Patent US6907135B2 successfully refreshed from Google Patents.
US6907135B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security check provision
Assignee: British Telecommunications PLC
•
Filing: 1998-03-02
•
Granted: 2005-06-14
•
Expires: 2018-03-02
Abstract
Abstract Security check method and apparatus reduces problmes that can arise if the user security data set becomes known by unauthorized persons. To address this problem only part of the user data set is recorded in insecure sections of the system. For example, a security check preventing unauthorized remote access to a shared computer is provided by capturing a user data set representing a user's iris, operating the user's personal computer to select only a portion of the captured data set requested by the shared computer and transmitting the portion along a telecommunications line. The shared computer derives partial data sets from stored user data sets using a similar selection to that used by personal computer and compares the partial data set it has derived with the partial data set transmitted by the personal computer in deciding whether to grant access. Point-of-sale devices and cards recording only partial user data sets are also disclosed.
Inventors
- 👤 Maurice M Gifford
- 👤 Christopher H Seal
- 👤 David John McCartney
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 06:33
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32; G06F21/34; G07; G07C; G07C9/00; G07C9/20; G07C9/22; G07C9/25; G07C9/257; G07C9/30; G07C9/32; G07C9/37
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
222 words
An authentication apparatus comprising: a user partial biometric data set input means; an authentication signal output means; one or more storage media having recorded therein one or more authorised person entire biometric data sets, and processor readable code executable to verify that a remote user is an authorised person, said code comprising: user partial biometric data set input code executable to read a user partial biometric data set via said input means; authorised person partial biometric data set acquisition code executable to obtain one or more authorised person partial biometric data sets on the basis of one or more of said authorised person entire biometric data sets, said obtaining of said one or more authorised person partial biometric data sets involving a predetermined selection of elements from the user entire biometric data set, said selection of elements being performed so as to select different elements, between obtainings, of authorised person partial biometric data sets from an authorised person entire biometric data set; data set comparison code executable to establish whether the user partial biometric data set and the authorised person partial biometric data set are sufficiently similar to verify that the remote user is an authorised person; and authentication signal generation code operable to cause an authentication signal to be output via said output means on said data sets being sufficiently similar.
Claim 2
Dependent Claim
222 words
An authentication apparatus comprising: a user partial biometric data set input means; an authentication signal output means; one or more storage media having recorded therein one or more authorised person entire biometric data sets, and processor readable code executable to verify that a remote user is an authorised person, said code comprising: user partial biometric data set input code executable to read a user partial biometric data set via said input means; authorised person partial biometric data set acquisition code executable to obtain one or more authorised person partial biometric data sets on the basis of one or more of said authorised person entire biometric data sets, said obtaining of said one or more authorised person partial biometric data sets involving a predetermined selection of elements from the user entire biometric data set, said selection of elements being performed so as to select different elements, between obtainings, of authorised person partial biometric data sets from an authorised person entire biometric data set; data set comparison code executable to establish whether the user partial biometric data set and the authorised person partial biometric data set are sufficiently similar to verify that the remote user is an authorised person; and authentication signal generation code operable to cause an authentication signal to be output via said output means on said data sets being sufficiently similar.
Claim 3
Dependent Claim
136 words
A communications network comprising: one or more authentication apparatuses according to claim 1 ; one or more security check terminals comprising: a user partial biometric data set acquisition device operable to: (a) obtain, from a user attempting to pass the security check, a user entire biometric data set; and (b) obtain a user partial biometric data set from the user entire biometric data set without obtaining additional biometric data from the user, the obtaining of said user partial biometric data set involving the selection of elements from the user entire biometric data set, wherein said selection of elements is performed so as to select different elements from the user entire biometric data set each time a user attempts to pass the security check; and one or more data communications links between said authentication apparatuses and terminals.
Claim 4
Independent Claim
238 words
A method of providing an automatic security check, said method comprising the steps of: (a) operating a user data capture device to obtain, from a user attempting to pass the security check, a user entire biometric data set representing an entire biometric of the user; (b) obtain a user partial biometric data set from the user entire biometric data set without obtaining additional biometric data from the user, the obtaining including a predetermined selection of elements from the user entire biometric data set, wherein said selection of elements is performed so as to select different elements from the user entire biometric data set each time a user attempts to pass the security check; (c) transmitting said user partial biometric data set via a communications link to an authentication apparatus operable to provide one or more authorised person partial biometric data sets; (d) operating said authentication apparatus to compare said user partial biometric data set with at least one authorised person partial biometric data set obtained from a corresponding authorised person entire biometric data set using a selection process similar to that used in obtaining the user partial biometric data set from the user entire biometric data set; and (e) determining that said user is a person authorised to pass said security check on said user partial biometric data set and authorised person partial biometric data set being sufficiently similar to verify that the user is an authorised person.
Claim 5
Independent Claim
238 words
A method of providing an automatic security check, said method comprising the steps of: (a) operating a user data capture device to obtain, from a user attempting to pass the security check, a user entire biometric data set representing an entire biometric of the user; (b) obtain a user partial biometric data set from the user entire biometric data set without obtaining additional biometric data from the user, the obtaining including a predetermined selection of elements from the user entire biometric data set, wherein said selection of elements is performed so as to select different elements from the user entire biometric data set each time a user attempts to pass the security check; (c) transmitting said user partial biometric data set via a communications link to an authentication apparatus operable to provide one or more authorised person partial biometric data sets; (d) operating said authentication apparatus to compare said user partial biometric data set with at least one authorised person partial biometric data set obtained from a corresponding authorised person entire biometric data set using a selection process similar to that used in obtaining the user partial biometric data set from the user entire biometric data set; and (e) determining that said user is a person authorised to pass said security check on said user partial biometric data set and authorised person partial biometric data set being sufficiently similar to verify that the user is an authorised person.
Claim 6
Dependent Claim
31 words
A method as in claim 3 further comprising the step of automatically altering the selection process to be used in obtaining said user partial biometric data set in dependence upon time.
Claim 7
Dependent Claim
46 words
A method as in claim 3 further comprising the step of operating said authentication apparatus to transmit a challenge signal to said capture device specifying which elements are to be selected from the user entire biometric data set to obtain the user partial biometric data set.
Claim 8
Dependent Claim
64 words
A method as in claim 3 wherein said authentication apparatus stores one or more authorised person entire biometric data sets and said provision of authorised person partial biometric data sets involves selecting elements from corresponding authorised person entire biometric data sets using a selection process similar to that used in obtaining the user partial biometric data set from the user entire biometric data set.
Claim 9
Dependent Claim
26 words
A method as in claim 6 wherein said user entire biometric data set represents an image biometric and said biometric capture device comprises an imaging device.
Claim 10
Dependent Claim
48 words
A method as in claim 7 wherein said imaging device has externally controllable optical parameters and said method further comprises the step of operating said authentication apparatus to transmit a challenge signal to said imaging device effective to specify one or more of said externally controllable optical parameters.
Claim 11
Dependent Claim
31 words
A method as in claim 8 wherein said externally controllable optical parameters comprise the focal length of the imaging device and the challenge signal is effective to specify the focal length.
Claim 12
Dependent Claim
24 words
A method as in claim 6 wherein said user entire biometric data set represents a luminance pattern of the one of the user's irises.
Claim 13
Dependent Claim
20 words
A method as in claim 3 further comprising the step of encrypting said user partial biometric data set before transmission.
Claim 14
Dependent Claim
20 words
A method as in claim 3 wherein said user entire biometric data set relates to only one type of biometric.
Claim 15
Independent Claim
169 words
A method for more securely using biometric data in performing an automated security check via a communications link, said method comprising: capturing a complete first biometric data set from a proposed user at a security check point; selecting a predetermined subset of independent elements of said first biometric data set to create a partial second biometric data set from which it is impossible to infer said complete first biometric data set without obtaining additional biometric data from the user; transmitting said second biometric data set over a communications link to an authentication processor where it is compared in a security check to a similar first subset of at least one of previously stored complete biometric data sets for authorised users; and returning the result of said security check comparison back to the security check point; wherein said selecting step is performed so as to select a different subset of independent elements of said first biometric data set each time a proposed user attempts to pass the security check point.
Claim 16
Independent Claim
169 words
A method for more securely using biometric data in performing an automated security check via a communications link, said method comprising: capturing a complete first biometric data set from a proposed user at a security check point; selecting a predetermined subset of independent elements of said first biometric data set to create a partial second biometric data set from which it is impossible to infer said complete first biometric data set without obtaining additional biometric data from the user; transmitting said second biometric data set over a communications link to an authentication processor where it is compared in a security check to a similar first subset of at least one of previously stored complete biometric data sets for authorised users; and returning the result of said security check comparison back to the security check point; wherein said selecting step is performed so as to select a different subset of independent elements of said first biometric data set each time a proposed user attempts to pass the security check point.
Claim 17
Dependent Claim
16 words
A method as in claim 13 , wherein the communications link is an insecure communications link.
References Cited (Backward Citations)
US3857018A
Cited
EP0067611A1
Cited
GB2171828A
Cited
US4975969A
Cited
US4993068A
Cited
US5233655A
Cited
US5291560A
Cited
US5642160A
Cited
US5984366A
Cited
US5615277A
Cited
US5870723A
Cited
FR2730076A1
Cited
US5859921A
Cited
WO1997002522A1
Cited
US5850470A
Cited
US5815252A
Cited
US5901238A
Cited
US6076167A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-06-13 | 2008-12-13 | 2009-06-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-06-13 | 2012-12-13 | 2013-06-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-06-13 | 2016-12-13 | 2017-06-14 | $7700.00 | Window Closed / Lapsed |