Secure user authentication using biometric information
AssigneeSynaptics Incorporated
InventorsRamesh Kesanupalli, Davit Baghdasaryan, Frank Schwab, Philip Yiu Kwong Chan, Larry Hattery
Life of this patent
Estimating the term…
Loading patent…
AssigneeSynaptics Incorporated
InventorsRamesh Kesanupalli, Davit Baghdasaryan, Frank Schwab, Philip Yiu Kwong Chan, Larry Hattery
Estimating the term…
An apparatus includes a biometric sensor capable of identifying biometric information associated with a user. A storage device coupled to the biometric sensor stores user information. A biometric service is coupled to the biometric sensor and capable of communicating with the biometric sensor. A web browser application having a biometric extension communicates with the biometric sensor via the biometric service. The web browser's biometric extension is capable of communicating with multiple web servers.
An apparatus comprising:
A method comprising:
Non-transitory computer readable storage media storing thereon computer readable instructions that, when executed by a computing device, cause the computing device to perform a method, the method comprising:
An apparatus comprising:
A method comprising:
Non-transitory computer readable storage media storing computer readable instructions that, when executed by a computing device, cause the computing device to perform a method, the method comprising:
Dependencies are inferred from the claim text.
From the US filing history. Foreign family members aren’t listed.
Drawings are temporarily unavailable. Open the PDF at USPTO
Payment architectures: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
Payment protocols; Details thereof: authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and…
Identity check for transactions: biometric identity checks
Information and communication technology [ict] specially adapted for administrative, commercial, financial, managerial
About 5 years 1 month of term left · ends 14 Nov 2031 (estimated)
Typical user authentication systems and procedures use passwords to authenticate the identity of the user. In many instances, Web sites are authenticated using SSL (Secure Sockets Layer) or other protocols. SSL is a protocol for securely transmitting information via the Internet. When using SSL, a Web site is authenticated via its certificate. The user seeking access to the Web site is then authenticated by username and password.
Although passwords are commonly used to authenticate users, passwords are subject to various attacks, such as phishing attacks, social engineering attacks, dictionary attacks and the like. Typically, longer passwords with combinations of letters and numbers provide a higher level of security. However, these longer passwords are more difficult for users to remember. Additionally, passwords provide a single factor of authentication by requiring the user to provide something they know. This factor does not provide any physical authentication of the user's identity. Thus, any person can access the user's Web-based accounts and information if they gain knowledge of the user's password and username.
Another potential threat associated with user passwords is commonly referred to as “Man in the Browser” attack. This type of attack uses a malicious software application (commonly known as “malware”) running in the internet browser application while the user is, for example, logging into a web site, accessing confidential information, or performing a financial transaction. One implementation of this attack obtains access to the user's password as the user provides the password to the internet browser application. Once the user's password is obtained, the malware application can perform a variety of malicious actions associated with the user's account.
FIG. 1 depicts an example system capable of performing biometric user enrollment and authentication.
FIG. 2 depicts another example system capable of performing biometric user enrollment and authentication.
FIG. 3 depicts an example user enrollment process.
Throughout the description, similar reference numbers may be used to identify similar elements.
The systems and methods described herein relate to biometric authentication of users. “Biometrics” and “biometric information” refers to measurable biological characteristics of a user, such as a fingerprint, facial characteristics, eye characteristics, voice characteristics (also referred to as a “voiceprint”) and the like. As discussed herein, biometric information provides an additional level of security when used in systems and procedures related to authentication of a user.
Particular examples discussed herein use fingerprint biometric information to authenticate one or more users. In other embodiments, any type of biometric information may be used instead of fingerprint information. Additionally, a particular embodiment may utilize multiple types of biometric information (e.g., fingerprints and voiceprints) to authenticate a user. Certain described embodiments refer to “swipe” style fingerprint sensors. However, alternate embodiments may include any type of fingerprint sensor, such as a “placement” sensor. In particular embodiments, the biometric sensor is physically attached (or manufactured into) a client device, such as a computer, cellular phone, and so forth. In other embodiments, the biometric sensor is a portable device that is temporarily coupled to the client device (e.g., a pluggable USB device) for enrollment and/or authentication procedures.