a site set; and

partitions an information sequence into one or more portions and using one or more of the portions to modify one of the amplitudes of one of the frequency components in the site set so that the challenge response data is inserted steganographically into compressed image data that is transmitted to the network.

10. A computer system as in claim 9, where the circuitry for separating decompresses the compressed image data to create a plurality of frequency components, each with a respective spatial frequency and a respective amplitude;

selects a set comprised of a plurality of the frequency components, the selected set having the frequency components with high spatial frequencies and large amplitudes;

randomly selects from the selected set to create a site set; and

extracts, using one of the amplitudes of one of the frequency components in the site set, one or more portions of the challenge response data.

11. A computer system as in claim 1, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons simultaneously.

12. A computer system as in claim 1, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons within a prescribed time period.

13. A computer system as in claim 1, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons that are sampled within a time period.

14. A computer system as in claim 1, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons continuously within a time period.

15. A computer executed method for use in conducting a multi-party electronic transaction, comprising:

initiating a multi-party transaction with a party at a client computer by sending a request to a transaction management server;

based on a policy defined for the transaction, contacting at least one other client computer associated with at least one other party to the transaction and requesting the parties to provide biometrics signals;

generating a challenge to all parties to the transaction;

receiving the challenge at the client computers and combining, at each client computer, provided biometrics signals with challenge response data;

separating the challenge response data from the biometrics signals at the transaction management server and verifying temporal synchronicity and persistence of biometrics signals acquisition between the multiple participating parties as specified by the policy; and

if the verification is successful, certifying the authenticity of the parties to the multi-party electronic transaction requested by the initiating party.

16. A method as in claim 15, where provided biometrics signals comprise audio signals representing a voice of a party to the transaction.

17. A method as in claim 15, where provided biometrics signals comprise image signals representing a fingerprint of a party to the transaction.

18. A method as in claim 15, where provided biometrics signals comprise image signals representing a face of a party to the transaction.

19. A method as in claim 15, where provided biometrics signals comprise image signals representing a feature of the eye of a party to the transaction.

20. A method as in claim 15, where provided biometrics signals comprise image signals representing the hand geometry of a party to the transaction.

21. A method as in claim 15, where provided biometrics signals comprise compressed signals.

22. A method as in claim 15, where provided biometrics signals comprise compressed video signals having steganographically inserted challenge response data.

23. A method as in claim 15, where combining provided biometrics signals with a challenge response data comprises compressing a generated image to create a compressed image with a plurality of frequency components, each with a respective spatial frequency and a respective amplitude;

selecting a selected set of a plurality of the frequency components having high spatial frequencies and large amplitudes;

randomly selecting from the selected set to create a site set; and

partitioning an information sequence into one or more portions and using one or more of the portions to modify one of the amplitudes of one of the frequency components in the site set so that challenge response data is inserted steganographically into compressed image data that is transmitted to the network.

24. A method as in claim 23, where separating comprises decompressing the compressed image data to create a plurality of frequency components each with a respective spatial frequency and a respective amplitude;

selecting a set comprised of a plurality of the frequency components, the selected set having the frequency components with high spatial frequencies and large amplitudes;

randomly selecting from the selected set to create a site set; and

extracting, using one of the amplitudes of one of the frequency components in the site set, one or more portions of the challenge response data.

25. A method as in claim 15, where said electronic transaction comprises notarization of an electronic document.

26. A method as in claim 15, where said electronic transaction comprises a wagering transaction.

27. A method as in claim 15, where said electronic transaction comprises a lottery transaction.

28. A method as in claim 15, where said electronic transaction comprises a loan request and approval transaction.

29. A method as in claim 15, where said electronic transaction comprises a loan request, involving a co-guarantor, and approval transaction.

30. A method as in claim 15, where said electronic transaction comprises a request to open a bank locker.

31. A method as in claim 15, where said electronic transaction comprises an electronic polling application.

32. A method as in claim 15, where said electronic transaction comprises an electronic voting application.

33. A method as in claim 15, where said electronic transaction comprises an electronic will application.

34. A method as in claim 15, where said electronic transaction comprises gaining access to a locked space mediated through a wireless mobile communications device.

35. A method as in claim 15, where said electronic transaction comprises an electronic business application involving the participation of a purchaser client and a purchase approval client.

36. A method as in claim 15, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons simultaneously.

37. A method as in claim 15, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons within a prescribed time period.

38. A method as in claim 15, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons that are sampled within a time period.

39. A method as in claim 15, where the temporal synchronicity and persistence verification of biometrics signals comprises at least one of identifying, verifying and authenticating biometrics of at least two persons continuously within a time period.

40. A computer readable computer program carrier, execution of one or more computer programs by at least one computer occurring during a multi-party electronic transaction, said computer program causing, in response to an initiating party at one client computer, an initiation of the multi-party transaction by sending a request to a transaction management server;

said computer program causing at said transaction management server, based on a policy defined for the transaction, to contact at least one other client computer associated with at least one other party to the transaction for requesting the parties to provide biometrics signals and generating a challenge to all parties to the transaction;

in response to receiving the challenge at the client computers said computer program causing, at each client computer, a combination of provided biometrics signals with challenge response data;

said computer program further causing said transaction management server to separate the challenge response data from the biometrics signals and to verify temporal synchronicity and persistence of biometrics signals acquisition between the multiple participating parties as specified by the policy and, if the verification is successful, for certifying the authenticity of the parties to the multi-party electronic transaction requested by the initiating party.

41. A computer readable computer program carrier as in claim 40, where provided biometrics signals comprise compressed video signals having steganographically inserted challenge response data.