Intelligent peripheral device and system for the authentication and verification of individuals and/or documents through a secure multifunctional authentication service with data storage capability

• US 9,183,364 B2
• Filed: 08/13/2010
• Issued: 11/10/2015
• Est. Priority Date: 08/13/2009
• Status: Active Grant

• Current Assignee: Innovation In Motion, Inc. (authID, Inc.)
• Original Assignee: Innovation In Motion, Inc. (authID, Inc.)
• Inventors: Szoke, Thomas, Fozzati, Daniel, Vago, Andras
• Primary Examiner(s): Hunnings, Travis
• Assistant Examiner(s): SMALL, NAOMI J
• Application Number:
  US13/390,113
• Publication Number:
  US 20120139703A1
• Time in Patent Office: 1,915 Days
• Field of Search: 340/5.83
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A device possessing a secure multifunctional authentication service integrated with data storage capability, wherein the device is a multifunctional intelligent peripheral or accessory device, which, upon implementation into a system, is disposed to control a set of transactions that the system is designated to perform by the device, in conjunction with a data transfer medium which is under the control of the device.

Claims

1. A method to transfer and control a set of transactions designated to be performed by a data transfer medium in a system to an intelligent peripheral device comprising the steps of:

authenticating the intelligent peripheral device and the data transfer medium by a secure information exchange device, wherein the step of authenticating further comprises;

reading a plurality of authentication data of the intelligent peripheral device by the secure information exchange device;

reading a plurality of authentication data of the data transfer medium by the secure information exchange device;

comparing the digital certificate of the intelligent peripheral device by the secure information exchange device against an external certificate authority root certificate;

comparing the digital certificate of the data transfer medium by the secure information exchange device against an external certificate authority root certificate;

verifying the digital certificate of the intelligent peripheral device by the secure information exchange device;

verifying the digital certificate of the data transfer medium by the secure information exchange device;

searching a device database by the secure information exchange device for the intelligent peripheral device and the data transfer medium;

enrolling the intelligent peripheral device and the data transfer medium in the device database;

approving the authentication of the intelligent peripheral device and the data transfer medium once they are enrolled in the device database;

creating a trusted and encrypted environment between the intelligent peripheral device and the data transfer medium for the transfer of information through a pairing of the intelligent peripheral device to the data transfer medium by the secure information exchange device, wherein the step of pairing further comprises;

capturing a fingerprint of an operator of the intelligent peripheral device to authenticate the operator by the secure information exchange device;

transmitting a digital certificate of the secure information exchange device to the intelligent peripheral device and data transfer medium;

authenticating the digital certificate of the secure information exchange against the root certificate of the external certificate authority by the intelligent peripheral device and data transfer medium;

verifying the secure information exchange device by the intelligent peripheral device and data transfer medium;

generating concurrently a key pair comprising a public key and a private key by the intelligent peripheral device and a key pair comprising a public key and a private key by the data transfer medium;

transmitting the public key of the device and the data transfer medium to the secure information exchange device;

transmitting a data communication address from the device and the data transfer medium to the secure information exchange device;

transmitting the public keys of the device and the data transfer medium by the secure information exchange device to an external certificate authority device;

receiving a signed certificate by the secure information exchange device from the external certificate authority;

signing each certificate by the secure exchange information device with the private keys of the device and the data transfer medium;

generating a random string by the secure information exchange device;

utilizing the random string generated by the secure information exchange device as a password by the intelligent peripheral device and the data transfer medium;

uploading the intelligent peripheral device certificate, the data transfer medium certificate, the data transfer medium address and the password to the intelligent peripheral device;

storing the pairing of the intelligent peripheral device and the data transfer medium in a database on the secure information exchange device following a successful pairing;

transferring control of the set of transactions designated to be performed by the data transfer medium in the system to the intelligent peripheral device following successful pairing of the intelligent peripheral device and the data transfer medium.

2. The method to transfer and control a set of transactions designated to be performed by a data transfer medium in a system to an intelligent peripheral device of claim 1, wherein the intelligent peripheral device further comprises:

a biometric authentication module, wherein the biometric authentication module is disposed to capture a plurality of an individual'"'"'s fingerprints;

an optical character recognition reader;

a radio frequency identification reader, wherein the radio frequency identification reader is disposed to read a plurality of contactless chips located within an electronic passport and further comprises an antenna;

an optical document scanner, wherein the optical document scanner is disposed to capture a plurality of data contained with a plurality of documents in possession by an individual;

a secure access module, wherein the secure access module is disposed to interface with a data transfer medium to allow for the secure transfer of information to a plurality of remote databases;

a machine readable zone reader;

a wireless communications module, wherein the wireless communications module is disposed to allow for data communication with a plurality of remote databases through a data transfer medium; and

a plurality of data storage modules within said biometric authentication module, wherein the plurality of data storage modules are disposed to be in data communication with a plurality of remote databases to allow for updating of the of databases stored on the device;

an optical character recognition reader, wherein the optical character recognition reader is disposed to translate a plurality of scanned images into a plurality of machine-encoded text;

wherein the radio frequency identification reader, the biometric authentication module, the optical character recognition reader, the optical document scanner, the secure access module, the machine readable zone reader, the wireless communications module and the plurality of data storage modules are in electronic communication.

3. The intelligent peripheral device of claim 2, wherein the intelligent peripheral device be is in data communication with a plurality of databases.

4. The intelligent peripheral device of claim 2, wherein the intelligent peripheral device allows for a plurality of biometric and non-biometric search and match functions for the identification and verification of a plurality of individuals.

5. The intelligent peripheral device of claim 2, wherein the intelligent peripheral device allows for a remote identification and verification of a plurality of individuals.

6. The intelligent peripheral device of claim 2, wherein the intelligent peripheral device allows for the identification and verification of a plurality of individuals and documents through the plurality of data storage modules stored on the intelligent peripheral device.

7. The intelligent peripheral device of claim 4, wherein the non-biometric functions of identification and verification are selected from the group consisting of:

name, vehicle registration, weapon registration, driver'"'"'s license, vehicle VIN and Visa.

8. The intelligent peripheral device of claim 7, wherein the intelligent peripheral device allows for the authentication of a secure credential located within a document.

9. The intelligent peripheral device of claim 8, wherein the secure credential is located within a document selected from the group consisting of:

electronic passport, standard passport, National identification, driver'"'"'s license and any other government issued credentials.

10. The intelligent peripheral device of claim 2, wherein the plurality of data storage modules stores database information selected from the group consisting of:

denied person'"'"'s list, watch list and fingerprint list.

11. The intelligent peripheral device of claim 2, wherein the data storage modules are encrypted and deleted upon tampering by an individual without proper authorization.

12. A method for the identification of an individual utilizing the intelligent peripheral device of claim 2, the steps comprising:

scanning a plurality of a subject'"'"'s credential'"'"'s using the machine readable zone reader of the intelligent peripheral device;

decoding the plurality of credential'"'"'s by the intelligent peripheral device;

selecting a search query by the intelligent peripheral device;

transmitting a search request by the intelligent peripheral device; and

receiving a response to the search request by the intelligent peripheral device.

13. The method for the identification of an individual utilizing the intelligent peripheral device of claim 2, further comprising the step of:

determining whether a chip is present on the subject'"'"'s credential'"'"'s by an operator of the intelligent peripheral device; and

reading the chip by the radio frequency identification reader on the intelligent peripheral device when the chip is present.

14. The method for the identification of an individual utilizing the intelligent peripheral device of claim 2, further comprising the step of:

capturing a plurality of a subject'"'"'s fingerprints using the biometric authentication module.

15. The method for the identification of an individual utilizing the intelligent peripheral device of claim 2, further comprising the step of:

packaging a subject'"'"'s information into a file; and

transmitting the file to a plurality of remote databases.

16. The method of claim 12, further comprising the step of:

selecting a local database search by an operator of the intelligent peripheral device;

transmitting a search request by the intelligent peripheral device; and

transmitting a response to the search request to the intelligent peripheral device.

17. The method of claim 12, wherein the search query is selected from the group consisting of:

a person, a vehicle, a property, a boat and a gun.

18. The method of claim 17, wherein the search query for a person is disposed to include a plurality of search parameters selected from the group consisting of:

first name, last name, state, sex, race, data of birth and city.

19. The method of claim 12, wherein the search query is disposed to identify an individual by validating a plurality of documents, further comprising the steps of:

selecting a document option on the intelligent peripheral device;

scanning a machine readable zone on the document by the intelligent peripheral device; and

transmitting the information contained within the machine readable zone to the plurality of remote databases by the intelligent peripheral device.

20. The method of claim 19, wherein the document is selected from the group consisting of:

a passport, an electronic passport, personal identification and a driver'"'"'s license.

21. The method of claim 19, further comprising the step of:

scanning a contactless chip contained within the document; and

transmitting the information within the contactless chip to the intelligent peripheral device.

22. The method of claim 19, further comprising the step of:

capturing a plurality of a subject'"'"'s fingerprint'"'"'s;

determining whether the document includes a plurality of fingerprint data;

verifying the subject'"'"'s fingerprint with the fingerprint data contained in the document.

23. The intelligent peripheral device of claim 2, wherein the intelligent peripheral device further comprises:

a camera;

a keyboard, wherein the keyboard is disposed to allow for the entry of a plurality of information by an operator;

a magnetic stripe reader;

a contact card reader.