Patent ID: 9037851
Filing Date: 2015-05-19
Classification: G06F,H04L,H04W

Abstract:
1. user authorization system for ubiquitous authorization management, comprising: a public key infrastructure (PKI) certificate issuing server configured to issue a PKI certificate matching at least one biometric signature of a subscriber, wherein the PKI certificate includes at least one coded biometric information that is encoded from a subscriber's biometric information, the subscriber's biometric information includes at least two biometric patterns, one for an intended authorization of the subscriber and another for a forced authorization of the subscriber; a sensing means for recognizing a biometric pattern from a user; a smart card configured to store the at least one biometric signature and the PKI certificate and verify the user by comparing the user's biometric pattern with the at least one biometric signature, wherein the at least one biometric signature contains the subscriber's biometric information encrypted based on the PKI certificate; a service server configured to identify, authenticate and authorize the smart card based on an authorization information derived from the PKI certificate, wherein the authorization information includes the subscriber's coded biometric information; and a terminal, connected to the smart card by way of a wired or a wireless communication, configured to establish a virtual private network (VPN) between the smart card and the service server in response to a tunneling start signal received from the smart card, wherein the smart card is further configured to transmit the tunneling start signal to the terminal if the user's biometric pattern matches with the at least one biometric signature, and to transmit an authorization information derived from the PKI certificate to the service server through the VPN.