# US 10,375,065 B1 · System and method for tokenless biometric authorization of electronic communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,065 B1 - Document ID: US10375065B1 - Status: Granted - Kind: B1 - Application number: 15/076,906 - Filed: 2016-03-22 - Granted: 2019-08-06 - Earliest claimed: 1994-11-28 - Assignees: Open Invention Network, LLC - Applicants: Open Invention Network LLC - Inventors: Ned Hoffman - Web page: https://patentgrep.com/patent/US10375065B1 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/86: Secure or tamper-resistant housings - G06Q 20/00: Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12) - G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems - G06Q 20/18: involving self-service terminals [SST], vending machines, kiosks or multimedia terminals - G06Q 20/3674: {involving authentication} - G06Q 20/382: {insuring higher security of transaction} - G06Q 20/40145: {Biometric identity checks} - G07C 9/37: using biometric data, e.g. fingerprints, iris scans or voice recognition - G07C 9/38: with central registration - G07F 9/009: {User recognition or proximity detection} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/10: {for controlling access to devices or network resources} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/06: Authentication - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00}) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract This invention is a method and system for tokenless biometric authorization of an electronic communication, using a biometric sample, a master electronic identicator, and a public communications network, wherein the method includes: an electronic communication formation step, wherein at least one communication comprising electronic data is formed; a user registration step, wherein a user electronically submits a registration biometric sample taken directly from the person of the user; a public network data transmittal step, wherein the registration biometric sample is electronically transmitted to a master electronic identicator via a public communications network, said master electronic identicator comprising a computer database which electronically stores all of the registration biometric samples from all of the registered users; a user registration biometric storage step, wherein the registration biometric sample is electronically stored within the master electronic identicator; a bid biometric transmittal step, wherein a bid biometric sample, taken directly from the person of the user, is electronically transmitted to at least one electronic identicator; a user identification step, wherein an electronic identicator compares the bid biometric sample to at least one registration biometric sample previously stored in an electronic identicator, for producing either a successful or failed identification of the user; an electronic communication authorization step, wherein upon a successful identification of the user by an electronic identicator, at least one electronic communication is authorized for execution; wherein an electronic communication is biometrically-authorized without the user having to present any personalized man-made memory tokens such as smartcards, or magnetic stripe cards. ## Claims ### Claim 1 A system, comprising: an Identicator Server and a Clearinghouse Server, the Identicator Server and the Clearinghouse Server communicatively connected to a wireless user device, a Master Identicator Server, and an Enterprise Server, the Identicator Server configured to: store biometric data in a database, receive a biometric sample from the wireless user device, compare the received biometric sample with stored biometric data, determine whether or not the user is an authenticated user based on the comparison, transmit a user identifying code to the Clearinghouse Server based upon a successful identification of the user, and the Clearinghouse Server configured to: receive an identity confirmation of the Enterprise Server from the Master Identicator Server; receive a user identifying code identifying that the user has been successfully identified; and invoke a Universal Access Command of the user based upon receipt of the user identifying code and the Enterprise Server identity confirmation to open a user session. ### Claim 2 (depends on 1) The system of claim 1, wherein the wireless user device is one or more of a cell phone, a personal digital assistant, a desktop personal computer, and a notebook computer. ### Claim 3 (depends on 1) The system of claim 1, wherein the wireless user device is communicatively connected to the system via one or more of a cable network, a wireless cellular network, a wireless digital network, a telephone network, a wide area network, and the Internet. ### Claim 4 (depends on 1) The system of claim 1, wherein the Enterprise Server uses the Universal Access Command to generate one or more one-time usage Random Key Numbers. ### Claim 5 (depends on 4) The system of claim 4, wherein the Enterprise Server forwards the one or more one-time Random Key Numbers to one or more third-party locations. ### Claim 6 (depends on 4) The system of claim 4, wherein the one or more one-time Random Key Numbers are stored until the user session terminates. ### Claim 7 (depends on 4) The system of claim 4, wherein the one or more one-time Random Key Numbers enable the Enterprise Server to act on the user's behalf. ### Claim 8 (depends on 1) The system of claim 1, wherein a biometric sample comprises any of the following: a fingerprint, a facial scan, a retinal image, an iris scan, and a voice print. ### Claim 9 (depends on 1) The system of claim 1, wherein the Universal Access Command enables configuration of the Enterprise Server as a user proxy terminal for the user session to provide the user with one or more of customized electronic communication accessing, processing, and presentation. ### Claim 10 (depends on 1) The system of claim 1, wherein the Clearinghouse Server shares user data with an enterprise operator in accordance with user-customized Rule Modules designated by the user. ### Claim 11 (depends on 10) The system of claim 10, wherein the user-customized Rule Modules specify the accessing, processing, and display of user-customized electronic communications. ### Claim 12 (depends on 10) The system of claim 10, wherein the user-customized Rule Modules designate that all account data and product preferences associated with the Enterprise be grouped and represented to an enterprise operator as a single graphic. ### Claim 13 (depends on 12) The system of claim 12, wherein purchasing patterns, Internet browsing patterns, account payment schedules, and physical access privileges related to the Enterprise are presented in a text and icon screen display to the enterprise operator. ### Claim 14 (depends on 10) The system of claim 10, wherein the user-customized Rule Modules encapsulate data necessary for the Enterprise Server to customize its handling of the user's electronic communications. ### Claim 15 (depends on 10) The system of claim 10, wherein the Rule Modules incorporate data from recent interactions between the user and the Enterprise Server. ### Claim 16 (depends on 1) The system of claim 1, wherein the Enterprise Server is to identify Rule Modules to invoke based on an additional data input received from the wireless user device. ### Claim 17 (depends on 16) The system of claim 16, wherein the additional data input includes one or more of biometric data, keyword data, and location data. ### Claim 18 A system, comprising: at least one master electronic identicator, comprising: i) a computer database containing electronically stored biometric samples from all registered users and identification data from all registered enterprises, ii) a first comparator that electronically compares a received biometric sample with stored biometric samples to determine whether or not the user is an authenticated user based on the comparison, iii) a second comparator that electronically compares received enterprise identification data with stored enterprise identification data to determine whether or not the enterprise is an authenticated enterprise; an electronic communication authorization platform, connected to the master electronic identicator, that authorizes an enterprise to serve as a user proxy by executing at least one electronic communication on behalf of the user upon a successful identification of the user and the enterprise by an electronic identicator; and a rule-module invocation platform that authorizes the enterprise to invoke at least one previously designated user-customized rule-module on behalf of the user upon successful identification of the user and the enterprise, wherein the user-customized rule module includes at least one user-customized pattern data associated with at least one user-customized execution command.