Method and apparatus for secure access payment and identification

• US 9,100,826 B2
• Filed: 09/16/2013
• Issued: 08/04/2015
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US14/027,860
• Publication Number:
  US 20140096216A1
• Time in Patent Office: 687 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 : Authentication

Abstract

According to one aspect, the invention provides a system for authenticating identities of a plurality of users. In one embodiment, the system includes a first handheld device including a wireless transceiver which is configured to transmit authentication information, a second device including a wireless receiver, where the second device is configured to receive the authentication information.

Claims

1. A system for authenticating identities of a plurality of users, the system comprising:

a first handheld device including;

a first processor, the processor programmed to authenticate a user of the first handheld device based on authentication information and to retrieve or receive first biometric information of the user of the first handheld device; and

a first wireless transceiver coupled to the first processor and programmed to transmit via a network a first wireless signal including first authentication information of the user of the first handheld device; and

a second device including;

a second processor;

a second wireless transceiver coupled to the second processor, and

a second memory coupled to the second processor, and

wherein the second device is configured to retrieve or receive respective second authentication information for a first plurality of users, wherein the first plurality of users includes the user of the first handheld device;

wherein the first processor is programmed to determine the first authentication information derived from the first biometric information and to transmit the first authentication information of the user of the first handheld device to the second device via the network,

wherein the second processor is configured to;

receive the first authentication information of the user of the first handheld device;

retrieve or receive the second authentication information of the user of the first handheld device; and

use the first authentication information and the second authentication information to authenticate an identity of the user of the first handheld device with the second device.

2. The system of claim 1, wherein the wherein the second processor is configured to determine the second authentication information of the user of the first handheld device from stored second biometric information of a first plurality of users stored in the second memory of the second device.

3. The system of claim 2, wherein the second processor is configured to combine at least a portion of the first authentication information received from the first device with at least a portion of the second authentication information to provide combined information, and to use the combined information to authenticate the identity of the user of the first handheld device.

4. The system of claim 1, wherein the second device controls access to a facility.

5. The system of claim 4, wherein the second device controls access to the facility at a door.

6. The system of claim 1, wherein the second device comprises:

a display; and

a user interface coupled to the second processor, the user interface and the second processor configured for operation by a user of the second device.

7. The system of claim 1, wherein the first processor is further configured to:

compare stored authentication information with the authentication information of the user of the first handheld device; and

enable or disable use of the first handheld device based on a result of the comparison.

8. The system of claim 1, wherein the first handheld device includes a first memory coupled to the first processor included in the first handheld device and configured to store respective biometric information for a second plurality of users.

9. The system of claim 8, wherein the second wireless transceiver is programmed to transmit via a network authentication information of a second user of the second device to the first handheld device.

10. A computer implemented method of authenticating an identity of a first entity, comprising acts of:

authenticating, with a first handheld device, a user of the first handheld device as the first entity based on authentication information;

retrieving or receiving first biometric information of the user of the first handheld device;

determining a first authentication information from the first biometric information;

receiving with a second device, the first authentication information of the first entity wirelessly transmitted from the first handheld device;

retrieving or receiving respective second authentication information for the user of the first handheld device; and

authenticating the identity of the first entity based upon the first authentication information and the second authentication information.

11. The method of claim 10, wherein the act of retrieving or receiving respective second authentication information for the user of the first handheld device includes determining the second authentication information of the user of the first handheld device from stored second biometric information of a first plurality of users stored in a second memory of the second device.

12. The method of claim 10, further comprising controlling access to a facility with the second device.

13. The method of claim 12, wherein the act of controlling access to the facility includes providing access to the facility at a door.

14. The method of claim 10, further comprising comparing stored authentication information with authentication information of the user of the first handheld device to enable or disable use of the first handheld device based on a result of the comparison.

15. The method of claim 10, further comprising an act of storing on the first handheld device respective biometric information for a second plurality of users.

16. The method of claim 15, wherein the act of storing includes an act of receiving from a secure database updated biometric information of the second plurality of users.

17. The method of claim 10, further comprising an act of receiving with the first handheld device, third authentication information of a second user as a second entity associated with the second device, the third authentication information wirelessly transmitted from the second device.

18. The method of claim 17, further comprising an act of retrieving from a memory included in the first handheld device biometric data of the second entity from biometric information for a second plurality of users.

19. The method of claim 18, further comprising an act of authenticating with the first handheld device the identity of the second entity based upon the third authentication information and the biometric.

20. The method of claim 10, further comprising an act of receiving from a secure database updated biometric information of the first plurality of users.

21. A system for authenticating identities of a plurality of users, the system comprising:

a first handheld device including;

a first biometric sensor configured to receive a first biometric provided by a first user of the first handheld device;

a first processor programmed to authenticate the first user of the first handheld device based on first biometric information; and

a first wireless transceiver coupled to the first processor and programmed to transmit via a network a first wireless signal including first authentication information of the user of the first handheld device; and

a second device including;

a second processor;

a second wireless transceiver coupled to the second processor, and

a second memory coupled to the second processor and configured to store respective information for a first plurality of users;

wherein the first handheld device is programmed to transmit the first authentication information of the first user of the first handheld device that is derived from the first biometric information to the second device via the network,

wherein the second processor is configured to receive the first authentication information of the user of the first handheld device, and is configured to retrieve second biometric information of the user of the first handheld device from stored biometric information of the first plurality of users or receive the second biometric information with the second wireless transceiver so as to authenticate an identity of the first user of the first handheld device with the second device using the first authentication information and the second biometric information.

22. The system of claim 21, wherein the wherein the second processor is configured to retrieve the second biometric information of the user of the first handheld device from the stored biometric information of the first plurality of users stored in the second memory of the second device.

23. The system of claim 21, wherein the second device controls access to a secure space.

24. The system of claim 21, wherein the second biometric information matches the first biometric information or includes at least some different biometric information.

25. The system of claim 21, wherein the second device comprises:

a display; and

a user interface coupled to the second processor, the user interface and the second processor configured for operation by a user of the second device.

26. The system of claim 21, wherein the first processor is further configured to compare stored biometric information for the first user with the first biometric information of the first user of the first handheld device and is configured to enable or disable use of the first handheld device based on a result of the comparison.

27. The system of claim 21, wherein the first processor is further configured to encrypt at least a portion of the first biometric information of the user of the first handheld device to provide the first authentication information of the user of the first handheld device.

28. The system of claim 21, wherein the second processor of the second device is further configured to compare stored authentication information with authentication information of a second user of the second device and configured to enable or disable use of the second device based on a result of the comparison.

29. The system of claim 28, wherein the second wireless transceiver is programmed to transmit via a network authentication information of a second user of the second device to the first handheld device.

30. A method of authenticating an identity of a first entity, comprising acts of:

authenticating, with a first handheld device, a first user of the first handheld device based on first biometric information provided by the first user;

in response to authenticating the first user of the first handheld device, transmitting a first wireless signal including first authentication information of the first user derived from the first biometric information;

receiving with a second device, the first wireless signal including the first authentication information of the first user;

receiving or retrieving from a memory second biometric data of the first user from biometric information for a first plurality of users stored in the memory, and receiving the second biometric data of the first user at the second device;

authenticating with the second device the identity of the first entity based upon the first authentication information and the second biometric information.

31. The method of claim 30, wherein the act of retrieving from the memory includes retrieving the second biometric information of the user of the first handheld device from the stored biometric information of the first plurality of users stored in a second memory of the second device.

32. The method of claim 31, wherein the act of retrieving from the memory the biometric information of the plurality of first users includes an act of receiving from a secure database updated biometric information of the first plurality of users.

33. The method of claim 30, further comprising controlling access to a secure location with the second device.

34. The method of claim 30, further comprising comparing stored first biometric information with the first biometric information of the user of the first handheld device to enable or disable use of the first handheld device based on a result of the comparison.

35. The method of claim 30, further comprising an act of receiving with the first handheld device, second authentication information of a second user of the second device, the second authentication information being wirelessly transmitted from the second device.