Methods and systems for establishing trust of identity

The present invention generally relates to establishing a predetermined level of credibility in an individual's identity prior to carrying out a transaction between the individual and the entity with which it trades.

Transactions are increasingly being carried out in various forms. The days when buyers and sellers had to meet to make a deal are gone. Network communications and electronic terminals now allow individuals to carry out different types of transactions by remote trading entities. Remote trading entities increasingly rely on a certain level of credibility in an individual's identity before conducting a deal with people. Different techniques have been used to establish an individual's identity. These technologies require users to present their password, personal identification number (PIN), and / or signed credit / debit card to establish their identity. Even transactions that the person himself witnesses often require a certain level of credibility in identity. Personal documents such as driver's licenses or passports may need to be created by the individual.

Today, many transactions are vulnerable to fraud. A criminal or unauthorized user may initiate an unauthorized transaction by supplying a stolen password, PIN, or credit card. Also, if the requirements for establishing an identity are complicated, valid transactions may not occur. Individuals can forget or make mistakes in their PINs, passwords, or other necessary information.

<p> Systems and methods are needed to establish credibility in a safe and easy-to-use personal identity.</p>

<p> Embodiments of the present invention provide methods and systems for establishing credibility in an individual's identity in dealing with a trading entity. Reliability is based on secure biometric data such as captured prints. In one embodiment, an individual uses an identification device at or near a terminal to perform a transaction. For example, the identification device can be coupled to the terminal by a wireless or wired link. The terminal may be associated with an identity service provider and / or a trading entity over the network. Thus, according to the methods and systems of the present invention, the credibility of an identity can be easily and cost-effectively established. Remote transactions between an individual and the entity that trades can be easily and easily performed in a manner that is well suited for a wide range of consumer applications with a high degree of reliability in the individual's identity. In establishing such credibility in an identity, the presence of authorized or valid system elements, namely identifying devices, terminals, and / or identity service providers, also presents public / private keys, digital signatures and /. Or verified using a certificate.</p><p> In one embodiment, the sample print data and the reference print data are transmitted from the identification device to the terminal. It also uses the Identity Service Provider to perform triple extraction and matching operations. Methods for establishing credibility in an individual's identity in dealing with a trading entity include the steps to detect an individual's sample print on an identification device, the individual's associated identity data, and the individual's associated reference print. And includes a step of generating a print document containing the detected sample prints and a step of sending the generated print document to the terminal. On the terminal, the method involves transferring the printed document to an identity service provider. The method further determines the steps of retrieving the personally associated database print from the database, the steps of extracting the detail data from the reference print, sample print, and database print, and the score indicating the matching criteria for the extracted detail data. Includes steps to determine if an individual's identity is trusted based on the score. Thus, a transaction between an individual and a trading entity can proceed if the individual's identity is determined to be trusted.</p><p> According to one feature, the generation step involves attaching a first digital signature to the printed document. The first digital signature contains at least identity data encrypted with a personal private key associated with the individual. In one embodiment, the personal private key is assigned by a certification authority. According to another feature, the method is to retrieve the private public key associated with the personal private key from the database based on the identity data in the printed document, and the first digital attached using the retrieved private public key. The steps to decrypt the signature and verify the decrypted first digital signature to ensure that the individual with access to the personal private key sent the printed document. Thus, if the verification step does not confirm that the individual with access to the personal private key has sent the printed document, then the credibility of the individual's identity is not recognized.</p><p> According to another feature, the reliability determination step involves generating a Boolean confidence value based on the score. A Boolean confidence value indicates whether an individual's identity is trusted or untrusted. Transactions with the trading entity are only allowed to proceed if the Boolean confidence value indicates that the individual's identity is trusted.</p><p> According to another feature, the method further includes the step of creating an identity document and the step of attaching a second digital signature to the identity document. The second digital signature consists of an identity service provider identifier encrypted with the identity service provider personal private key associated with the identity service provider. The method also involves decrypting the attached second digital signature using the public key associated with the identity service provider private key, and verifying the decrypted second digital signature to the identity service provider private key. It may include a step of verifying that the identity service provider with access has sent the identity document. Thus, if the verification step does not verify that the identity service provider who has access to the identity service provider's private key has sent the identity document, then the credibility of the individual's identity is not recognized.</p><p> In another embodiment, the method comprises sending a certificate containing the personal public key associated with the personal private key to the terminal and extracting the personal public key associated with the personal private key from the certificate. Includes a step of decrypting the attached first digital signature using the retrieved personal public key and a step of verifying the decrypted first digital signature. The verification step verifies whether an individual with access to the personal private key has sent the printed document. Thus, if the verification step does not confirm that the individual with access to the personal private key has sent the printed document, then the credibility of the individual's identity is not recognized. By sending the public key in the certificate, the database at the identity service provider does not have to contain the public key information, thus saving the cost and work incurred by the identity service provider.</p><p> In another embodiment, the sample print data and the reference detail data are transmitted from the identification device to the terminal. Since the detail data is usually much smaller than the print image data, this reduces the bandwidth required for the link between the identification device and the terminal compared to sending to two prints. Identity service providers are also used to perform extraction and matching operations. Only captured sample prints need to be extracted, but triple matching of fine data can be performed.</p><p> In another embodiment, the extraction is performed on the identification device. Sample and reference detail data are transmitted from the identification device to the terminal. Since the detail data is usually much smaller than the print image data, this reduces the bandwidth required for the link between the identification device and the terminal compared to sending to one or two prints. Identity service providers are also used to perform triple matching operations.</p><p> In yet another embodiment, extraction and matching are performed on the identification device. The identity document is sent from the identification device to the terminal. No identity service provider is required. In yet another embodiment, extraction and / or matching is performed at the terminal. No identity service provider is required.</p><p> In another embodiment, a system is provided for establishing credibility in an individual's identity in dealing with a trading entity. In these embodiments, the system includes an identification device, a terminal, and / or an identity service provider. The identification device produces a print document containing sample data and reference data. The terminal is communicatively coupled to the identification device. The terminal facilitates or enables trading when reliability is established based on sample and reference data. In one embodiment, the identity service provider performs at least one of the extraction and matching operations on the sample data and the reference data. The identification device can be, but is not limited to, a handheld, wireless or plug-in personal identification device.</p><p> Further embodiments, features, and advantages of the present invention and the structures and operations of the various embodiments of the present invention are described below with reference to the accompanying drawings.</p><p> The accompanying drawings that are incorporated into this description and are part of this specification describe the invention, and together with the description, explain the principles of the invention, and those skilled in the art can make and use the invention. Used to make it possible.</p>

The present invention is described herein with reference to the accompanying drawings. In the drawings, the same reference numerals indicate elements that are the same or functionally similar. In addition, the leftmost digit (s) of the reference code identifies the drawing in which the reference code first appears.

(Detailed description of the invention) (I. Overview of the invention) The present invention provides methods and systems for establishing credibility in identifying trading entities and trading individuals. The present invention may be used with a plurality of different types of remote trading or trading entities. For example, purchasing, renting, or licensing a product or service, or data with a trading entity such as a company, government, hospital, university, trader, vendor, nonprofit, educational institution, or other type of entity. Includes, but is not limited to, transactions for exchange.

The present invention generally relates to identification devices and their applications. In a preferred embodiment, the present invention is an identification device comprising an inexpensive piezoelectric sensor element for acquiring biometric data or information, such as for printing, and using the acquired information to confirm and / or verify the identification of an individual. Regarding. Any other known type of sensor (such as a capacitive sensor) can be used. The print can be any type of print, including, but not limited to, prints of one or more fingers in whole or in whole, palms, toes, legs, hands, and the like. The print can also be a roll print, a flat print, or a slap print. The term "print data" or "print information" refers to digital data (eg, bitmaps, or other types of files or data structures) that represent an image of a print.

(II. Wireless Transceiver Biometric Device) FIG. 1 shows wireless transceiver biometric data according to an embodiment of the present invention. The device 100 is intended to be used by the general public, for example, as an electronic signature device. The device 100 has a sensor 102 that acquires biometric data (eg, print data). In the same embodiment, the sensor 102 can be a piezoelectric ceramic sensor or a piezoelectric thin film sensor. The device 100 may further have three indicator lights 104 to convey information to the user. The key ring 106 can be attached to the device 100. In the same embodiment, the wireless transceiver biometric device 100 comprises a BLUETOOTH wireless transceiver biometric device as described below with respect to FIG.

FIG. 2 shows a more detailed view of the wireless transceiver biometric device 100 according to an embodiment of the present invention. Device 100 has an antenna 202 that can be used to send information to or receive information from other devices. The sensor 102 is powered by the battery 204. In some embodiments, the device 100 may be made to be compatible with BLUETOOTH wireless technology, as described above. Various uses of the device 100 will be described later.

FIG. 3 is a schematic diagram of the wireless transceiver biometric device 100 according to the embodiment of the present invention. The identification device 100 includes a piezoelectric sensor 310, a sensor input signal generator 320, a sensor output signal processor 330, and a memory 340. The input signal generated by the input signal generator 320 is coupled to the sensor 310 by two multiplexer 350s. The output signal of the sensor 310 is similarly coupled to the output signal processor 330 by two multiplexers 350. In some embodiments, the sensor 310 can be an array of piezoelectric ceramic elements. In some embodiments, the sensor 310 may comprise an array of single crystal ceramic elements that are chemically inert and unacceptable to moist and other atmospheric conditions. Single crystal ceramics can be manufactured to have certain desired physical, chemical, and / or piezoelectric properties. In other embodiments, the sensor 310 may include a piezoelectric membrane, such as a polarizable fluoropolymer membrane such as a polyvinylidene fluoride (PVDF) membrane, or a copolymer thereof).

More detailed information about the elements and functions of wireless transceiver biometric devices can be found in Provisional Patent Application No. 60 / 330,794, which is incorporated herein by reference.

FIG. 4 shows the identification device 400 according to the embodiment of the present invention. The device 400 includes an input signal generator 320, a sensor array 310, an output signal processor 330, a memory controller 460, and a memory 470. The sensor array 310 is coupled to the input signal generator 320 and the output signal processor 330 by a multiplexer 350. The controller 430 controls the operation of the multiplexer 350. The operation of the identification device 400 will be further described later.

In some embodiments, the input signal generator 320 comprises an input signal generator or oscillator 404, a variable amplifier 406, and a switch 408. In certain embodiments, the oscillator 404 produces a 20 MHz signal that is amplified to a low or high voltage (eg, about 4 or 8 volts) by the variable amplifier 406, depending on the mode in which the device 400 operates. Switch 408 is used to provide either no input signal, pulse input signal, or continuous wave input signal. The switch 408 is controlled to generate the various types of input signals described herein in a manner known to those of skill in the art. The input signal generated by the input signal generator 320 is supplied to the sensor array 310, the controller 430, and the output signal processor 330 via the multiplexer 350. In certain embodiments, the sensor array 310 is a rectangular element piezoelectric ceramic designed to operate with a 200 MHz input signal.

The output signal processor 330 includes various biometric detection devices including an impedance detector 442, a voltage detector 444, a travel detector 446 signal time, and a Doppler shift detector 448. Only one detector 442, 444, 446, or 448 usually functions during a period of time. Therefore, switch 450 is used to couple functional detectors 442, 444, 446 or 448 to memory 340 and multiplexer 350. Further descriptions of the operation of these detectors are found in US Provisional Patent Application No. 60 / 330,794, which is incorporated herein by reference.

(III. Illustrative application) (A. Overview of the application) In some embodiments, one wireless transceiver biometric device 100 or 400 (eg, BLUETOOTH device 500 with a piezoelectric ceramic sensor, as described above) may communicate wirelessly with different types of devices (eg, as described above). Computer mouse, physical access control unit, phone, palm device, set-top box, computer, ATM machine, keyboard, lock, ignition, etc.), providing additional biometric-based security, so that only authenticated persons can each. Devices can be operated or the desired access or authentication can be obtained. For example, a wireless transceiver biometric device 100 or 400 (eg, a BLUETOOTH device 500 with a piezoelectric ceramic sensor) may communicate with the phone via a piconet to provide additional security, whereby only an authenticated person can call. Can be operated. Similarly, wireless transceiver biometric device 100 or 400, a remote control Device communicates with chair, may enhance a set top box, a television, recorder, player or other security related to device authentication use.

In other embodiments, the wireless transceiver biometric device 100 or 400 (eg, the BLUETOOTH device 500 with a piezoelectric ceramic sensor) can be incorporated into any type of device, where additional biometric security is desired. For example, a wireless transceiver biometric device 100 or 400 may be incorporated into a telephone (not shown) to provide additional security so that only an authenticated person can operate the telephone. Similarly, the wireless transceiver biometric device 100 or 400 is configured within a remote control device (not shown) to enhance security for authenticated use of set-top boxes, televisions, recorders, players, or other devices. Can be.

In yet another embodiment, the device 100 or 400 is used for building access control, law enforcement, electronic commerce, financial transaction security, employee attendance tracking, legal records, personal records, and / or medical records. It can be used for access control, transportation security, email signing, credit and ATM card usage control, file security, computer network security, alarm control, and personal identification, recognition and authentication.

In yet another embodiment, the wireless transceiver biometric device 100 or 400 is a low cost, ubiquitous device that identifies and records a person through both printed images and biological features such as blood flow. .. Information is transmitted to others involved in the transaction via the Bluetooth wireless network by other devices within the Bluetooth network. Other devices in the Bluetooth network are controllers, processors or computers (eg palm devices, PDAs, laptops, desktops, servers, etc.), set-top boxes, cell phones, landline phones, and / or vehicles (eg cars). And so on. Wireless transceiver biometric device 100 or 400 is a feature that allows physical access and alarm control, ignition control, computer and network access control, email signatures, credit card transactions, cell phone identification, airline transactions, financial registration transactions and more. Is sent via Bluetooth Spiconet.

In yet another embodiment, the wireless transceiver biometric device 100 or 400 may include piezoelectric ceramic sensors used in applications within many market segments. Many market segments include, but are not limited to, markets such as finance, physical access control, automotive, telecommunications, computers, law and order, healthcare, immigration, and welfare. For example, in one financial market segment application, the wireless transceiver biometric device 100 or 400 is used to control physical access to bank employees, authenticate cardholders, and secure transaction authorization. As another embodiment, in one physical access control market segment application, the wireless transceiver biometric device 100 or 400 is used for vehicle access and theft control, garage doors, home access, and home security system activation. Can be used. As a further embodiment, in one automotive market segment application, the wireless transceiver biometric device 100 or 400 can be used as an access and ignition control device. As a further embodiment, in one computer market segment application, the wireless transceiver biometric device 100 or 400 may interact in a biometric device for network access control.

In yet another embodiment, in one telecommunications market segment application, the wireless transceiver biometric device 100 or 400 may be incorporated into a telephone. The radiotelephone or landline telephone incorporates at least a sensor array according to embodiments of the present invention. The sensor array is a piezoelectric ceramic sensor array, a piezoelectric thin film sensor array, or the like. Communication and digital signal processor (DSP) functions can be performed by other components within the telephone. In other embodiments, Bluetooth is incorporated into both mobile and landline phones for short-range communications. The telephone is therefore a flexible portal used by consumers to claim biometric permission and / or identification according to embodiments of the present invention.

These are just a few of the many applications of the device 100 or 400, as well as the entire invention. Further applications of the device 100 or 400 and the invention will become apparent to those skilled in the art by reading the description of the invention herein.

(B. Application to personal area network FIG. 5A shows a wireless transceiver biometric device 500 according to an embodiment of the present invention. As used herein, embodiments of the present invention can interact with other devices as part of a personal area network. The device 500 includes a biometric device (called an identification device) similar to the device 400. The identification device includes a DSP chip 502, a Bluetooth chip 504, a display (which can be similar to 104), and a battery 206. The identification device may have a piezoelectric ceramic sensor array 310 and four multiplexers 350 according to embodiments of the present invention. The identification device is connected to DSP502. The DSP502 controls the identification device and stores biometric data. The DSP 502 is further connected to the Bluetooth chip 504 to send and receive data. The display is used to communicate information to the user of device 500. The device 500 is powered by battery 206.

As is known to those skilled in the art, Bluetooth is an agreement to oversee the protocols and hardware of short-range wireless communication technologies. The present invention is not limited to performing only Bluetooth technology. Other wireless protocols and hardware may also be used. As described above, embodiments of the present invention can interact with other devices as part of a personal area network. The personal identification device of the present invention may be implemented to communicate with other devices using any known wireless communication system or protocol such as Bluetooth and / or IEEE 802.11, and / or a wired or plug-in connection. ..

Further referring to Figure 5A, the device 500 allows an individual to communicate with a compatible device within 30 feet of the device 500. The device 500 may be connected to, for example, a telephone, mobile phone, personal computer, printer, gas pump, cash register, ATM, door lock, automobile, set-top box, etc. (none of which are shown). Device 500 can supply standard secure identification or authorization tokens to any device, or any process or transaction that requires or requires such tokens. This is because the device 500 can be connected to any compatible device in a personal area network or piconet to exchange information or data.

(C. Electronic sales and / or application to trading) FIG. 5B shows how a wireless transceiver biomeasuring device according to an embodiment of the present invention (eg, devices 100, 400 and / or 500) is used to provide security and / or complete various transactions. The transactions illustrated are not exhaustive and include alarm control, vehicle access and ignition control, network security, file security, email signatures, credit and ATM cards, cash registers, long-distance and WWW purchases, mobile phones, boarding passes and seats. Includes designation, baggage collection, medical records, legal records, financial records, attendance records, access control, etc.

The wireless transceiver biometric device described above can be used in many applications. In order to effectively use a device enabled by biometric authentication that incorporates the function of an identification device, for example, the above-mentioned radio transceiver biometric device, a method of configuring a device enabled by biometric authentication is required. .. These methods must be cost-effective and do not compromise the inherent security integrity when using the unique properties associated with the biometric information used.

(IV. Establishing identity credibility in transactions FIG. 6A is a diagram illustrating an embodiment that establishes the credibility of an identity in a transaction according to the present invention. User 601 wants to make a remote transaction with trading entity 610. As shown in Figure 6A, identification device 602, terminal 605 and / or identification service provider (IDSP) 608 are provided to establish the authenticity of the identity of user 601. The individual 601 uses the identification device 602 at or near the terminal 605. For example, the identification device 602 can communicate with the terminal 605 via the link 603. Link 603 can be any type of communication link and can be, but is not limited to, a wireless link, or a wired link via a plug-in or other type of connection. Terminal 605 communicates with trading entity 610 over network 606. IDSP608 may also be connected to terminal 605 via network 606. Network 606 can be any type of network or combination of networks, including but not limited to the Internet, local area networks, piconets or other types of networks.

FIG. 6B is a diagram showing an identification device 602, a terminal 605, and an identity service provider 608 according to an embodiment of the present invention. The identification device 602 includes a controller 620, a sensor 622, a memory 624, a document generator 626, and a communication interface 628. The controller 620 controls and manages the operation of the identification device 602. The sensor 622 captures an image of the print placed on the identification device 602 by the individual 601. In one preferred embodiment, the sensor 602 is a piezoelectric ceramic sensor as described above. The present invention that establishes reliability is not limited to this, and other types of print sensors are also used. Other types of print sensors include, but are not limited to, ultrasonic sensors, piezoelectric thin film sensors, electrostatic sensors, and optical sensors. Memory 624 can be any type of memory. Memory 624 specifically stores sample print data, reference print data, identity data, personal private key, sample detail data, and / or reference detail data. Depending on the particular application of the invention, different combinations of all or part of these data may be stored. Other examples of different types of data stored in the identification device 602 are described below with reference to FIGS. 6A and 7-13. The identification device 602 may further include all or part of the components described above in connection with the devices 100, 400 and 500. In one embodiment not intended to limit the invention, the identification device 602 can be a handheld wireless print detection device as described above in connection with devices 100, 400 and 500.

The document generator 626 generates a print document or an identity document. The content of a printed or identity document can vary and has specific applications of the present invention.

Examples of different documents are described below with respect to FIGS. 6A and 7-13.

The communication interface (IC) 628 can be any kind of communication interface for communicating with the terminal 605 via link 603.

Terminal 605 includes terminal module 630, user interface (UI) 632, communication interface (CI) 634, memory 636, and network interface (NI) 638. The terminal module 630 controls and manages the operation of the terminal 605. The operation of the terminal 605 and the terminal module 630 according to the embodiment of the present invention will be further described with reference to FIGS. 6A and 7-13. The user interface (UI) 632 provides an interface (eg, keyboard, touch screen, display, mouse, etc.) between user 601 and terminal 605. The communication interface (CI) 634 can be any type of communication interface for communicating with the identification device 602 via link 603. In one feature, CI628 and CI634 are via link 603, eg Secure Socket Layer. Supports secure communications such as (SSL) or other types of secure communications. Memory 636 can be any type of memory. The network interface (NI) 638 can be any type of network interface that allows terminal 605 to communicate over the network.

Identity service provider IDSP608 includes IDSP module 640, memory 642, network interface 644, and database 648. The IDSP module 640 controls and manages the operation of the IDSP608. The operation of IDSP 608 and ID SP 640 in the embodiments of the present invention will be further described with reference to FIGS. 6A and 7-13. Memory 642 can be any type of memory. The network interface (NI) 644 can be any type of network interface that allows the IDSP608 to communicate over the network. Database 648 can be any type of database.

As shown in FIG. 6B, the extraction module (E) 660 may be provided to either the identification device 602, the terminal 605, or the IDSP 608. As is well known in fingerprint analysis, any type of extraction algorithm can be used to extract detailed data from print data. Similarly, the collation extraction module (M) 660 may be provided to either the identification device 602, the terminal 605, or the IDSP 608. As is well known in fingerprint analysis, any type of collation algorithm can be used for collation detail data. Both the extraction module 660 and the collation module 670 are dotted to show that their positions can vary in different embodiments of the invention, as further described below with respect to FIGS. 6 and 7-13. Shown.

The present invention provides different methods and systems for establishing credibility for an individual 601's identity. First, a different method and system outline will be described in Cases I-V with respect to FIG. 6A. Each of Cases I through V will then be described in more detail with respect to FIGS. 7 to 13. For convenience, the methods of the invention are described with reference to identification device 602, terminal 605, or IDSP608, but these methods are not necessarily intended to be limited to a particular structure.

In Case I, the sample print data and the reference print data are sent from the identification device 602 to the terminal 605 via the link 603. The identification device 602 includes a print sensor and a print document generator. The print document generator produces print document 604. Case I print document 604 includes identity data, sample prints, and reference print data. The identity data is signed with a personal private key and attached to printed document 604. Terminal 605 transfers the print document 604 to IDSP608. IDSP608 verifies the signed printed document, performs three extraction operations, three matching operations, and manages the database. The three extraction operations are performed on sample print data and reference print data from the signed print document, as well as database print data obtained from the database (not shown). IDSP608 returns a Boolean identity trust value to terminal 605. Terminal 605 provides reliable established identity identification based on the output of IDSP608. Terminal 605 facilitates or enables transactions between user 601 and entity 610 that trades when reliability is established. The methods and systems for establishing reliability according to Case I are described in more detail below with respect to FIG.

In a further embodiment, as shown in FIG. 6, in Case IIA, sample print data and reference detail data are sent from the identification device 602 to the terminal 605. The identification device 602 includes a print sensor and a print document generator. The print document generator produces a print document 604. Print document 604 includes identity data, sample print data, and reference detail data. The identity data is signed with the personal private key and attached to printed document 604. Terminal 605 forwards print document 604 to IDSP608. IDSP608 verifies the signed print document, performs one extraction operation on the sample print data, and performs three matching operations on the sample item, reference item, and database item data. IDSP608 also includes database management. As in Case I, a Boolean identity trust value indicating whether trust has been established for the identity of user 601'is then sent to terminal 605. When the reliability is established, the terminal 605 generates a reliability-established identity indication, facilitating the transaction between the user 601 and the doing entity 610. Methods and systems according to embodiments of the invention, including Case IIA, are described in more detail below with respect to FIG.

Case IIB is similar to Case IIA, except that the functionality of Identity Service Provider 608 is integrated into Terminal 605. As a result, terminal 605 performs extraction and matching operations. Terminal 605 further performs a step of showing a credible established identity and a step of facilitating a transaction between user 601 and entity 610. An exemplary embodiment of terminal 605 that integrates the functionality of IDSP608 is further described below with reference to FIGS. 12 and 13.

In Case III, the extraction is performed on the identification device 602. The identification device 602 includes a print sensor, a print document generator and a local extraction module. The print document generator generates a print document 604 containing identity data, sample detail data, and reference detail data. Printed document 604 is signed with a personal private key. At least the identity data is attached as a digital signature encrypted with a personal private key. Terminal 605 forwards print document 604 to IDSP608. IDSP608 validates the signed printed document and performs three validation and database management operations. Since no extraction is done, the work of IDSP608 is reduced. IDSP608 returns a Boolean identity trust value to terminal 605. Terminal 605 then provides a trusted identity indication that facilitates transactions between user 601 and entity 610. Aspects of Case III are further described with respect to FIG. As mentioned above for Case IIB, in Case III, terminal 605 can also integrate the functionality of IDSP608. An example of terminal behavior that integrates the IDSP608 three-time collation and database management behavior is illustrated below with reference to FIG.

In Case IV, Identity Service Provider 608 is omitted. The identification device 602 includes a print sensor and an identity document generator to perform extraction and matching operations. The Identity Document Generator generates Identity Document 604. This identity document 604 contains identity data. Like printed documents, identity documents can be signed with a personal private key. For example, a digital signature can be attached to a document consisting of identity data encrypted with a personal private key. The terminal 605 then receives the identity document and generates a trust-established identity indication when the identity data indicates that the trust has been established. Terminal 605 then validates the signed document, facilitating transactions between user 601 and entity 610. Embodiments of Case IV are further described below with respect to FIG.

In Case V, Identity Service Provider 608 is omitted. The extraction and matching operations are performed on terminal 605. The identification device 602 includes a print sensor and a print document generator. The print document generator generates a print document 604 containing identity data, sample print data, and reference print data. As in other cases, the printed document 604 can be signed with a personal private key. For example, a digital signature consisting of identity data encrypted with a personal private key may be attached. Terminal 605 extracts sample item data and reference item data. Alternatively, the print document 604 may include identity data, sample print data, and reference detail data. Therefore, the terminal 605 only needs to extract the sample detail data. Terminal 605 determines whether the collation condition is met. Terminal 605 then generates a credibility-established identity indication when credibility is established, facilitating transactions between user 601 and entity 610. The embodiment of Case V is further described below with respect to FIG.

FIG. 7 shows a system 700 for establishing credibility for the identity of an individual 601 in a transaction with a trading entity 610 according to an embodiment of the present invention. System 700 includes a print document module 720, an identity (ID) terminal module 740, and an identity service provider (IDSP) module 760. The print document module 720 runs as part of the identification device 602. The print document module 720 can be run in software, firmware, and / or hardware.

The print document module 720 receives the detected sample print 702. For example, sample print 702 can be detected when individual 601 places an object with a print, such as an individual's finger, on a sensor element. The print document module 720 produces a print document 725. Print document 725 includes identity data 712, sample print 702, and reference print 716. Identity data 712 can be any type of data related to personal 601 including, but not limited to, name, email address, password / username, social insurance number or any other identifiable information. The personal private key 714 is a private key associated with an individual. In one preferred embodiment, the personal private key 714 is assigned by the certification authority and stored in the identification device 602. Reference print 716 is data representing a print image of an individual 601. In one embodiment, reference print 716 is a high quality bitmap image of the user 601's print. The identity 712, personal private key 714, and reference print 716 are preferably stored in the identification device 602 prior to the current use of the device 602 by the user 601.

Further features sign the printed document 725. In one embodiment, the first digital signature is attached to print document 725. The first digital signature consists of at least identity data 712 encrypted with the personal private key 714. The signed print document 725 is sent to the ID terminal module 740 at terminal 605.

The ID terminal module 740 transfers the print document 725 to the IDSP module 760. IDSP module 760 reads identity 712 and performs lookups in database (dB) 790. Specifically, the identity data 712 is used to look up record 792. Record 792 contains an individual-related database and personal private key associated with identity 712. The IDSP module 760 then retrieves the associated personal private key from record 792 and decrypts the first digital signature. The decrypted first digital signature is verified to confirm that the personal private key 714 and the accessing individual have sent the printed document 725. Thus, the credibility of an individual's identity is acknowledged when the printed document 725 is sent by someone without access to a suitable personal private key.

Once the first digital signature is verified, the set 762 of the three prints is transferred to the extraction module 770. A set of prints 762 includes a sample print 702, a reference print 716 obtained from print document 725, and a database print taken from record 792. The extraction module 770 performs an extraction operation on each print. As is known in fingerprint analysis, detailed data can be obtained using any conventional extraction operation. The extraction module 770 outputs a set of three detail data 772 to the matching module 780. The set of detail data 772 represents the detail data corresponding to each of the sample print 702, the reference print 716, and the database print extracted in the extraction module 770. The match module 780 then analyzes the three sets of details and performs a comparison of the three types of matches. Three types of matches can be performed using any conventional match algorithm and technique. The match module 780 then determines a score 782, which represents the match state of the extracted detail data. For example, the score may indicate whether a match was found or was not found. Alternatively, the score may represent the number of matching fine detail points, or similarities found, or any other type of score reporting. The match module 780 then sends a score 782 to the IDSP module 760. In one example, the IDSP module 760 then determines whether to trust the individual's identity based on the score 782 received from the match module 780. Upon receiving a score representing a highly matching detail, the IDSP module 760 then sets a Boolean confidence value to represent the trusted identity state. If the score 782 represents a poor or inconsistent state, then IDSP module 760 sets a Boolean confidence value to represent an untrusted state.

In one embodiment, the IDSP module 760 sends a trusted identity document 794 to the ID terminal module 740. The trusted ID document 794 contains a Boolean trust value. This Boolean confidence value is also referred to as an identity indication. In one example, the second digital signature is attached to the trusted identity document 794. The second digital signature consists of an identity service provider identifier that is decrypted using the identity service provider (SP) private key 764. The SP private key 764 is associated with the specific identity service provider that hosts the IDSP module 760.

Upon receiving the trusted identity document 794, the identity terminal module 740 decrypts the attached second digital signature using the private key associated with the SP private key 764. In one embodiment, the ID terminal module 740 is provided with a private key that matches the service provider's private key in advance. In another embodiment, the IDSP module 760 requests authentication and then provides the ID terminal module 740 with service provider authentication 742. In one example, SP certification 742 is generated by a certificate authority (CA). SP authentication 742 includes the public key associated with the SP private key 764. The decrypted service provider is then verified to verify that the identity service provider with access to the SP private key 764 sent document 794. Thus, the credibility of an individual's identity is acknowledged when the identity service provider who has access to the identity service provider's private key is verified to be the actual sender of the identity document.

The ID terminal module 740 then outputs a trusted identity display 796. The trusted identity display 796 indicates whether the identity of the individual 601 is trusted or untrusted. For example, the trusted identity display 796 can be a visible or audible display on terminal 605, eg, light or beep. The trusted identity display 796 can also be a register, flag, or semaphore set, which internally indicates whether the identity is trusted. Other displays are possible. When the identity is trusted, the identity terminal module 740 then processes to facilitate or initiate a transaction between the trusted user 601 and the trading entity 610.

A system 800 for establishing trust in the identity of an individual 601 in a transaction with a trading entity 610 according to a further embodiment of the present invention is shown in FIG. System 800 includes a print document module 820, an ID terminal module 840, and an IDSP module 860. In one embodiment, the print document module 820 is provided on the identification device 602. The ID terminal module 840 is provided in the terminal 605. The IDSP module 860 is provided in the IDSP608.

The print document module 820 receives the sample print 802. For example, sample print 802 can be detected in identification device 602 (referred to as being captured). Similar to the print document module 720, the print document 820 produces the print document 825. Print document 825 includes identity data 812, reference detail data 816, and sample print 802. The sample print 802 can be any type of digital data that represents an image of the print of the individual 601. Identity 812 is any type of data associated with an individual. Reference detail 816 is reference detail data associated with the individual 601. In one example, identity data 812, personal private key 814, and reference detail data 816 are stored in identification device 602 prior to user 601's use of device 602. In one implementation, the personal private key 814 is issued by a certification authority.

Print document 825 includes identity data 812, reference detail 816, and sample print 802. According to certain features of the invention, the first digital signature may be attached to the printed document 825. The first digital signature consists of identity data 812 that is decrypted using the personal private key 814. The signed print document 825 is then sent to the ID terminal module 840. The ID terminal module 840 transfers the print document 825 to the IDSP module 860.

The IDSP module 860 validates the document 825 signed with the private key from the database 890, as described above for the IDSP module 760. Once the signature of the signed document 825 is verified, the IDSP module 860 then sends the sample print 862 to the extraction module 870. The extraction module 870 extracts sample detail data 882 from the sample print 862. The sample detail data 882 is transferred to the matching module 880. The IDSP module 860 also transfers the database details obtained from the lookup item 816 from the print document 825 and the lookup of record 892 to the match module 880. The match module 880 then produces a score 882. The IDSP module 860 then generates a trusted identity document 794 signed with the SP private key 764, as described above with respect to FIG. As mentioned above with respect to FIG. 7, when trusted, the identity terminal module 840 validates document 794, outputs a trusted identity display 796, and facilitates transactions with entity 610.

FIG. 9 is a diagram of a system 900 that establishes the reliability of the identification of an individual 601 in a transaction with a trading entity 610 according to a further embodiment of the present invention. System 900 includes a print document module 920, an ID terminal module 940, and an IDSP module 960. The local extraction module 910 is provided with the print document module 920 of the identification device 602. The local extraction module 910 extracts the sample detail 904 from the sample print 902. The print document 920 then produces the print document 925. Printed document 925 includes identification data 912, sample item 904, and reference item 916. According to a further feature, the printed document 925 is signed by a first digital signature. In one embodiment, the first digital signature is made from the identification data 912 attached to the print document 925 and encrypted with the personal private key 914.

The ID terminal module 940 transfers the print document 925 to the IDSP module 960. IDSP module 960 then performs a search of database 990 to find record 992 associated with identity 912. The IDSP module 760 retrieves the public key from record 992 and uses the public key to decrypt the attached first digital signature. The IDSP module 960 then verifies the decrypted first digital signature to ensure that an individual with access to the individual's private key 914 has been sent the printed document 925.

When the first digital signature is verified, the IDSP module 960 transfers a set of detail data consisting of the reference detail 916, the sample detail 904, and the retrieved database detail to the matching module 980. The matching module 980 then generates a score of 982. Based on the score 982, the IDSP module 960 generates a trusted identity document 794 signed by the SP private key 764, as described above for Figure 7. The identity terminal module 940 validates document 794 and outputs trusted identity indication 796, as described above for FIG. 7, facilitating transactions with entity 610, if reliability exists.

FIG. 10 shows a system 1000 that establishes reliability according to a further embodiment of the present invention. In this embodiment, the system 1000 includes a local extraction module 1003, a local collation module 1005, an identity document module 1020, and an ID terminal module 1040. In this embodiment, the IDSP module previously described in FIGS. 7-9 is not required. The local extraction module 1003, the local collation module 1005, and the identity document module 1020 are provided to the identification device 602, respectively. The local extraction module 1003 extracts the details from the sample print 1002. The sample detail data 1004 is then output to the local collation module 1005. The local collation module 1005 determines the score 1006 based on the comparison between the reference item 1016 and the sample item 1004. The local extraction module 1003 can be any type of conventional extraction module known in fingerprint technology. The local collation module 1005 may utilize any conventional collation algorithm or technique well known in fingerprint analysis. The Identity Document Module 1020 generates an Identity Document 1025 based on a score of 1006.

Identity document 1025 contains a Boolean identity credibility value that indicates whether the identity was established as trusted or not as worthy of trust. In certain embodiments, the Boolean identity confidence value is set based on a score of 1006 similar to the determined Boolean confidence value as described in FIG. According to one example, identity document 1025 is a signed identity document. For example, a first digital signature is attached. The first digital signature can be made from the identification data 1012 encrypted by the individual private key 1014.

The identity terminal module 1040 receives the signed identity document 1025. The Identity Document Module 1020 also requests a certificate issued by the certification authority 1044. The certification authority (CA) sends certificate 1018 to Identity Document Module 1020. This certificate is generated by CA1044 and contains the personal public key 1042 associated with the personal private key 1014. The certificate 1018 containing the public key 1042 is sent to the identity terminal module 1040. The ID terminal module 1040 extracts the personal public key 1042 from the certificate 1018. The ID terminal module 1040 then uses the public key 1042 to verify the first digital signature. In particular, the ID terminal module 1040 decrypts the first digital signature with the public key 1042 and verifies that the decrypted first digital signature was generated by an individual who has access to the personal private key 1014. To do. In this way, the ID terminal module 1040 confirms that the individual who actually has access to the personal private key 1014 has been sent the signed identity document 1025. The certification authority 1044 can be any type of conventional certification authority.

The identity terminal module 1040 issues a trusted identity indication 796. The identity terminal module 1040 may then facilitate or initiate a transaction between the individual 601 and the trading entity 610 if reliability is established.

FIG. 11 is a diagram of a system 1100 that establishes personal credibility and identity according to a further embodiment of the present invention. The elements of System 1100 are described above with reference to FIG. 7, except for the purpose of retrieving personal public key information of the database in IDSP module 760, rather than using certificates to store personal public key information of the database. Similar to the elements of the system 700. For example, as shown in FIG. 11, print document module 720 requests that certificate 1112 be issued by certification authority 1110. The print document module 720 sends the issued certificate 1112 containing the personal public key to the ID terminal module 740.

The ID terminal module 740 obtains a personal public key from certificate 1112. The ID terminal module 740 can use the personal public key to authenticate that the signed printed document 725 was sent by an individual who has access to the personal private key 714. In other words, the ID terminal module 740 can verify that the print document 725 was properly signed. IDSP module 760 does not need to obtain a personal public key from database 1190. This simplifies the work of IDSP module 760. Database 1190 is even simpler because record 1192 only needs to contain identity information and database print information that are relevant to each individual.

FIG. 12 is a diagram of a system 1200 that establishes the reliability of the identity of an individual 601 according to a further embodiment of the present invention. On System 1200, the Identity Service Provider module is no longer needed as a separate entity. Rather, the functionality of the identity service provider module is integrated with the functionality of the identity terminal module 1240 at terminal 605. System 1200 includes a print document module 820, an ID terminal module 1240, an extraction module 1270, and a collation module 1280. The print document module 820 is provided by the identification device 602. The ID terminal module 1240, the extraction module 1270, and the collation module 1280 are provided in terminal 605. IDSP608 is not required.

As described above for FIG. 8, the print document module 820 generates a signed print document 825 and sends the signed print document 825 to the ID terminal module 1240. The ID terminal module 1240 verifies that the first digital signature of the signed printed document 825 with the public key was obtained from certificate 1242. Certificate 1242 can be generated by certification body 1244, as is well known. In particular, the print document module 820 requests certificate 1242 from CA1244 using the personal private key 814. CA1244 issues certificate 1242, which contains the associated personal public key in the certificate.

If the first digital signature is verified, the ID terminal module 1240 proceeds to send a sample print 802 from the verified print document 825 to the extraction module 1270. The extraction module 1270 extracts the sample detail data and transfers the sample detail data to the collation module 1280. The identity terminal module 1240 also transfers the reference detail 816 from the verified signed printed document 825 to the collation module 1280. The collation module 1280 generates a trusted identity indication 796 based on the determined collation criteria between the sample item and the reference item 816. The identity terminal module 1240 may facilitate or initiate a transaction between an individual 601 and a trading entity 610 if reliability is established.

FIG. 13 is a diagram of a system 1300 that establishes reliability according to a further embodiment of the present invention. System 1300 includes a local extraction module 910, a print document module 920, an ID terminal module 1340, a collation module 1380, and a database 1390. The local extraction module 910 and the print document module 920 are provided in the identification device 602. The identity terminal module 1340, collation module 1380, and database 1390 are provided at terminal 605. IDSP608 is omitted. The system 1300 is similar to the system 900 described above, except that the functions are integrated in the terminal 605. In particular, the ID terminal module 1340 received the signed printed document 925. The ID terminal module 1340 uses the public key obtained from the certificate to verify the signature attached to the signed printed document 925. If the signature is verified, sample item 904 and reference item 916 from document 925 are transferred to collation module 1380. Similarly, the ID terminal module 1340 uses the identity data in document 925 to perform a search in database 1390 and retrieve record 1392. The collation module 1380 outputs the trusted identity indication 796 based on the collation criteria determined by the collation module 1380. The identity terminal 1340 may facilitate or initiate a transaction between an individual 601 and a trading entity 610 if reliability is established.

In many of the above examples, the Boolean identity confidence value was included in the trusted identity document 794. In another embodiment, the score (eg, 782, 882, 982) is included in document 794 or 1025. The Boolean identity confidence value is determined based on the score of terminal 605 before generating trusted identity indications 796, 1046.

(V. Conclusion) Various embodiments of the present invention have been described above. It should be understood that these embodiments were presented for illustration purposes only, not for limitation. It will be appreciated by those skilled in the art that various modifications of form and detail may be made herein without departing from the intent and scope of the invention described in the appended claims. As such, the breadth and scope of the invention should not be limited by any of the above exemplary embodiments, but only by the appended claims and their equivalents.

<figref num="1">FIG. 1 shows a wireless transceiver biometric device according to an embodiment of the present invention.</figref><figref num="2">FIG. 2 shows a more detailed view of the wireless transceiver biometric device of FIG.</figref><figref num="3">FIG. 3 shows the circuit components of the piezoelectric identification device according to the embodiment of the present invention.</figref><figref num="4">FIG. 4 shows the circuit components of the identification device according to the embodiment of the present invention.</figref><figref num="5A">FIG. 5A shows a wireless transceiver biometric device according to an embodiment of the present invention.</figref><figref num="5B">FIG. 5B illustrates an exemplary environment in which the wireless transceiver biometric device of FIG. 1 is used to complete different types of transactions.</figref><figref num="6A">FIG. 6A is a diagram of an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="6B">FIG. 6B is a diagram of an identification device, a terminal, and an identification service provider according to an embodiment of the present invention.</figref><figref num="7">FIG. 7 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="8">FIG. 8 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="9">FIG. 9 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="10">FIG. 10 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="11">FIG. 11 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="12">FIG. 12 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref><figref num="13">FIG. 13 is a diagram showing an embodiment for establishing the reliability of identification in the transaction according to the present invention.</figref>