US5930804A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Web-based biometric authentication system and method
Assignee: US Philips Corp
•
Filing: 1997-06-09
•
Granted: 1999-07-27
•
Expires: 2017-06-09
Abstract
Abstract A Web-based authentication system and method, the system comprising at least one Web client station, at least one Web server station and an authentication center. The Web client station is linked to a Web cloud, and provides selected biometric data of an individual who is using the Web client station. The Web server station is also linked to the Web cloud. The authentication center is linked to at least one of the Web client and Web server stations so as to receive the biometric data. The authentication center, having records of one or more enrolled individuals, provides for comparison of the provided data with selected records. The method comprises the steps of (i) establishing parameters associated with selected biometric characteristics to be used in authentication; (ii) acquiring, at the Web client station, biometric data in accordance with the parameters; (iii) receiving, at an authentication center, a message that includes biometric data; (iv) selecting, at the authentication center, one or more records from among records associated with one or more enrolled individuals; and (v) comparing the received data with selected records. The comparisons of the system and method are to determine whether the so-compared live data sufficiently matches the selected records so as to authenticate the individual seeking access of the Web server station, which access is typically to information, services and other resources provided by one or more application servers associated with the Web server station.
Inventors
- 👤 Yuan-Pin Yu
- 👤 Stephen Wong
- 👤 Mark B. Hoffberg
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 11:43
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0861; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32; G06F21/33; G06Q; G06Q20/00; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4014; G07; G07C; G07C9/00; G07C9/30; G07C9/32; G07C9/37; G06F2211/00; G06F2211/007; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99933; Y10S707/99941; Y10S707/99944; Y10S707/99945; Y10S707/99948
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
207 words
A method for Web-based, biometric authentication of individuals who are using a Web Client station, the individuals seeking access of a Web server station, the method comprising the steps of: establishing parameters associated with selected biometric characteristics to be used in authentication; acquiring, at the Web client station, biometric data from an individual in accordance with the parameters; receiving, at an authentication center, a message that includes live data comprising the acquired biometric data from the individual seeking access of the Web server station; selecting, at the authentication center, one or more records from among records associated with one or more enrolled individuals; comparing the live data with selected records, the comparison determining whether the so-compared live data sufficiently matches the selected records as to authenticate the individual seeking access; recording selected details of the received message and the results of the comparing step so as to create a biometric audit trail; and when an individual fails authentication, using selected details of the received message, and comparing said selected details with a plurality of records, the comparison determining whether the so-compared selected details sufficiently match any one or more of the so-compared records, so as to identify the individual seeking unauthorized access of the Web server station.
Claim 2
Independent Claim
207 words
A method for Web-based, biometric authentication of individuals who are using a Web Client station, the individuals seeking access of a Web server station, the method comprising the steps of: establishing parameters associated with selected biometric characteristics to be used in authentication; acquiring, at the Web client station, biometric data from an individual in accordance with the parameters; receiving, at an authentication center, a message that includes live data comprising the acquired biometric data from the individual seeking access of the Web server station; selecting, at the authentication center, one or more records from among records associated with one or more enrolled individuals; comparing the live data with selected records, the comparison determining whether the so-compared live data sufficiently matches the selected records as to authenticate the individual seeking access; recording selected details of the received message and the results of the comparing step so as to create a biometric audit trail; and when an individual fails authentication, using selected details of the received message, and comparing said selected details with a plurality of records, the comparison determining whether the so-compared selected details sufficiently match any one or more of the so-compared records, so as to identify the individual seeking unauthorized access of the Web server station.
Claim 3
Dependent Claim
51 words
A method as claimed in claim 1, wherein said step of comparing said selected details with a plurality of records where an individual fails authentication comprises using, as the plurality of records, biometric data records of said authentication center and also biometric data records of at least one additional authentication center.
Claim 4
Dependent Claim
23 words
A method as claimed in claim 1, wherein said live data includes a voice print and the selected records include voice print data.
Claim 5
Dependent Claim
76 words
A method as claimed in claim 1, further comprising the steps of: providing, at the Web client station, a claimed identity associated with the individual; receiving, at the authentication center, a message that includes the claimed identity; determining the acceptability of the message based on the claimed identity; if the message is acceptable, providing, at the authentication center, selected records that agree with the claimed identity; and comparing the received data with the so-provided, selected records.
Claim 6
Dependent Claim
156 words
A method as claimed in claim 1, further comprising the step of providing, from the authentication center, a response respecting the result of the comparing step, this providing step comprising the steps of: (A) preparing the response, which step includes one or more of the following steps: (i) preparing a digital certificate; (ii) preparing a page having electronic links to accessible pages associated with one or more application servers; (iii) preparing an appropriate entry in a biometric database; and (iv) preparing a secure protocol message; and (B) effecting the response, which step includes one or more of the following steps: (i) downloading the response to the Web server station; (ii) routing the response to the Web server station via the Web client station; (iii) making an appropriate entry in a selected biometric; (iv) downloading the response to the Web client station; and (v) routing the response to the Web client station via the Web server station.
Claim 7
Dependent Claim
37 words
A method as claimed in claim 5, wherein the step of preparing a page having electronic links comprises including or activating only those electronic links that are appropriate to the confidence level attained in the comparing step.
Claim 8
Dependent Claim
31 words
A method as claimed in claim 1, further comprising the step of establishing secure communication channels in and among the Web client station, the Web server station and the authentication station.
Claim 9
Dependent Claim
101 words
A method as claimed in claim 7, wherein the step of establishing secure communication channels comprises: (A) employing a Web client at the Web client station and a Web server at the Web server station, the Web client and the Web server providing for establishing a secure communication channel between the Web client station and the Web server station; and (B) employing an interface mechanism at the Web client station and an authorization server at the authentication center, the interface mechanism and the authorization server providing for establishing a secure communication channel between the Web client station and the authentication center.
Claim 10
Dependent Claim
89 words
A method as claimed in claim 1, wherein: the acquiring step comprises plural acquisitions, said plural acquisitions relating to one or more biometric characteristics; and the establishing parameters step further comprises at least one of the following steps: (i) selecting a confidence level from among supported confidence levels, said supported confidence levels being categorized in relation to authentication based on using biometric data associated with single biometric characteristics and with combinations of biometric characteristics; and (ii) selecting a trigger event, said trigger event causing the acquisition of biometric data.
Claim 11
Dependent Claim
25 words
A method as claimed in claim 9, wherein the step of selecting a trigger event comprises selected a time interval for repeating the authentication steps.
Claim 12
Dependent Claim
33 words
A method as claimed in claim 1, wherein the step of establishing parameters comprises one or more communications by and among the Web server station, the Web client station and the authentication center.
Claim 13
Dependent Claim
27 words
A method as claimed in claim 11, wherein the step of establishing parameters further comprises the step of choosing among negotiable parameters by using predetermined arbitration algorithms.
Claim 14
Dependent Claim
45 words
A method as claimed in claim 11, wherein the step of establishing parameters further comprises downloading a page from the Web server station to the Web client station responsive to the Web client station requesting access of the Web server station, the page including parameters.
Claim 15
Dependent Claim
21 words
A method as claimed in claim 1, further comprising the step of determining an authentication center from among plural authentication centers.
References Cited (Backward Citations)
US5229764A
Cited
US5280527A
Cited
US5719950A
Cited
US5682142A
Cited
US5615277A
Cited
WO1997008868A1
Cited
EP0762261A2
Cited
US5706427A
Cited
US5757916A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-07-26 | 2003-01-25 | 2003-07-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-07-26 | 2007-01-25 | 2007-07-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-07-26 | 2011-01-25 | 2011-07-27 | $7700.00 | Window Closed / Lapsed |