Patent US8214652B2 successfully refreshed from Google Patents.
← Back to Patent Explorer
US8214652B2 Active / In Force US ⏱️ 1.6 years remaining

Biometric identification network security

Assignee: Bio Key International Inc
•
Filing: 2008-06-03
•
Granted: 2012-07-03
•
Expires: 2028-06-03
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract Systems and methods for regulating user access in the context of a biometric security system are disclosed. One method disclosed includes receiving a remotely transmitted data packet containing an encryption key, utilizing a decryption component to decrypt the data packet, and utilizing the encryption component to encrypt biometric data. Another method disclosed includes utilizing a processor, within a client computing device, to perform an encryption function within a biometric security system, wherein the encryption function is incorporated into an authentication process that involves a transfer of biometric information between the client computing device and a remotely implemented server.

Inventors

  • 👤 Mira LaCous

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-09 11:04
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32; G06Q; G06Q20/00; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3674; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3231; H04L9/3234; G06F21/70; G06F21/71; G06F21/72; H04L2209/00; H04L2209/80; H04L2209/805

Claims Analysis

Total Claims: 15
Claim 1
Independent Claim 288 words
A computer-implemented method for regulating user access in the context of a biometric security system, the method comprising: storing a first encryption component upon a client security system, the first encryption component corresponding to a second encryption component stored in a location remote from the client security system, wherein one of the first and second encryption components is configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption components; receiving a remotely transmitted data packet at the client security system, the data packet containing an encryption key, a unique session number, a timestamp, and a command that indicates a task to be performed; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to decrypt the data packet with the first encryption component; determining the task to be performed based at least in part on the command; requesting a collection of biometric data based on the determined task; receiving the collection of biometric data from a biometric reading device associated with the client security system; utilizing the computer processor to perform an image qualification test on the collection of biometric data, the image qualification test determining whether the collection of biometric data is fraudulent or of insufficient quality and the image qualification test providing feedback corresponding to inadequacies identified during the determination of whether the collection of biometric data is fraudulent or of insufficient quality; and utilizing the computer processor to encrypt the collection of biometric data, the unique session number, and the timestamp with the encryption key included in the data packet based at least in part on the collection of biometric data successfully passing the image qualification test.
Claim 2
Dependent Claim 288 words
A computer-implemented method for regulating user access in the context of a biometric security system, the method comprising: storing a first encryption component upon a client security system, the first encryption component corresponding to a second encryption component stored in a location remote from the client security system, wherein one of the first and second encryption components is configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption components; receiving a remotely transmitted data packet at the client security system, the data packet containing an encryption key, a unique session number, a timestamp, and a command that indicates a task to be performed; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to decrypt the data packet with the first encryption component; determining the task to be performed based at least in part on the command; requesting a collection of biometric data based on the determined task; receiving the collection of biometric data from a biometric reading device associated with the client security system; utilizing the computer processor to perform an image qualification test on the collection of biometric data, the image qualification test determining whether the collection of biometric data is fraudulent or of insufficient quality and the image qualification test providing feedback corresponding to inadequacies identified during the determination of whether the collection of biometric data is fraudulent or of insufficient quality; and utilizing the computer processor to encrypt the collection of biometric data, the unique session number, and the timestamp with the encryption key included in the data packet based at least in part on the collection of biometric data successfully passing the image qualification test.
Claim 3
Dependent Claim 45 words
The method of claim 1 wherein utilizing the computer processor to decrypt the data packet with the first encryption component comprises: obtaining the first encryption component from a storage location that is an integrated part of trusted computing components maintained on a client computing device.
Claim 4
Dependent Claim 15 words
The method of claim 2 wherein the trusted computing components include an embedded security chip.
Claim 5
Dependent Claim 18 words
The method of claim 2 wherein the trusted computing components include implementation of a Trusted Computing Platform (TCP).
Claim 6
Dependent Claim 18 words
The method of claim 2 wherein the trusted computing components include implementation of a Trusted Platform Module (TPM).
Claim 7
Dependent Claim 47 words
The method of claim 2 wherein utilizing the computer processor to decrypt the data packet with the first encryption component comprises utilizing the first encryption component to decrypt the data packet using a pre-established decryption relationship between the client security system and a remotely deployed authentication module.
Claim 8
Dependent Claim 29 words
The method of claim 2 wherein utilizing the computer processor comprises utilizing a private key that is complimentarily related to the encryption key used to encrypt the data packet.
Claim 9
Dependent Claim 27 words
The method of claim 2 wherein the encryption key contained in the data packet is unrelated to the first encryption component utilized to decrypt the data packet.
Claim 10
Dependent Claim 24 words
The method of claim 2 wherein the data packet contains session data associated with a user access session initiated within the client security system.
Claim 11
Dependent Claim 15 words
The method of claim 9 wherein the unique session number is a non-consecutively generated number.
Claim 12
Dependent Claim 26 words
The method of claim 9 wherein the time stamp is utilized to determine whether the collection of biometric data is received within a predetermined time period.
Claim 13
Independent Claim 363 words
A method for regulating user access in the context of a biometric security system, the method comprising: initiating a match template registration session; receiving a first data packet at the client security system from a remote server, the data packet containing a first encryption key that corresponds to a second encryption key stored in said remote server, one of the first and second encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption keys; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to perform a first encryption function so as to encrypt a first collection of biometric information, the first encryption function comprising an application of the first encryption key to the first collection of biometric information; initiating an authorization model matching session based upon the client security system requesting access to information stored on the remote server, the authorization model matching session being configured to open upon initiation and close after a predetermined time period; receiving a second data packet at the client security system from the remote server, the second data packet containing a third encryption key that corresponds to a fourth encryption key stored in said remote server, one of the third and fourth encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the third and fourth encryption keys; utilizing the computer processor to perform a second encryption function so as to encrypt a second collection of biometric information, the second encryption function comprising an application of the third encryption key to the second collection of biometric information; and granting or not granting the access to the information stored on the remote server based at least in part on whether or not the encrypted second collection of biometric information is transferred from the client security system to the remote server before expiration of the predetermined time period and based at least in part on a comparison of a match template generated from the first collection of biometric information to an authentication template generated from the second collection of biometric information.
Claim 14
Independent Claim 363 words
A method for regulating user access in the context of a biometric security system, the method comprising: initiating a match template registration session; receiving a first data packet at the client security system from a remote server, the data packet containing a first encryption key that corresponds to a second encryption key stored in said remote server, one of the first and second encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the first and second encryption keys; utilizing a computer processor, which is a component of a computing device upon which the client security system is implemented, to perform a first encryption function so as to encrypt a first collection of biometric information, the first encryption function comprising an application of the first encryption key to the first collection of biometric information; initiating an authorization model matching session based upon the client security system requesting access to information stored on the remote server, the authorization model matching session being configured to open upon initiation and close after a predetermined time period; receiving a second data packet at the client security system from the remote server, the second data packet containing a third encryption key that corresponds to a fourth encryption key stored in said remote server, one of the third and fourth encryption keys being configured to decrypt information that has previously been encrypted utilizing the other of the third and fourth encryption keys; utilizing the computer processor to perform a second encryption function so as to encrypt a second collection of biometric information, the second encryption function comprising an application of the third encryption key to the second collection of biometric information; and granting or not granting the access to the information stored on the remote server based at least in part on whether or not the encrypted second collection of biometric information is transferred from the client security system to the remote server before expiration of the predetermined time period and based at least in part on a comparison of a match template generated from the first collection of biometric information to an authentication template generated from the second collection of biometric information.
Claim 15
Dependent Claim 32 words
The method of claim 12 , wherein the comparison of the match template to the authentication template is performed utilizing an authentication server that is a different server than the remote server.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2015-07-03 2016-01-02 2016-07-03 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2019-07-03 2020-01-02 2020-07-03 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2023-07-03 2024-01-02 2024-07-03 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag