Biometric identification network security

Claim 1

A computer-implemented method for regulating user access in the context of a biometric security system, the method comprising: storing a first encryption component upon a client security system, the first encryption component corresponding to a second encryption component stored in a location remote from the client security system, wherein one of the first and second encryption components is configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption components; receiving a remotely transmitted data packet at the client security system, the data packet containing an encryption key, a unique session number, a timestamp, and a command that indicates a task to be performed; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to decrypt the data packet with the first encryption component; determining the task to be performed based at least in part on the command; requesting a collection of biometric data based on the determined task; receiving the collection of biometric data from a biometric reading device associated with the client security system; utilizing the computer processor to perform an image qualification test on the collection of biometric data, the image qualification test determining whether the collection of biometric data is fraudulent or of insufficient quality and the image qualification test providing feedback corresponding to inadequacies identified during the determination of whether the collection of biometric data is fraudulent or of insufficient quality; and utilizing the computer processor to encrypt the collection of biometric data, the unique session number, and the timestamp with the encryption key included in the data packet based at least in part on the collection of biometric data successfully passing the image qualification test.

Claim 13

A method for regulating user access in the context of a biometric security system, the method comprising: initiating a match template registration session; receiving a first data packet at the client security system from a remote server, the data packet containing a first encryption key that corresponds to a second encryption key stored in said remote server, one of the first and second encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption keys; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to perform a first encryption function so as to encrypt a first collection of biometric information, the first encryption function comprising an application of the first encryption key to the first collection of biometric information; initiating an authorization model matching session based upon the client security system requesting access to information stored on the remote server, the authorization model matching session being configured to open upon initiation and close after a predetermined time period; receiving a second data packet at the client security system from the remote server, the second data packet containing a third encryption key that corresponds to a fourth encryption key stored in said remote server, one of the third and fourth encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the third and fourth encryption keys; utilizing the computer processor to perform a second encryption function so as to encrypt a second collection of biometric information, the second encryption function comprising an application of the third encryption key to the second collection of biometric information; and granting or not granting the access to the information stored on the remote server based at least in part on whether or not the encrypted second collection of biometric information is transferred from the client security system to the remote server before expiration of the predetermined time period and based at least in part on a comparison of a match template generated from the first collection of biometric information to an authentication template generated from the second collection of biometric information.

Claim 14

A method for regulating user access in the context of a biometric security system, the method comprising: initiating a match template registration session; receiving a first data packet at the client security system from a remote server, the data packet containing a first encryption key that corresponds to a second encryption key stored in said remote server, one of the first and second encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption keys; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to perform a first encryption function so as to encrypt a first collection of biometric information, the first encryption function comprising an application of the first encryption key to the first collection of biometric information; initiating an authorization model matching session based upon the client security system requesting access to information stored on the remote server, the authorization model matching session being configured to open upon initiation and close after a predetermined time period; receiving a second data packet at the client security system from the remote server, the second data packet containing a third encryption key that corresponds to a fourth encryption key stored in said remote server, one of the third and fourth encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the third and fourth encryption keys; utilizing the computer processor to perform a second encryption function so as to encrypt a second collection of biometric information, the second encryption function comprising an application of the third encryption key to the second collection of biometric information; and granting or not granting the access to the information stored on the remote server based at least in part on whether or not the encrypted second collection of biometric information is transferred from the client security system to the remote server before expiration of the predetermined time period and based at least in part on a comparison of a match template generated from the first collection of biometric information to an authentication template generated from the second collection of biometric information.