Patent US7117356B2 successfully refreshed from Google Patents.
US7117356B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Systems and methods for secure biometric authentication
Assignee: Bio Key International Inc
•
Filing: 2003-05-20
•
Granted: 2006-10-03
•
Expires: 2023-05-20
Abstract
Abstract A biometric security system is disclosed. The system includes a client security system configured to make a request for access to an application module. The application module is configured to receive the request and respond by sending an instruction to the authentication module to initiate an authentication session. The authentication module is configured to receive the instruction and respond by generating a session packet that is transferred to the client security system. The client security system is further configured to generate an authorization packet that is returned to the authentication module after being encrypted utilizing information contained in the session packet.
Inventors
- 👤 Mira K. LaCous
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 11:40
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32
Claims Analysis
Total Claims: 51
Claim 1
Independent Claim
141 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises obtaining a session key and storing it in the session packet, the session key being configured to be utilized to encrypt data; obtaining a decryption component associated with the session key before transmitting the session packet to the client security system; and receiving an authorization packet, decrypting it using the decryption component, and providing information to grant or deny access based on a content of a collection of authentication information contained in the authorization packet.
Claim 2
Independent Claim
141 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises obtaining a session key and storing it in the session packet, the session key being configured to be utilized to encrypt data; obtaining a decryption component associated with the session key before transmitting the session packet to the client security system; and receiving an authorization packet, decrypting it using the decryption component, and providing information to grant or deny access based on a content of a collection of authentication information contained in the authorization packet.
Claim 3
Dependent Claim
24 words
The method of claim 1 , wherein generating a session packet further comprises generating a session number and storing it in the session packet.
Claim 4
Dependent Claim
20 words
The method of claim 2 , further comprising storing the session number in a database associated with the authentication module.
Claim 5
Dependent Claim
25 words
The method of claim 1 , further comprising storing the decryption component associated with the session key in a database associated with the authentication module.
Claim 6
Dependent Claim
33 words
The method of claim 1 , wherein receiving an authorization packet and decrypting it comprises receiving an authorization packet and decrypting with an encryption key that is complimentarily related to the session key.
Claim 7
Dependent Claim
22 words
The method of claim 1 , wherein obtaining a session key comprises generating a public key portion of a PKI key pair.
Claim 8
Dependent Claim
31 words
The method of claim 6 , wherein receiving an authorization packet and decrypting it comprises receiving an authorization packet and decrypting with a private key portion of the PKI key pair.
Claim 9
Dependent Claim
34 words
The method of claim 1 , wherein receiving an authorization packet and decrypting it comprises receiving an authorization packet and decrypting it with an encryption component that is independent of the pre-established encryption relationship.
Claim 10
Dependent Claim
24 words
The method of claim 1 , wherein generating a session packet comprises generating a session time stamp and storing it in the session packet.
Claim 11
Dependent Claim
37 words
The method of claim 1 , wherein generating a session packet further comprises: generating a session number and storing it in the session packet; and generating a session time stamp and storing it in the session packet.
Claim 12
Dependent Claim
25 words
The method of claim 10 , further comprising storing the session number and the session time stamp in a database associated with the authentication module.
Claim 13
Dependent Claim
45 words
The method of claim 1 , wherein providing information to grant or deny access based on the content comprises comparing a session number to a list of valid values, and providing information to grant or deny access based at least in part on the comparison.
Claim 14
Dependent Claim
53 words
The method of claim 1 , wherein providing information to grant or deny access based on the content comprises evaluating a session time stamp to determine whether the authorization packet was received within a predetermined time period, and providing information to grant or deny access based at least in part on the evaluation.
Claim 15
Dependent Claim
57 words
The method of claim 1 , wherein providing information to grant or deny access based on the content comprises comparing a data representation of a user's biometric information to at least one data representation of biometric information stored in a database, and providing information to grant or deny access based at least in part on the comparison.
Claim 16
Dependent Claim
101 words
The method of claim 1 , wherein providing information to grant or deny access based on the content comprises: comparing a session number to a list of valid values; evaluating a session time stamp to determine whether the authorization packet was received within a predetermined time period; comparing a data representation of a user's biometric information to at least one data representation of biometric information stored in a database; and providing information to grant or deny access based on results of the comparing of the session number, the evaluating of the session time stamp and the comparing of the data representation.
Claim 17
Dependent Claim
59 words
The method of claim 1 , wherein pre-establishing an encryption relationship comprises storing a first encryption component with the client computing device and a second encryption component with the authentication module, one of the first and second encryption components being configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption components.
Claim 18
Dependent Claim
25 words
The method of claim 16 , wherein encrypting the session packet comprises encrypting the session packet utilizing one of the first and second encryption components.
Claim 19
Dependent Claim
60 words
The method of claim 1 , wherein pre-establishing an encryption relationship comprises storing a first part of a PKI key pair with the client computing device and a second part of the PKI key pair with the authentication module, one of the first and second parts being configured to decrypt information that has previously been encrypted utilizing the other part.
Claim 20
Dependent Claim
29 words
The method of claim 18 , wherein encrypting the session packet comprises encrypting the session packet utilizing one of the first and second parts of the PKI key pair.
Claim 21
Dependent Claim
62 words
The method of claim 1 , wherein pre-establishing an encryption relationship comprises storing a first part of a static encryption key pair with the client computing device and a second part of the static encryption key pair with the authentication module, one of the first and second parts being configured to decrypt information that has previously been encrypted utilizing the other part.
Claim 22
Dependent Claim
30 words
The method of claim 20 , wherein encrypting the session packet comprises encrypting the session packet utilizing one of the first and second parts of the static encryption key pair.
Claim 23
Dependent Claim
30 words
The method of claim 1 , wherein utilizing an authentication module comprises utilizing an authentication module to regulate user access to a collection of information associated with an application module.
Claim 24
Dependent Claim
61 words
The method of claim 22 , wherein utilizing an authentication module to regulate user access to a collection of information associated with an application module comprises: utilizing an authentication module to regulate user access to a collection of information associated with an application module that is remotely accessed by a client computing device upon which the client security system is implemented.
Claim 25
Dependent Claim
80 words
The method of claim 23 , wherein utilizing an authentication module to regulate user access to a collection of information associated with an application module that is remotely accessed by a client computing device upon which the client security system is implemented comprises: utilizing an authentication module to regulate user access to a collection of information associated with an application module that is accessed through the Internet by a client computing device upon which the client security system is implemented.
Claim 26
Dependent Claim
37 words
The method of claim 22 , wherein utilizing an authentication module to regulate user access to a collection of information associated with an application module comprises utilizing the authentication module to remotely interact with the application module.
Claim 27
Dependent Claim
33 words
The method of claim 25 , wherein utilizing the authentication module to remotely interact with the application module comprises utilizing the authentication module to remotely interacting with the application module through the Internet.
Claim 28
Dependent Claim
51 words
A data packet for transmission from an authentication module to a client security system during a process of authentication within a biometric security system, the data packet comprising: a session key, the session key being a public key portion of a PKI key pair configured to be utilized to encrypt data.
Claim 29
Dependent Claim
51 words
A data packet for transmission from an authentication module to a client security system during a process of authentication within a biometric security system, the data packet comprising: a session key, the session key being a public key portion of a PKI key pair configured to be utilized to encrypt data.
Claim 30
Dependent Claim
12 words
The data packet of claim 27 , further comprising a session number.
Claim 31
Dependent Claim
26 words
The data packet of claim 28 , wherein the session number is a value that corresponds to a session initiated when the data packet is generated.
Claim 32
Dependent Claim
22 words
The data packet of claim 28 , further comprising a time stamp that represents a time value when the session was initiated.
Claim 33
Dependent Claim
12 words
The data packet of claim 27 , further comprising a time stamp.
Claim 34
Dependent Claim
31 words
The data packet of claim 31 , wherein the time stamp is a time value that corresponds to the approximate beginning of a session initiated when the data packet is generated.
Claim 35
Dependent Claim
16 words
The data packet of claim 27 , further comprising a session number and a time stamp.
Claim 36
Dependent Claim
14 words
The data packet of claim 33 , further comprising a collection of command data.
Claim 37
Dependent Claim
91 words
A biometric security system, comprising: a client security system configured to make a request for access; an application module being configured to receive the request and respond by sending an instruction to initiate an authentication session; and an authentication module configured to receive the instruction and respond by generating a session packet that is transferred to the client security system, the client security system being further configured to generate an authorization packet that is returned to the authentication module after being encrypted utilizing an encryption key contained in the session packet.
Claim 38
Dependent Claim
91 words
A biometric security system, comprising: a client security system configured to make a request for access; an application module being configured to receive the request and respond by sending an instruction to initiate an authentication session; and an authentication module configured to receive the instruction and respond by generating a session packet that is transferred to the client security system, the client security system being further configured to generate an authorization packet that is returned to the authentication module after being encrypted utilizing an encryption key contained in the session packet.
Claim 39
Dependent Claim
50 words
The system of claim 35 , wherein the authentication module is configured to encrypt the session packet with a first part of a complementary encryption key pair, and wherein the user security system is configured to decrypt the session packet with a second part of the complementary encryption key pair.
Claim 40
Dependent Claim
58 words
The system of claim 36 , wherein the first part of the complementary key pair is a first part of a PKI key pair that is stored with the authentication module, and wherein the second part of the complementary key pair is a second part of a PKT key pair that is stored with the client security system.
Claim 41
Dependent Claim
58 words
The system of claim 36 , wherein the first part of the complementary key pair is a first part of a static key pair that is stored with the authentication module, and wherein the second part of the complementary key pair is a second part of a static key pair that is stored with the client security system.
Claim 42
Dependent Claim
43 words
The system of claim 35 , wherein the client security system is further configured to obtain a session key and store it in the session packet, and wherein the client security system is configured to encrypt the authorization packet utilizing the session key.
Claim 43
Dependent Claim
46 words
The system of claim 39 , wherein the authentication module is further configured to decrypt the authorization packet with a retained session key that is complementary to the session key, the retained session key being stored in a location that is accessible to the authentication module.
Claim 44
Dependent Claim
26 words
The system of claim 40 , wherein the client security system is further configured to obtain user biometric information and store it in the authorization packet.
Claim 45
Independent Claim
119 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; storing the session number in a database associated with the authentication module; and receiving an authorization packet, decrypting it, and providing information to grant or deny access based on the content of a collection of authentication information contained in the authorization packet.
Claim 46
Independent Claim
119 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; storing the session number in a database associated with the authentication module; and receiving an authorization packet, decrypting it, and providing information to grant or deny access based on the content of a collection of authentication information contained in the authorization packet.
Claim 47
Independent Claim
110 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; and receiving an authorization packet, decrypting it, comparing the session number to a list of valid values, and providing information to grant or deny access based at least in part on the comparison.
Claim 48
Independent Claim
110 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; and receiving an authorization packet, decrypting it, comparing the session number to a list of valid values, and providing information to grant or deny access based at least in part on the comparison.
Claim 49
Independent Claim
127 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; and receiving an authorization packet, decrypting it, and comparing a data representation of a user's biometric information to at least one data representation of biometric information stored in a database, and providing information to grant or deny access based at least in part on the comparison of the data representation.
Claim 50
Independent Claim
127 words
A method for utilizing an authentication module to facilitate a regulation of user access in the context of a biometric security system, the method comprising: pre-establishing an encryption relationship between a client security system and the authentication module; receiving an instruction to begin an authorization session; generating a session packet, encrypting it, and transmitting it to the client security system, wherein generating a session packet comprises generating a session number and storing it in the session packet; and receiving an authorization packet, decrypting it, and comparing a data representation of a user's biometric information to at least one data representation of biometric information stored in a database, and providing information to grant or deny access based at least in part on the comparison of the data representation.
Claim 51
Dependent Claim
73 words
The method of claim 44 , wherein the step of receiving an authorization packet further comprises: comparing the session number to a list of valid values; evaluating a session time stamp to determine whether the authorization packet was received within a predetermined time period; and wherein providing information to grant or deny access is further based on results of the comparing of the session, number and the evaluating of the session time stamp.
References Cited (Backward Citations)
US3959884A
Cited
US4185270A
Cited
US4151512A
Cited
US4607384A
Cited
US4790564A
Cited
US5105467A
Cited
US5261008A
Cited
US5140642A
Cited
US6002787A
Cited
US5664027A
Cited
US5572597A
Cited
US5631971A
Cited
US5659626A
Cited
US5901239A
Cited
US5841888A
Cited
US6181807B1
Cited
US6263438B1
Cited
US20020041700A1
Cited
US6072895A
Cited
US6226391B1
Cited
US6289112B1
Cited
US6049621A
Cited
US6233348B1
Cited
US6241288B1
Cited
US20020030359A1
Cited
US6256737B1
Cited
US20020031245A1
Cited
US20010007127A1
Cited
US20020076054A1
Cited
US20030033545A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-10-02 | 2010-04-03 | 2010-10-03 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-10-02 | 2014-04-03 | 2014-10-03 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-10-02 | 2018-04-03 | 2018-10-03 | $7700.00 | Window Closed / Lapsed |