Data processing: database and file management or data structures – Database design – Data structure types
Reexamination Certificate
1998-12-09
2001-01-30
Black, Thomas G. (Department: 2771)
Data processing: database and file management or data structures
Database design
Data structure types
C707S793000, C707S793000
Reexamination Certificate
active
06182076
ABSTRACT:
BACKGROUND OF THE INVENTION
This invention relates to biometric authentication, particularly to systems and methods for biometric authentication of individuals involved in transactions employing the World Wide Web.
Broadly described, the World Wide Web (the “Web”) is a decentralized, electronic database service offering a universe of dynamically connected information, the information being in any of various media and being relatively easily found by and made accessible to individuals exploring (“surfing”) that universe (“Webspace”). More specifically, the Web is a distributed, hypertext system comprising hypermedia documents, Web servers and Web clients. Web clients include software programs commonly known as browsers. Browsers typically reside on an individual's personal computer and, among other things, provide for exploring the Web so as to find and access Web documents.
Web serve s are software programs that support various features, including being compatible with one or more standard protocols, e.g., the HyperText Transport Protocol (“HTTP”), the well-known, native protocol of the Web generally unifying its information. Web servers put hypermedia documents on the Web and otherwise make resources associated with the server available to Web clients. Web servers not only make documents and resources accessible to Web clients, but also direct specific documents to clients and complete transactions responsive to each client's input. Web servers, being decentralized but interconnected, give the Web its distributed characteristic.
Web documents (“pages”) are constructed in conformity with one of various accepted formats or languages, e.g., HyperText Markup Language (“HTML”). The formats support, among other things, the Web's hypermedia and hypertext characteristics. As to the hypermedia characteristic, Web documents can, and generally do, combine content from one or more of the various media including text, graphics, audio and video. As to the hypertext characteristic, Web documents can, and generally do, contain electronic links to related Web documents. Selecting the link causes the browser to (i) connect to a Web server associated with that link, (ii) request the linked document and (iii) if the Web client satisfies the server's security requirements, receive and display the document.
However described, the Web has had rapid acceptance and growth. The Web's growth is reflected by the number of Web servers going into service in a few years ago: in June 1993, 130 public servers; in November 1994, almost 9,000 public servers; in February, 1995, over 27,000 public servers. The number of servers currently is much greater still. The Web's acceptance is reflected by its application across institutions, whether government, corporate, commercial, education, civic or otherwise. Its acceptance and growth positions the Web to transform the way people create, access, and use information which, in turn, positions the Web to transform the institutions themselves.
The security of Web information and transactions has been identified as a significant problem. At the center of the problem are so-called crackers: individuals who seek to access computers, such as Web servers, so as to conduct pranks, vandalism, espionage or other illegitimate activities. Web security responds to these activities and, among other things, strives to maintain the confidentiality and integrity of information, both as resident on servers and as communicated in Web transactions. Increasing the vulnerability to crackers is that the Web is an open system available to anyone in possession of readily available, affordable technology.
One important Web security issue is authentication. While authentication takes various forms, authentication of individuals is particularly desirable. This authentication is directed to verifying that the individual seeking access to and/or through a Web server is in fact who that individual claims to be, and not an impersonator. This authentication relies on verification being performed at or above a predetermined minimum level of confidence. At the same time, authentication is generally an early hurdle that the individual must clear to conduct Web transactions with the server (typically the individual is subject to other security measures mediating access to system information, services and other resources).
The traditional method for authenticating individuals has relied on secret passwords. Password-only authentication has the benefit that it can be implemented entirely in software. However, password-only authentication has a number of disadvantages. First, passwords can be cumbersome. For example, a password's viability is enhanced, among other ways, by increasing its length, by controlling its composition and by its being frequently changed. However, using these techniques to enhance password viability tends to render the password increasingly cumbersome.
Second, passwords can be forgotten, lost, stolen or otherwise compromised. Password's that are written down are readily stolen. Passwords can be inadvertently disclosed to crackers via various ploys, including by crackers observing the password's entry on a keyboard. Passwords can also be illegitimately discovered by, for example, brute-force trial and error. Moreover, passwords can be intercepted as they are transported from the Web client to the desired server. Passwords can also be compromised by a cracker gaining access to a server's file of registered passwords which files generally are maintained to verify submitted passwords.
At least for these reasons, password-only authentication fails to provide adequate security. At the same time, Web-based applications are flooding into areas that can benefit from enhanced security. Examples of such Web-based applications include: commercial transactions (e.g., the purchase and sale of goods), banking transactions (e.g., electronic funds transfer), and medical transactions (e.g., provision of medical records in emergency situations).
Accordingly, a need exists for improved Web-based security measures, and methods to implement such measures. Moreover, a need exists for improved Web-based authentication systems and methods.
SUMMARY OF THE INVENTION
An object of this invention is to provide improved Web-based security measures, and methods to implement such measures and, moreover, to provide improved Web-based authentication systems and methods.
Accordingly to one aspect of the invention, a Web-based authentication system is provided that uses a Web cloud as a communication medium. The system comprises, in an embodiment, at least one Web client station, at least one Web server station and an authentication center. Access of (i.e., to and/or through) the Web server station via the Web cloud is sought by the individual using the Web client station, which access is dependent on authentication of the individual. The Web client station is linked to the Web cloud, and provides selected biometric data representing biometric characteristics of an individual who is using the Web client station. The Web server station is also linked to the Web cloud. The authentication center is linked to at least one of the Web client and Web server stations so as to receive the biometric data provided by the Web client station. The authentication center which has records of biometric data of one or more enrolled individuals, provides for comparison of the provided data with selected records. The comparison is to determine whether the provided data sufficiently matches the selected records as to authenticate.
In another aspect of the invention, a method is provided for Web-based, biometric authentication of individuals who are using a Web client station, the individuals seeking access of (i.e., to and/or through) a Web server station. An embodiment of the method comprises the steps of (i) establishing parameters associated with selected biometric characteristics to be used in authentication; (ii) acquiring, at the Web client station, biometric data in accordance with t
Hoffberg Mark B.
Wong Stephen
Yu Yuan-Pin
Black Thomas G.
Mills John G.
Philips Electronics North America Corporation
Schmitt Michael E.
LandOfFree
Web-based, biometric authetication system and method does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Web-based, biometric authetication system and method, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Web-based, biometric authetication system and method will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2463292