Entity authentication in electronic communications by providing verification status of device

• US 7,558,965 B2
• Filed: 08/06/2001
• Issued: 07/07/2009
• Est. Priority Date: 08/04/2000
• Status: Expired due to Fees

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Wheeler, Lynn Henry, Wheeler, Anne M.
• Primary Examiner(s): Smithers; Matthew B
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/343,619
• Publication Number:
  US 20040005051A1
• Time in Patent Office: 2,892 Days
• Field of Search: 713/186, 382/115, 340/5.82
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A current verification status of a device (256) is identified out of a plurality of predefined verification data input (250) into the device (256) and data prestored within the device.(254) The indicator (272) reveals neither the prestored data nor the verification data. One of the predefined verification statuses is representative of the verification data being the same as the prestored data, and another verification status is representative of the verification data being different from the prestored data. An identified verification status is used by one entity in determining risk regarding an electronic communication from another entity, especially where the electronic communication comprises a request. The prestored data is for a Secret or a biometric characteristic of the first entity.

Claims

1. A method of providing a verification status of a device, comprising:

(a) identifying within a device a current verification status out of a plurality of verification statuses of the device as a function of a comparison of biometric verification data input into the device to biometric data prestored within the device and as a function of whether an indicator was output since verification data was last input into the device, wherein the plurality of verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match; and

a fourth verification status indicating a match where an indicator has been output since the match; and

(b) independent of the verification status identified, transmitting an indicator of said identified verification status to an electronic apparatus external to the device, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

2. The method of claim 1, further comprising outputting from the device the indicator of said identified verification status.

3. The method of claim 1, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

4. The method of claim 1, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

5. The method of claim 4, wherein the identification marker is assigned a value representing the type of prestored biometric data.

6. The method of claim 1, further comprising evaluating with business logic incorporated within the electronic apparatus a request based on said identified verification status.

7. The method of claim 1, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

8. The method of claim 1, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

9. A method of providing a verification status regarding an entity authentication, comprising:

(a) receiving within a device input comprising biometric verification data of an entity;

(b) identifying within the device a current verification status out of a plurality of verification statuses of the device as a function of the biometric verification data and biometric data prestored within the device and as a function of whether an indicator was output since verification data was last input into the device, wherein the plurality of verification statuses comprise;

—

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match; and

a fourth verification status indicating a match where an indicator has been output since the match; and

(c) independent of the verification status identified, outputting from the device an indicator of said identified verification status, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

10. The method of claim 9, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

11. The method of claim 9, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

12. The method of claim 11, wherein the identification marker is assigned a value representing the type of prestored biometric data.

13. The method of claim 11, wherein the identification marker is assigned a value equated with a successful verification, and wherein the indicator comprises said assigned value of the identification marker.

14. The method of claim 13, wherein the device generates digital signatures and wherein said assigned value further represents whether any digital signatures were generated by the device since verification data was last input into the device.

15. The method of claim 9, further comprising receiving and evaluating a request based on said output indicator.

16. The method of claim 9, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

17. The method of claim 9, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

18. A method of authenticating a first entity to a second entity, comprising:

(a) within a verification component of a device, (i) storing biometric data of the first entity during a personalization of the verification component, (ii) later receiving biometric verification data input within the device, and (iii) identifying a current verification status out of a plurality of verification statuses of the device as a function of the biometric verification data and the prestored biometric data and as a function of whether an indicator was output since verification data was last input into the device, wherein the plurality of verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match; and

a fourth verification status indicating a match where an indicator has been output since the match; and

(b) independent of the verification status identified, communicating said identified verification status to the second entity by outputting from the verification component an indicator of said identified verification status and transmitting said output indicator to the second entity, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

19. The method of claim 18, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

20. The method of claim 18, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

21. The method of claim 20, wherein the identification marker is assigned a value representing the type of prestored biometric data.

22. The method of claim 18, further comprising receiving and evaluating a request based on said communicated verification status.

23. The method of claim 18, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

24. The method of claim 18, wherein the prestored biometric data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

25. A method of providing a verification status regarding an entity authentication, comprising:

(a) maintaining within a device prestored biometric data of an entity for identifying a verification status of the device as a function of the prestored biometric data and biometric verification data later input into the device;

(b) identifying within the device a current verification status out of a plurality of verification statuses of the device representing whether an indicator was output since verification data was last input into the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match; and

a fourth verification status indicating a match where an indicator has been output since the match;

(c) outputting from the device an indicator of said identified verification status for evaluation thereof;

(d) receiving within the device input comprising verification data;

(e) identifying within the device a current verification status out of a plurality of predefined verification statuses of the device by comparing said received verification data with the prestored biometric data; and

(f) again outputting from the device an indicator of said identified verification status for evaluation thereof, the second indicator revealing said identified verification status based on said comparison but neither revealing the verification data nor the prestored biometric data.

26. The method of claim 25, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

27. The method of claim 25, wherein identifying a current verification status out of a plurality of verification statuses includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

28. The method of claim 27, wherein the identification marker is assigned a value representing the type of prestored biometric data.

29. The method of claim 28, wherein the identification marker is assigned a value equated with a successful verification, and wherein the indicator comprises said assigned value of the identification marker.

30. The method of claim 29, wherein the device generates digital signatures and wherein said assigned value further represents whether a digital signature was generated by the device since verification data was last input into the device.

31. The method of claim 25, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

32. The method of claim 25, wherein the prestored biometric data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

33. A method of providing a verification status of a device, comprising:

(a) identifying within a device a current verification status out of a plurality of verification statuses of the device as a function of whether an indicator was output since verification data was last input into the device and as a function of biometric verification data input into the device and a plurality of biometric data prestored within the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an indication of a type of biometric data from among the plurality of biometric data prestored within the device; and

(b) independent of the verification status identified, transmitting an indicator of said identified verification status to an electronic apparatus external to the device, the indicator revealing said identified verification status without revealing either of the verification data or the prestored biometric data.

34. The method of claim 33, further comprising outputting from the device the indicator of said identified verification status.

35. The method of claim 33, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

36. The method of claim 33, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

37. The method of claim 36, wherein the identification marker is assigned a value representing the type of prestored biometric data.

38. The method of claim 33, further comprising evaluating with business logic incorporated within the electronic apparatus a request based on said identified verification status.

39. The method of claim 33, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

40. The method of claim 33, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

41. A method of providing a verification status of a device, comprising:

(a) identifying within a device a current verification status out of a plurality of verification statuses of the device as a function of whether an indicator was output since verification data was last input into the device and as a function of a plurality of biometric verification data input into the device and a plurality of biometric data prestored within the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an identification marker corresponding to a value out of a set of predefined values, each value representing at least two types of biometric verification data from among the plurality of biometric verification data input into the device; and

(b) independent of the verification status identified, transmitting an indicator of said identified verification status to an electronic apparatus external to the device, the indicator revealing said identified verification status without revealing either of the verification data or the prestored biometric data.

42. The method of claim 41, further comprising outputting from the device the indicator of said identified verification status.

43. The method of claim 41, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

44. The method of claim 41, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

45. The method of claim 44, wherein the identification marker is assigned a value representing the type of prestored biometric data.

46. The method of claim 41, further comprising evaluating with business logic incorporated within the electronic apparatus a request based on said identified verification status.

47. The method of claim 41, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

48. The method of claim 41, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

49. A method of providing a verification status regarding an entity authentication, comprising:

(a) receiving within a device input comprising biometric verification data of an entity;

(b) identifying within the device a current verification status out of a plurality of verification statuses of the device as a function of whether an indicator was output since verification data was last input into the device and as a function of the biometric verification data and a plurality of biometric data prestored within the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an indication of a type of biometric data from among the plurality of biometric data prestored within the device; and

(c) independent of the verification status identified, outputting from the device an indicator of said identified verification status, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

50. The method of claim 49, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

51. The method of claim 49, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

52. The method of claim 51, wherein the identification marker is assigned a value representing the type of biometric data.

53. The method of claim 51, wherein the identification marker is assigned a value equated with a successful verification, and wherein the indicator comprises said assigned value of the identification marker.

54. The method of claim 53, wherein the device generates digital signatures and wherein said assigned value further represents whether any digital signatures were generated by the device since verification data was last input into the device.

55. The method of claim 49, further comprising receiving and evaluating a request based on said output indicator.

56. The method of claim 49, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

57. The method of claim 49, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

58. A method of providing a verification status regarding an entity authentication, comprising:

(a) receiving within a device input comprising a plurality of biometric verification data of an entity;

(b) identifying within the device a current verification status out of a plurality of verification statuses of the device as a function of the plurality of biometric verification data and a plurality of biometric data prestored within the device and as a function of whether an indicator was output since verification data was last input into the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an identification marker corresponding to a value out of a set of predefined values, each value representing at least two types of biometric verification data from among the plurality of biometric verification data input into the device; and

(c) independent of the verification status identified, outputting from the device an indicator of said identified verification status, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

59. The method of claim 58, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

60. The method of claim 58, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

61. The method of claim 60, wherein the identification marker is assigned a value representing the type of biometric data.

62. The method of claim 60, wherein the identification marker is assigned a value equated with a successful verification, and wherein the indicator comprises said assigned value of the identification marker.

63. The method of claim 62, wherein the device generates digital signatures and wherein said assigned value further represents whether any digital signatures were generated by the device since verification data was last input into the device.

64. The method of claim 58, further comprising receiving and evaluating a request based on said output indicator.

65. The method of claim 58, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

66. The method of claim 58, wherein the biometric data prestored within the device is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

67. A method of authenticating a first entity to a second entity, comprising:

(a) within a verification component of a device, (i) storing a plurality of biometric data of the first entity during a personalization of the verification component, (ii) later receiving biometric verification data input within the device, and (iii) identifying, as a function of whether an indicator was output since verification data was last input into the device and as a function of the biometric verification data and the plurality of prestored biometric data, a current verification status out of a plurality of verification statuses of the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an indication of a type of biometric data from among the plurality of prestored biometric data; and

(b) independent of the verification status identified, communicating said identified verification status to the second entity by outputting from the verification component an indicator of said identified verification status and transmitting said output indicator to the second entity, the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

68. The method of claim 67, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

69. The method of claim 67, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

70. The method of claim 69, wherein the identification marker is assigned a value representing the type of prestored biometric data.

71. The method of claim 67, further comprising receiving and evaluating a request based on said communicated verification status.

72. The method of claim 67, wherein the biometric verification data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

73. The method of claim 67, wherein the prestored biometric data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

74. A method of authenticating a first entity to a second entity, comprising:

(a) within a verification component of a device, (i) storing a plurality of biometric data of the first entity during a personalization of the verification component, (ii) later receiving a plurality of biometric verification data input within the device, and (iii) identifying, as a function of whether an indicator was output since verification data was last input into the device and as a function of the plurality of biometric verification data and the plurality of prestored biometric data, a current verification status out of a plurality of verification statuses of the device, wherein the verification statuses comprise;

a first verification status indicating a lack of verification data since a resetting of the device;

a second verification status indicating a match between input data and data prestored where no indicator has been output from the device since the match;

a third verification status indicating a failed match;

a fourth verification status indicating a match where an indicator has been output since the match;

and wherein the verification status further includes an identification marker corresponding to a value out of a set of predefined values, each value representing at least two types of biometric verification data from among the plurality of biometric verification data input; and

(b) independent of the verification status identified, communicating said identified verification status to the second entity by outputting from the verification component an indicator of said identified verification status and transmitting said output indicator to the second entity,

the indicator revealing said identified verification status without revealing either of the biometric verification data or the prestored biometric data.

75. The method of claim 74, wherein one verification status out of the plurality of predefined verification statuses of the device is representative of the verification data being the same as the prestored biometric data, and at least one other predefined verification status is representative of the verification data being different from the prestored biometric data.

76. The method of claim 74, wherein identifying a current verification status includes assigning an identification marker within the device equal to a value out of a set of predefined values corresponding to the predefined verification statuses.

77. The method of claim 76, wherein the identification marker is assigned a value representing the type of prestored biometric data.

78. The method of claim 74, further comprising receiving and evaluating a request based on said communicated verification status.

79. The method of claim 74, wherein the prestored biometric data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.

80. The method of claim 74, wherein the prestored biometric data is selected from the group including:

digitized fingerprint, digitized handprint or hand geometry, digitized retina, digitized iris, digitized voice print, digitized facial scan, digitized written signature, and digitized DNA sample.