Smart identity system

• US 8,325,989 B2
• Filed: 03/27/2008
• Issued: 12/04/2012
• Est. Priority Date: 09/24/2007
• Status: Active Grant

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture Global Services Limited (Accenture PLC)
• Inventors: Mellen, Daniel, Kolebuck, Paul, Nix, Gayle
• Primary Examiner(s): Rahmjoo, Mike
• Application Number:
  US12/056,723
• Publication Number:
  US 20090080708A1
• Time in Patent Office: 1,713 Days
• Field of Search: 382/115, 382/116, 382/117, 382/118, 382/119, 382/123, 382/124, 382/128, 382/232, 382/125
• US Class Current: 382/115
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

Biographic data associated with a user is received. Biometric data associated with the user is also received. External data associated with the biographic data and the biometric data is received and a determination is made as to a level of access to grant the user based on the external data. One or more settings associated with a smartcard are configured based on the level of access.

Claims

1. A computer-implemented method, comprising:

receiving, by a backend broker system, an access request, wherein the access request (i) requests access for a user to one or more secured systems, and (ii) includes biometric data associated with the user;

transmitting, by the backend broker system, a record request to one or more systems that are external to the backend broker system and that are associated with one or more databases that are external to the backend broker system, wherein the record request (i) requests one or more records associated with the user that are stored by the one or more external databases, and (ii) includes the biometric data;

receiving, by the backend broker system, the one or more records associated with the user that are stored in the one or more external databases;

evaluating, by the backend broker system, the one or more records using one or more business rules, wherein the one or more business rules specify predetermined criteria that are to be satisfied by one or more of the records for the user to gain access to the one or more secured systems;

determining, by the backend broker system, that the one or more of the records satisfy the predetermined criteria for the user to gain access to the one or more secured systems;

granting, by the backend broker system, one or more levels of access for the user to each of the one or more secured systems; and

transmitting, by the backend broker system, data indicative of the one or more levels of access to an identity card management system for storage on a smartcard.

2. The method of claim 1, where the biometric data comprises voice patterns, fingerprint/thumbprints, palm prints, hand/wrist vein patterns, retinal/iris eye scans, hand geometry/topography, keystroke dynamics, typing rhythms, signatures, and facial digital pictures.

3. The method of claim 1, where evaluating the one or more records using one or more business rules comprises:

determining that the one or more records meets a threshold level associated with the one or more secured systems; and

associating a level of access for the user to the one or more secured systems based on determining that the one or more records meets a threshold level associated with the one or more secured systems.

4. The method of claim 1, wherein the backend broker system is configured to support at least one of enrollment, identification verification initiation and identification verification completion processes.

5. The method of claim 1, further comprising associating the biometric data associated with the user with the smartcard for the user.

6. The method of claim 5, wherein the identity card management system supports issuance of the smartcard to the user.

7. A system, comprising:

a processor; and

a non-transitory computer-readable medium coupled to the processor and having instructions stored thereon, which, when executed by the processor, cause the processor to perform operations comprising;

receiving, by a backend broker system, an access request, wherein the access request (i) requests access for a user to one or more secured systems, and (ii) includes biometric data associated with the user;

transmitting, by the backend broker system, a record request to one or more systems that are external to the backend broker system and that are associated with one or more databases that are external to the backend broker system, wherein the record request (i) requests one or more records associated with the user that are stored by the one or more external databases, and (ii) includes the biometric data;

receiving, by the backend broker system, the one or more records associated with the user that are stored in the one or more external databases;

evaluating, by the backend broker system, the one or more records using one or more business rules, wherein the one or more business rules specify predetermined criteria that are to be satisfied by one or more of the records for the user to gain access to the one or more secured systems;

determining, by the backend broker system, that the one or more of the records satisfy the predetermined criteria for the user to gain access to the one or more secured systems;

granting, by the backend broker system, one or more levels of access for the user to each of the one or more secured systems; and

transmitting, by the backend broker system, data indicative of the one or more levels of access to an identity card management system for storage on a smartcard.

8. The system of claim 7, where the biometric data comprises voice patterns, fingerprint/thumbprints, palm prints, hand/wrist vein patterns, retinal/iris eye scans, hand geometry/topography, keystroke dynamics, typing rhythms, signatures, and facial digital pictures.

9. The system of claim 7, where evaluating the one or more records using one or more business rules comprises:

determining that the one or more records meets a threshold level associated with the one or more secured systems; and

associating a level of access for the user to the one or more secured systems based on determining that the one or more records meets a threshold level associated with the one or more secured systems.

10. The system of claim 7, wherein the backend broker system is configured to support at least one of enrollment, identification verification initiation and identification verification completion processes.

11. The method of claim 7, further comprising configuring, by the backend broker system, one or more settings associated with the smartcard based on the data indicative of the one or more levels of access granted to the user.

12. The system of claim 7, wherein the operations further comprise associating the biometric data associated with the user with the smartcard for the user.

13. The system of claim 12, wherein the identity card management system supports issuance of the smartcard to the user.

14. The system of claim 7, further comprising configuring, by the backend broker system, one or more settings associated with the smartcard based on the data indicative of the one or more levels of access granted to the user.

15. A computer program product, embodied in a non-transitory computer-readable medium and including instructions, which, when executed by a processor, cause the processor to perform operations comprising:

receiving, by a backend broker system, an access request, wherein the access request (i) requests access for a user to one or more secured systems, and (ii) includes biometric data associated with the user;

transmitting, by the backend broker system, a record request to one or more systems that are external to the backend broker system and that are associated with one or more databases that are external to the backend broker system, wherein the record request (i) requests one or more records associated with the user that are stored by the one or more external databases, and (ii) includes the biometric data;

receiving, by the backend broker system, the one or more records associated with the user that are stored in the one or more external databases;

evaluating, by the backend broker system, the one or more records using one or more business rules, wherein the one or more business rules specify predetermined criteria that are to be satisfied by one or more of the records for the user to gain access to the one or more secured systems;

determining, by the backend broker system, that the one or more of the records satisfy the predetermined criteria for the user to gain access to the one or more secured systems;

granting, by the backend broker system, one or more levels of access for the user to each of the one or more secured systems; and

transmitting, by the backend broker system, data indicative of the one or more levels of access to an identity card management system for storage on a smartcard.

16. The computer program product of claim 15, where evaluating the one or more records using one or more business rules comprises:

determining that the one or more records meets a threshold level associated with the one or more secured systems; and

associating a level of access for the user to the one or more secured systems based on determining that the one or more records meets a threshold level associated with the one or more secured systems.

17. The computer program product of claim 15, wherein the backend broker system is configured to support at least one of enrollment, identification verification initiation and identification verification completion processes.

18. The computer program product of claim 15, wherein the operations further comprise associating the biometric data associated with the user with the smartcard for the user.

19. The computer program product of claim 18, wherein the identity card management system supports issuance of the smartcard to the user.

20. The computer program product of claim 15, wherein the operations further comprise configuring, by the backend broker system, one or more settings associated with the smartcard based on the data indicative of the one or more levels of access granted to the user.