Security apparatus and method
AssigneeBritish Telecommunications public limited company
InventorsChristopher Henry Seal, David John McCartney, Maurice Merrick Gifford
Life of this patent
Estimating the term…
Abstract
In a method of using iris recognition to determine whether a person is authorised to pass a security check, the person is first identified by comparing a captured and digitised iris code with iris codes stored in a database of iris codes for authorised persons. Then, the iris code for an identified person is compared with all previously recorded iris codes for that person. If there is an exact match, the identified iris code is deemed irregular since the chances of obtaining an exact match are significantly low. As a result, either further identifying information is requested or access to resources or systems is denied to the person.
Claims16
A method of determining whether a person is authorised to satisfy a security check on the basis of an inconstant digital signature, the method comprising:
- comparing an instant digital signature provided by a person attempting to satisfy the security check with a reference digital signature;
- identifying the person as the person who provided said reference digital signature responsive to said comparison revealing said signatures to be sufficiently similar;
- comparing said instant digital signature also with one or more previous digital signatures provided in previous attempts to satisfy the security check;
- and
- invalidating the identification responsive to said comparison revealing said instant signature to be improbably similar to one or more of the previous signatures.
Apparatus for use in providing a security check, said apparatus comprising:
- input means for receiving a digital signature provided by a user;
- first storage means for storing one or more reference digital signatures and respective associated information items identifying the authorised users who provided the reference signatures;
- second storage means for storing previous digital signatures obtained in previous recognition attempts attributed to the identified authorised user;
- and
- first processing means for accessing the first storage means, comparing a received digital signature with one or more reference digital signatures and, in the event a measure of similarity between the received digital signature and a reference digital signature exceeds a first predetermined threshold of similarity, identifying the user as the originator of the received digital signature,
- second processing means for accessing the second storage area, comparing the received digital signature with previous signatures associated with previous recognition attempts attributed to the identified authorised person and invalidating the identification in the event a second measure of similarity between the received digital signature and a previous digital signature exceeds a second predetermined threshold.
Apparatus for providing a security check, said apparatus including:
- one or more storage media having recorded therein:
- data representing one or more reference signatures provided by respective authorised persons;
- data associated with each reference signature, said data representing one or more previous signatures provided in one or more previous attempts to satisfy said security check;
- and
- processor readable code processable to determine whether a received digital signature was provided by an authorised user, said code comprising:
- received signature comparison code processable to compare an instant digital signature provided by a person attempting to satisfy the security check with a reference digital signature;
- user identification code processable to identify the user as the person who provided said reference digital signature responsive to said comparison revealing said signatures to be sufficiently similar;
- supplemental received signature comparison code processable to compare said instant digital signature and one or more previous digital signatures provided in previous attempts to satisfy the security check;
- and
- identification invalidation code processable to invalidate the identification responsive to said comparison revealing said instant signature to be improbably similar to one or more of the previous signatures.
A program storage device readable by a processing apparatus, said device tangibly embodying a program of instructions executable by the processor to perform method steps for determining whether a received digital signature was provided by an authorised person, said method steps comprising:
- comparing an instant digital signature provided by a person attempting to satisfy the security check with a reference digital signature;
- identifying the person as the person who provided said reference digital signature responsive to said comparison revealing said signatures to be sufficiently similar;
- comparing said instant digital signature also with one or more previous digital signatures provided in previous attempts to satisfy the security check;
- and
- invalidating the identification responsive to said comparison revealing said instant signature to be improbably similar to one or more of the previous signatures.
A method for recognising a party comprising:
- identifying the party by comparing a digital signature from the party with stored digital signatures for a plurality of different parties, where positive identification depends on a derived measure of similarity between the provided digital signature and one of the stored digital signatures exceeding a predetermined threshold of similarity, authenticating an identified party by applying pre-determined criteria to the result of a comparison between the provided digital signature, or data derived therefrom, and stored historic and/or statistical data associated with previous recognition attempts made by the identified party wherein positive authentication is performed by also comparing the provided digital signature with one or more historic digital signatures obtained from one or more previous recognition attempts for the identified party and establishing that the similarity between the provided digital signature and any historic digital signature does not equal or exceed a pre-determined second threshold.
A system for determining whether a person is authorised to satisfy a security check on the basis of an inconstant digital signature, the system comprising:
- means for comparing an instant digital signature provided by a person attempting to satisfy the security check with a reference digital signature;
- means for identifying the person as the person who provided said reference digital signature responsive to said comparison revealing said signatures to be sufficiently similar;
- means for comparing said instant digital signature also with one or more previous digital signatures provided in previous attempts to satisfy the security check;
- and
- means for invalidating the identification responsive to said comparison revealing said instant signature to be improbably similar to one or more of the previous signatures.
Dependencies are inferred from the claim text.