US 9,286,455 B2Granted

Real identity authentication

AssigneeMSI Security, Ltd.

InventorJanarthanan Senthurpandi

Life of this patent

Estimating the term…

Loading patent…

Abstract

A real identity biometric authentication device includes a USB thumb drive form factor, with a biometric sensor and designated device processor and stored instructions in firmware which perform authentication in a secure manner, independent of processing and storage resources on a host platform. The device and authentication process require biometric data and are secured against effects of malware or other security risks presented by applications running on the host platform. During an enrollment process, a unique encrypted enrollment biometric token is created using biometric data and uploaded securely to an authentication server. During an authentication process, the encrypted enrollment biometric token is downloaded to the real identity authentication device firmware and is decrypted on the device. The biometric data obtained from the decrypted data and is compared with live, real-time biometric data obtained from the user, for example, by a real-time fingerprint scan. If the real-time biometric data and the enrolled, decrypted biometric data match, the user is authenticated.

Claims15

Dependent claims

A real identity authentication device comprising:

a non-transitory, computer-readable medium for storing data and instructions;
a biometric input device for collecting user biometric information;
a processor for executing the instructions stored in the non-transitory computer-readable medium, the instructions, when executed, causing the processor to perform the steps of:
sending an authentication request to a remote server;
receiving an encrypted server biometric token from the remote server;
decrypting the server biometric token in a controlled firmware environment, isolated from a host platform;
collecting real-time biometric attributes, based on biometric interaction of a user with the biometric input device;
collecting device identity information representing a unique identity of a device being used by the user;
collecting application identity information representing at least one application being executed on the device being used by the user;
comparing information in the server biometric token and the real time biometric attributes;
and
authenticating a user based upon information in the server biometric token matching the information indicative of the real time biometric attributes, wherein the step of authenticating includes creating an encrypted authentication token in response to matching information in the server biometric token to the real time biometric attributes, wherein the encrypted authentication token includes the device identity information and the application identity information;
and sending the encrypted authentication token to the remote server to authenticate the user.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/645,479Filed 4 Oct 2012
Published: US 2014/0101453 A110 Apr 2014
Granted: 15 Mar 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0861
For authentication of entities: using biometrical features, e.g. fingerprint, retina-scan
G06F 21/32
User authentication: using biometric data, e.g. fingerprints, iris scans or voiceprints
H04L 63/0807
For authentication of entities: using tickets, e.g. Kerberos
H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal