Office Action 2: Final Rejection (2023-11-30)
Rejection types: 102 - Lack of Novelty, 103 - Obviousness

CLAIMS:
Amendments to the Claims:

The listing of claims will replace all prior versions, and listings, of claims in the application:

Listing of Claims:

1-19. (cancelled)218

20\. (new) A method comprising:capturing, at a first self-service kiosk, live biometric data of a person, the live biometric data including an image of the person;
extracting, at the first self-service kiosk, reference biometric data from a biometric identification document;
comparing the live biometric data with the reference biometric data extracted from the biometric identification document to verify an identity of the person;
in response to verification of the identity of the person, storing enrollment data associating (i) the live biometric data, (ii) the reference biometric data, and (iii) additional data corresponding to the person;
subsequent to storing the enrollment data, capturing, at a second self- service kiosk, further live biometric data of the person, the further live biometric data including a further image of the person;
in response to capturing the further live biometric data, retrieving the enrollment data;
comparing the further live biometric data with at least a portion of the enrollment data to authenticate the person; and
in response to authenticating the person based on the comparison of the further live biometric data with the enrollment data, granting the person access to a restricted area, at the second self-service kiosk.

21\. (new) The method of claim 20, further comprising, at the first self-service kiosk:
extracting a portion of the additional data, comprising a unique identification number, from the biometric identification document.

22\. (new) The method of claim 20, wherein storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data.

23\. (new) The method of claim 20, wherein storing the enrollment data includes storing the enrollment data in a central database.

24\. (new) The method of claim 20, wherein the authentication process further comprises:storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons;
wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.

25\. (new) The method of claim 20, wherein the live biometric data, the reference biometric data, and the further live biometric data each comprise at least one of:(i) a facial image, (ii) an iris scan, or (iii) a fingerprint image.

26\. (new) The method of claim 20, further comprising:when an authentication requirement for the person ends, deleting the enrollment data.

27\. (new) A system comprising:a first self-service kiosk configured to:
capture live biometric data of a person, the live biometric data including an image of the person;
extracting, at the first self-service kiosk, reference biometric data from a biometric identification document, the reference biometric data for

comparison with the live biometric data extracted from the biometric identification document to verify an identity of the person;
a central database configured, in response to verification of the identity of the person, to store enrollment data associating (i) the live biometric data, (ii) the reference biometric data, and (iii) additional data corresponding to the person;
a second self-service kiosk configured, subsequent to storage of the enrollment data, to:capture further live biometric data of the person, the further live biometric data including a further image of the person, for comparison with at least a portion of the enrollment data to authenticate the person; and
in response to authentication of the person based on the comparison of the further live biometric data with the enrollment data, grant the person access to a restricted area.

28\. (new) The system of claim 27, wherein the first self-service kiosk is further configured to: extract a portion of the additional data, comprising a unique identification number, from the biometric identification document.

29\. (new) The system of claim 27, wherein the central database is configured to store the enrollment data encrypted with a key generated from at least a portion of the additional data.

30\. (new) The system of claim 27, wherein the central database is further configured to store a plurality of additional sets of enrollment data corresponding to respective additional persons, and wherein the central database is searchable based on the further live biometric data.

31\. (new) The system of claim 27, wherein the live biometric data, the reference biometric data, and the further live biometric data each comprise at least one of:(i) a facial image, (ii) an iris scan, or

(iii) a fingerprint image.

32\. (new) The system of claim 27, wherein the central database is controllable to delete the enrollment data when an authentication requirement for the person ends.

OFFICE ACTION:
DETAILED ACTION
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Claims 20-32 are pending.  Claims 1-19 have been cancelled.
Response to Arguments
Applicant’s arguments filed 11/17/2023 have been fully considered but they are not persuasive.
In light of applicant’s claim amendments, the rejections under 35 USC § 112  are withdrawn.
Applicant’s arguments regarding the rejections of the claims under the prior art have been fully considered.  However, those arguments are rendered moot in light of the new grounds of rejection outlined below, which were necessitated by the applicant's amendment.
Specification
The title of the invention is not descriptive.  A new title is required that is clearly indicative of the invention to which the claims are directed.  Applicant asserts that the title ‘biometric authentication system’ is descriptive.  Examiner disagrees.  The title merely indicates the type of the invention and does not describe the invention that the claims are directed to.
Claim Objections
Claim 24 is objected to because of the following informalities: Claim 24 recites the limitation the central database.  There is insufficient antecedent basis for this limitation in the claim.  Appropriate correction is required.
Claim Rejections - 35 USC § 102
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the rejections under this section made in this Office action:
A person shall be entitled to a patent unless –
(a)(1) the claimed invention was patented, described in a printed publication, or in public use, on sale, or otherwise available to the public before the effective filing date of the claimed invention.
Claims 20-23, 25, 27, 28, 31 are rejected under 35 U.S.C. 102(a)(1) as being anticipated by Bouatou et al. (US Pub. 2016-125179 A1).
Bouatou discloses the following limitations:
20. (new) A method comprising:
capturing, at a first self-service kiosk, live biometric data of a person, the live biometric data including an image of the person (para. 26- When arriving at the check-in desk 6, the traveller 1 shows his/her ticket, his/her biometric passport 2 and places his/her right hand on the fingerprint scanner 10. The check-in officer launches, in a single operation, the acquisitions 11.1, 11.2, 11.3, 11.4 and 11.5 of the traveller's 1 fingerprints with the fingers being respectively placed on the acquisition pads 10.1 to 10.5 of the fingerprint scanner 10.);
extracting, at the first self-service kiosk, reference biometric data from a biometric identification document (para. 26- The biometric passport 2 is, in turn, placed on a specific reader that provides access to information contained in the secured chip 3, specifically the certified records 4 and 5 of the traveller's 1 right hand index and middle finger prints.);
comparing the live biometric data with the reference biometric data extracted from the biometric identification document to verify an identity of the person (para. 26- The acquisitions 11.2 and 11.3 corresponding to the traveller's index and middle fingers prints are then compared with the certified records 4 and 5 contained in the secured chip 3 of the biometric passport 2.);
in response to verification of the identity of the person, storing enrollment data associating (i) the live biometric data, (ii) the reference biometric data, and (iii) additional data corresponding to the person (para. 26-  Upon completion of the comparison, the secured chip 3 transmits a piece of information indicating whether the biometrics characteristics are identical with or different from the certified records 4 and 5. If the acquisitions 11.2 and 11.3 match the records 4 and 5, the traveller 1 is identified as the passport holder and his/her civil status is confirmed. The server 12 then stores in a catalogue 15 of second biometric characteristics, the acquisitions 11.1, 11.4 and 11.5 corresponding to the traveller's 1 thumb, ring finger and little finger prints and then associates therewith a secondary identifier 16, here the traveller's flight number 1 together with his/her seat number on the plane,);
subsequent to storing the enrollment data, capturing, at a second self- service kiosk, further live biometric data of the person, the further live biometric data including a further image of the person (para. 27- When checking in his/her luggage 7, the traveller 1 applies his/her right hand onto a fingerprint scanner, the acquisition pads 10.1, 10.4 and 10.5 of which only are active.);
in response to capturing the further live biometric data, retrieving the enrollment data; comparing the further live biometric data with at least a portion of the enrollment data to authenticate the person (para. 27- The acquisitions of the thumb, ring finger and little finger prints are sent to the server 12 which, after comparison, matches the acquired fingerprints and the acquisitions 11.1, 11.4 and 11.5 saved in the catalogue 15 and returns a message indicating the traveller's 1 secondary identifier 16, i.e. his/her flight number and seat on the plane to the remote display screen 11, to the attention of the security officer in charge of the check-point 7. The security officer then knows that the traveller 1 has regularly checked-in on one of the departing flights and the server 12 records that the traveller 1 has checked in his/her luggage); and
in response to authenticating the person based on the comparison of the further live biometric data with the enrollment data, granting the person access to a restricted area, at the second self-service kiosk. (para. 27- The traveller's 1 identification at the access point 8 to the boarding area takes place in the same manner and the server 1 records that the traveller has crossed the access point 8 to the boarding area. Thus, when checking in at the plane boarding desk 9, the traveller 1 identifies again as per his/her secondary identifier by scanning his/her thumb, his/her ring finger and his/her little finger prints. The server 12 confirms that the person whose thumb, ring finger and little finger prints have just been read is the traveller 1, that he/she actually went through all the check-points prior to the flight and that he/she can therefore enter the plane.)
21. (new) The method of claim 20, further comprising, at the first self-service kiosk: extracting a portion of the additional data, comprising a unique identification number, from the biometric identification document. (para. 30- The scanner 54 reads the data 55 of the area 53. It is connected to a processing unit 56 which queries in a manner known per se, the biometric characteristic data base 57 associating MRZ area data and certified records of biometric characteristics. The processing unit 56 identifies the field 58 of the database 57 containing the information 55 and then uses the certified records 4 and 5 of the traveller's right hand prints of his/her index and middle finger associated with the field 58 to make a comparison with the acquisitions 11.2 and 11.3.)
23. (new) The method of claim 20, wherein storing the enrollment data includes storing the enrollment data in a central database. (paras. 26-27- server 12)
25. (new) The method of claim 20, wherein the live biometric data, the reference biometric data, and the further live biometric data each comprise at least one of:(i) a facial image, (ii) an iris scan, or (iii) a fingerprint image. (para. 12- the biometric characteristics acquired are advantageously selected from the following ones: fingerprint, vein, face, iris, skin texture, peri-ocular venous pattern, skin folds.)
Claim Rejections - 35 USC § 103
The following is a quotation of 35 U.S.C. 103 which forms the basis for all obviousness rejections set forth in this Office action:
A patent for a claimed invention may not be obtained, notwithstanding that the claimed invention is not identically disclosed as set forth in section 102, if the differences between the claimed invention and the prior art are such that the claimed invention as a whole would have been obvious before the effective filing date of the claimed invention to a person having ordinary skill in the art to which the claimed invention pertains. Patentability shall not be negated by the manner in which the invention was made.
Claims 22 and 29 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Gormley et al. (US Pub. 20130305059 A1).
Regarding claim 22, Bouatou does not specifically teach wherein storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data.  However, in the related art of using biometric passports, Gormley teaches storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data. (see paras. 48-50).  Therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention, would have found it obvious to use this teaching of Gormely  with the disclosure of Bouatou as a known way of protecting the enrollment data from an eavesdropper intercepting the data as suggested by Gormley.
Claims 24 and 30 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Hoyos et al. (US Pub. 20080122578 A1)
Regarding claim 24 (new), although Boutaou teaches storing enrollment data for a traveller on an airplane, it does not specifically teach storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  However, in the related art of identifying passengers at various checkpoints, Hoyos teaches storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  (see Fig. 1, para. 9, 20- image database (i.e. central database) storing plurality of biometric templates being made available for authentication) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Hoyos with the disclosure of Boutaou as a known way of using biometrics to authenticate multiple passengers through a secondary security check point such as at a boarding area/gate area.
Claims 26 and 32 are rejected under 35 U.S.C. 103 as being unpatentable over Boutaou and further in view of Fukuda (US Pub. 200226048 A1)
Regarding claim 26 (new), Boutaou does not specifically teach when an authentication requirement for the person ends, deleting the enrollment data. However, this concept of deleting biometric data of a user after the ending of an authentication requirement is known and used in the art of biometric authentication as evidenced by Fukuda (see para. 44, claim 6) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Fukuda with the disclosure of Boutaou as a known way of preventing unauthorized future use of a user’s biometric data.
Regarding claims 27-32, they are rejected as applied to claims 20-22 and 24-26 because a corresponding system would have been necessitated to carry forth the method steps of claims 27-32.  The applied prior art also discloses the corresponding architecture.  (see Figs. 1, 3, 4)
Conclusion
Applicant's amendment necessitated the new ground(s) of rejection presented in this Office action.  Accordingly, THIS ACTION IS MADE FINAL.  See MPEP § 706.07(a).  Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a).
A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the mailing date of this action.  In the event a first reply is filed within TWO MONTHS of the mailing date of this final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened statutory period will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the advisory action.  In no event, however, will the statutory period for reply expire later than SIX MONTHS from the date of this final action.

APPLICANT REBUTTAL: Remarks/Ar
q
uments:
Summary of Claim Amendments
Claims 20 and 27 have been amended to further define the subject matter recited therein. Claims 25 and 31 have been cancelled. No new matter is added by way of these amendments.
Title
The title stands objected to as not being descriptive. The title has been amended to further describe the invention as claimed.
Claim Objections
Claim 24 stands objected to for lacking antecedence for the term "the central database". Claim 24 has been amended to depend on claim 23, which introduces the central database.
Claim Rejections Under 35 USC 102 and 103
Claims 20-23, 25, 27, 28, and 31 stand rejected as being anticipated by Bouatou (US 201 6/01 251 79). Claims 22 and 29 stand rejected as being obvious in view of Bouatou and Gormley (US 2013/0305059). Claims 24 and 30 stand rejected as being obvious in view of Bouatou and Hoyos (US 2008/0122578). Claims 26 and 32 stand rejected as being obvious in view of Bouatou and Fukuda (US 2009/0226048). Applicant submits that the claims as amended are patentable for at least the reasons set out below.
Bouatou does not disclose at least the following limitations of independent claim 20 as amended, or the equivalent limitations of independent claim 27 as amended:
''comparing the facial image with the reference facial image of the
reference biometric data extracted from the biometric identification document
to verify an identity of the person
in response to verification of the identity of the person, storing
enrollment data including the facial image used for comparison with the
reference facial image, and additional data corresponding to the person"
Bouatou discloses a system in which biometric information stored on a document such as a passport, e.g., index and middle fingerprints (see paragraph 0026) is used to initially authenticate the identity of a person, but
is not
stored within the system for subsequent identification. For example, Bouatou states at the end of paragraph 0026:
"... the acquisitions 11.2 and 11.3 of the traveller's 1 index and middle finger
prints are not saved in the server 12."
Instead, Bouatou's system stores
other
fingerprints for use in later authentications, e.g., the thumb, little finger, and ring fingerprints (see para 0027). The stored fingerprints are distinct from those compared with the fingerprints of the biometric identification document. In other words, even substituting a facial image for fingerprints, Bouatou does not compare a captured facial image with a reference facial image from a biometric document, and
then store enrollment data
that includes the same captured facial image. Bouatou, instead, explicitly teaches against storing the same information as used for the initial verification.
Applicant submits that Gormley, Hoyos, and Fukuda also lack the above claim limitations. Further, Bouatou's explicit aim to use distinct biometric information at enrollment than is later used for authentication would lead the skilled person away from incorporating the claimed limitations into Bouatou, even if those limitations were found elsewhere.
The claims are patentable for at least the above reasons. Reconsideration and allowance of all pending claims is respectfully requested.
Conclusion

NEXT OFFICE ACTION: DETAILED ACTION
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Continued Examination Under 37 CFR 1.114
A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 1.17(e), was filed in this application after final rejection.  Since this application is eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 CFR 1.114.  Applicant's submission filed on 2/29/24 has been entered.
Claims 20-24, 26-30, 32 are pending.  Claims 25 and 31 have been cancelled.  Claims 20, 24 and 27 have been amended.
Response to Amendment
Applicant’s amendments to claims 20, 24 and 27 have been considered and are accepted.  The Examiner finds that applicant's amendments do have support in applicant's as-filed disclosure.
Response to Arguments
Applicant’s arguments filed 02/29/2024 have been fully considered but they are not persuasive.
In light of applicant’s amendments, the objections to the title and claims are withdrawn.
Applicant’s arguments regarding the rejections of the claims under the prior art have been fully considered.  However, those arguments are rendered moot in light of the new grounds of rejection outlined below, which were necessitated by the applicant's amendment.
Claim Rejections - 35 USC § 102
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the rejections under this section made in this Office action:
A person shall be entitled to a patent unless –
(a)(1) the claimed invention was patented, described in a printed publication, or in public use, on sale, or otherwise available to the public before the effective filing date of the claimed invention.
Claims 20-21, 23, 27, 28 are rejected under 35 U.S.C. 102(a)(1) as being anticipated  by Bouatou et al. (US Pub. 2016-125179 A1).
Bouatou discloses the following limitations:
20. (currently amended) A method comprising:
capturing, at a first self-service kiosk, live biometric data of a person, the live biometric data including a facial image of the person (para. 26- When arriving at the check-in desk 6, the traveller 1 shows his/her ticket, his/her biometric passport 2 and places his/her right hand on the fingerprint scanner 10. The check-in officer launches, in a single operation, the acquisitions 11.1, 11.2, 11.3, 11.4 and 11.5 of the traveller's 1 fingerprints with the fingers being respectively placed on the acquisition pads 10.1 to 10.5 of the fingerprint scanner 10.; para. 12- biometric characteristics acquired are advantageously selected from the following ones: fingerprint, vein, face, iris, skin texture, peri-ocular venous pattern; note- image of eye = facial image of the person; para. 33- The first biometric characteristic may also match the iris image of an eye and the second biometric characteristic may be the peri-ocular venous pattern of the same eye);
extracting, at the first self-service kiosk, reference biometric data from a biometric identification document, the reference biometric data including a reference facial image (para. 26- The biometric passport 2 is, in turn, placed on a specific reader that provides access to information contained in the secured chip 3, specifically the certified records 4 and 5 of the traveller's 1 right hand index and middle finger prints.);
comparing the facial image with the reference facial image of the reference biometric data extracted from the biometric identification document to verify an identity of the person (para. 26- The acquisitions 11.2 and 11.3 corresponding to the traveller's index and middle fingers prints are then compared with the certified records 4 and 5 contained in the secured chip 3 of the biometric passport 2.; para. 33- The first biometric characteristic may also match the iris image of an eye);
in response to verification of the identity of the person, storing enrollment data associating including (i) the facial image used for comparison with the reference facial image and (ii) additional data corresponding to the person (para. 26-  Upon completion of the comparison, the secured chip 3 transmits a piece of information indicating whether the biometrics characteristics are identical with or different from the certified records 4 and 5. If the acquisitions 11.2 and 11.3 match the records 4 and 5, the traveller 1 is identified as the passport holder and his/her civil status is confirmed. The server 12 then stores in a catalogue 15 of second biometric characteristics, the acquisitions 11.1, 11.4 and 11.5 corresponding to the traveller's 1 thumb, ring finger and little finger prints and then associates therewith a secondary identifier 16, here the traveller's flight number 1 together with his/her seat number on the plane,; para. 33- the second biometric characteristic may be the peri-ocular venous pattern of the same eye);
subsequent to storing the enrollment data, capturing, at a second self- service kiosk, further live biometric data of the person, the further live biometric data including a further facial image of the person (para. 33- the second biometric characteristic may be the peri-ocular venous pattern of the same eye.);
in response to capturing the further live biometric data, retrieving the enrollment data; comparing the further facial image with the facial image of the enrollment data to authenticate the person (para. 27- The acquisitions of the thumb, ring finger and little finger prints are sent to the server 12 which, after comparison, matches the acquired fingerprints and the acquisitions 11.1, 11.4 and 11.5 saved in the catalogue 15 and returns a message indicating the traveller's 1 secondary identifier 16, i.e. his/her flight number and seat on the plane to the remote display screen 11, to the attention of the security officer in charge of the check-point 7. The security officer then knows that the traveller 1 has regularly checked-in on one of the departing flights and the server 12 records that the traveller 1 has checked in his/her luggage; para. 33- the second biometric characteristic may be the peri-ocular venous pattern of the same eye.); and
in response to authenticating the person based on the comparison of the further facial image with the facial image of the enrollment data, granting the person access to a restricted area, at the second self-service kiosk. (para. 27- The traveller's 1 identification at the access point 8 to the boarding area takes place in the same manner and the server 1 records that the traveller has crossed the access point 8 to the boarding area. Thus, when checking in at the plane boarding desk 9, the traveller 1 identifies again as per his/her secondary identifier by scanning his/her thumb, his/her ring finger and his/her little finger prints. The server 12 confirms that the person whose thumb, ring finger and little finger prints have just been read is the traveller 1, that he/she actually went through all the check-points prior to the flight and that he/she can therefore enter the plane.; para. 33- The first biometric characteristic may also match the iris image of an eye and the second biometric characteristic may be the peri-ocular venous pattern of the same eye)
21. (previously presented) The method of claim 20, further comprising, at the first self-service kiosk: extracting a portion of the additional data, comprising a unique identification number, from the biometric identification document. (para. 30- The scanner 54 reads the data 55 of the area 53. It is connected to a processing unit 56 which queries in a manner known per se, the biometric characteristic data base 57 associating MRZ area data and certified records of biometric characteristics. The processing unit 56 identifies the field 58 of the database 57 containing the information 55 and then uses the certified records 4 and 5 of the traveller's right hand prints of his/her index and middle finger associated with the field 58 to make a comparison with the acquisitions 11.2 and 11.3.)
23. (previously presented) The method of claim 20, wherein storing the enrollment data includes storing the enrollment data in a central database. (paras. 26-27- server 12)
Claims 22 and 29 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Gormley et al. (US Pub. 20130305059 A1).
Regarding claim 22, Bouatou does not specifically teach wherein storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data.  However, in the related art of using biometric passports, Gormley teaches storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data. (see paras. 48-50).  Therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention, would have found it obvious to use this teaching of Gormely  with the disclosure of Bouatou as a known way of protecting the enrollment data from an eavesdropper intercepting the data as suggested by Gormley.
Claims 24 and 30 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Hoyos et al. (US Pub. 20080122578 A1)
Regarding claim 24 (currently amended), although Boutaou teaches storing enrollment data for a traveller on an airplane, it does not specifically teach storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  However, in the related art of identifying passengers at various checkpoints, Hoyos teaches storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  (see Fig. 1, para. 9, 20- image database (i.e. central database) storing plurality of biometric templates being made available for authentication) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Hoyos with the disclosure of Boutaou as a known way of using biometrics to authenticate multiple passengers through a secondary security check point such as at a boarding area/gate area.
Claims 26 and 32 are rejected under 35 U.S.C. 103 as being unpatentable over Boutaou and further in view of Fukuda (US Pub. 200226048 A1)
Regarding claim 26 (new), Boutaou does not specifically teach when an authentication requirement for the person ends, deleting the enrollment data. However, this concept of deleting biometric data of a user after the ending of an authentication requirement is known and used in the art of biometric authentication as evidenced by Fukuda (see para. 44, claim 6) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Fukuda with the disclosure of Boutaou as a known way of preventing unauthorized future use of a user’s biometric data.
Regarding claims 27-30, 32 they are rejected as applied to claims 20-22 and 24, 26 because a corresponding system would have been necessitated to carry forth the method steps of claims 27-30, 32.  The applied prior art also discloses the corresponding architecture.  (see Figs. 1, 3, 4)
Conclusion

CITED REFERENCE SUMMARIES: Ref US20160125179A1: Claims:
The invention relates to a method for identifying a person to be identified having a certified data medium linking a primary identifier and a first biometric characteristic of a holder of the data medium, comprising the following steps: acquiring, during a unique operation, the first biometric characteristic on the person to be identified and a second, distinct biometric characteristic; verifying that the person to be identified corresponds to the holder of the data medium by comparing the first acquired biometric characteristic to that of the data medium; storing the second acquired biometric characteristic and associating it with a secondary identifier; during a subsequent identification, acquiring the second biometric characteristic on the person to be identified and comparing it to the second biometric characteristic.
acquiring, during a unique operation, the first biometric characteristic on the person to be identified and a second, distinct biometric characteristic;
verifying that the person to be identified corresponds to the holder of the data medium by comparing the first acquired biometric characteristic to that of the data medium;
storing the second acquired biometric characteristic and associating it with a secondary identifier;
during a subsequent identification, acquiring the second biometric characteristic on the person to be identified and comparing it to the second biometric characteristic.
The method according to claim 1 , wherein the acquired biometric characteristics are selected from the following ones: fingerprint, vein, face, iris, skin texture, peri-ocular venous pattern, skin folds.
The method according to claim 1 , wherein the certified data medium is an identity document comprising an electronic chip.
The method according to claim 3 , wherein the certified medium is a passport.
The method according to claim 1 , wherein the link between the primary identifier of the data medium and the first biometric characteristic is established by an association of a field of data in the certified data medium with a corresponding field of a biometric characteristic database.
Ref US20130305059A1: Claims:
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data; a key construction unit communicatively coupled to a reader configured to read the data from the token; wherein the key construction unit uses the user identity document data read from the token to construct a key for decrypting the user information stored on the storage device.
a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data;
a key construction unit communicatively coupled to a reader configured to read the data from the token;
wherein the key construction unit uses the user identity document data read from the token to construct a key for decrypting the user information stored on the storage device.
A decryption system according to claim 1 wherein the key construction unit derives the key based on one or more of a user identity document number, an expiry date of the user identity document and preferably a user's date of birth.
A decryption system according to claim 1 wherein the or a user manually enters the user identity document data prior to the reader reading the data encoded on the token.
A decryption system according to claim 1 in which the reader is configured to read the user information stored on the storage device.
A decryption system according to claim 1 in which the token further comprises user identification information and in particular in which the reader is further configured to read the user identification information from the token.
A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document.
A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document and further comprising authentication means for authenticating the user depending upon the result of the comparison.
A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token.
A decryption system according to claim 1 in which the token is a boarding pass having the user identity document data encoded in a specific region of the boarding pass.
A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token, wherein the mobile device comprises a near field communication, NFC, chip communicatively coupled with the mobile device for transmitting the token to the reader such as an airport check-in security desk.
A decryption system according to claim 1 in which the key construction unit is configured to construct the key in response to the reader reading the user identity document data encoded in machine readable form on or within the token.
A decryption system according to claim 1 in which the identity document reader is primed to decrypt the user identification information encrypted on or within the storage device in response to the reader reading the user identity document data from the token.
A decryption system according to claim 1 in which the reader is a wireless reading means preferably comprising a near field communication, NFC, reading means configured to communicate with a mobile device for storing the token storage device and further preferably comprising a radio frequency identification, RFID, reading means configured to communicate with the storage device.
A boarding pass for use with the decryption system of claim 1 , the pass comprising: user identity document data associated with a user identity document, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
user identity document data associated with a user identity document, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
A token generating system for generating a boarding pass and the like comprising: a server configured to collect user identity document data from a user and to construct a token such as a boarding pass including the user identity document data encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
a server configured to collect user identity document data from a user and to construct a token such as a boarding pass including the user identity document data encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a reader configured to read data from a token such as a boarding pass and the like, the token including user identity document data encoded in a machine readable form, the reader configured to read the data encoded on the storage device; and a key construction unit configured to derive a key from the user identity document data encoded on or within the token which enables the reader to decrypt the user information stored on the storage device.
a reader configured to read data from a token such as a boarding pass and the like, the token including user identity document data encoded in a machine readable form, the reader configured to read the data encoded on the storage device; and
a key construction unit configured to derive a key from the user identity document data encoded on or within the token which enables the reader to decrypt the user information stored on the storage device.
A decryption system according to claim 16 in which the reader is configured to read the user identity document data from a predetermined region of the token.
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data; a reader configured to read the data from the token wherein the reader uses the user identity document data read from the token to decrypt the user information stored on the storage device.
a reader configured to read the data from the token wherein the reader uses the user identity document data read from the token to decrypt the user information stored on the storage device.
A decryption system according to claim 18 wherein the reader is a portable reader or scanner such as a mobile telephone.
A decryption system according to claim 18 in which the user identity document is a passport and preferably in which the user identity document or passport is pre-stored on a mobile communication device, preferably in a secured manner.
The decryption system according to claim 18 further comprising the step of reading a user identity document biometric facial image using the user identity document data.
The decryption system according to claim 18 further comprising the step of capturing an image of the user with a camera and preferably the step of comparing the captured image with the passport biometric facial image read from the user identity document.
Ref US8604901B2: Claims:
A method for ensuring the provenance of passengers at a transportation facility, comprising: (a) providing a first biometric reading device at a first station, wherein the biometric is capable of one-to-many matching and acquiring a first biometric template; (b) storing in a secure database the first biometric template and associating it with one of: a gate number, a flight number, a security risk, an immigration status or other group and a time, without any associated information that uniquely identifies an individual corresponding to the first biometric template; (c) acquiring a second biometric template of a prospective passenger using a second biometric reading device at a second station; (d) indexing into the secure database based on the one of: the gate number, the flight number, the security risk, the immigration status or other group and the time, without using any associated information that uniquely identifies the prospective passenger corresponding to the second biometric template, to select a set of biometric templates of passengers expected to be at the second station based on the indexing, to forward to a biometric match process at the second station; and (e) determining, by the biometric match process via one-to-many matching without using any associated information that uniquely identifies the prospective passenger, if a match exists between the second biometric template and a biometric template from the set of biometric templates.
(a) providing a first biometric reading device at a first station, wherein the biometric is capable of one-to-many matching and acquiring a first biometric template;
(b) storing in a secure database the first biometric template and associating it with one of:
a gate number, a flight number, a security risk, an immigration status or other group and a time, without any associated information that uniquely identifies an individual corresponding to the first biometric template;
(c) acquiring a second biometric template of a prospective passenger using a second biometric reading device at a second station;
(d) indexing into the secure database based on the one of: the gate number, the flight number, the security risk, the immigration status or other group and the time, without using any associated information that uniquely identifies the prospective passenger corresponding to the second biometric template, to select a set of biometric templates of passengers expected to be at the second station based on the indexing, to forward to a biometric match process at the second station; and
(e) determining, by the biometric match process via one-to-many matching without using any associated information that uniquely identifies the prospective passenger, if a match exists between the second biometric template and a biometric template from the set of biometric templates.
The method of claim 1 , wherein acquiring the first biometric template comprises acquiring a biometric template of an iris.
The method of claim 2 , further comprising acquiring face data at the same time as the iris biometric template.
The method of claim 1 , wherein the set of biometrics is removed from access by the second biometric reading device based on one or more of gate number, flight number, security risk, immigration status, time or other group, and a subsequent set of biometrics with the same or different gate number, flight number, security risk, immigration status, time or other group is made available to the second biometric reading device.
The method of claim 1 , wherein an unauthorized passenger is detected if no match exists between the second biometric template and the set of biometric templates.
The method of claim 1 , wherein if a match exists between the second biometric template and the set of biometric templates, then the matched biometric template in the set of biometric templates is flagged.
The method of claim 1 , wherein acquiring the first biometric template further comprises establishing a confidence level in the identity of the individual, that the individual is actually a person the individual claims to be.
The method of claim 7 , wherein establishing the confidence level in the identity of the individual includes one of: verifying the individual's previous trip history, comparing the individual with his or her photo, and verifying the first biometric template against a biometric template known to have been previously acquired for the individual.
The method of claim 1 , further comprising providing information to users or treating preferred customers differently based on one or more of the gate number, flight number, time or other group, based on the results of the biometric match process.
The method of claim 1 , further comprising reducing storage requirements in the secure database by storing the first biometric template without any associated information that uniquely identifies the individual corresponding to the first biometric template.
The method of claim 1 , further comprising ensuring privacy of passengers within the secure database by storing the first biometric template without any associated information that uniquely identifies the individual corresponding to the first biometric template.
A system for ensuring the provenance of passengers at a transportation facility, the system comprising: a first biometric reading device at a first station, acquiring a first biometric template, wherein the biometric is capable of one-to-many matching; a database, storing the first biometric template, associating the first biometric template with one of: a gate number, a flight number, a security risk, an immigration status or other group and a time, without any associated information that uniquely identifies an individual corresponding to the first biometric template, and selecting a set of biometric templates of passengers expected to be at a second station by indexing into the database based on the one of: the gate number, the flight number, the security risk, the immigration status or other group and the time, without using any associated information that uniquely identifies the prospective passenger corresponding to the second biometric template, to forward to a second station; and a second biometric reading device at the second station, acquiring a second biometric template from a prospective passenger, and determining, via a biometric match process performing one-to-many matching without using any associated information that uniquely identifies the prospective passenger, if a match exists between the second biometric template and a biometric template from the set of biometric templates.
a first biometric reading device at a first station, acquiring a first biometric template, wherein the biometric is capable of one-to-many matching;
a database, storing the first biometric template, associating the first biometric template with one of: a gate number, a flight number, a security risk, an immigration status or other group and a time, without any associated information that uniquely identifies an individual corresponding to the first biometric template, and selecting a set of biometric templates of passengers expected to be at a second station by indexing into the database based on the one of:
the gate number, the flight number, the security risk, the immigration status or other group and the time, without using any associated information that uniquely identifies the prospective passenger corresponding to the second biometric template, to forward to a second station; and
a second biometric reading device at the second station, acquiring a second biometric template from a prospective passenger, and determining, via a biometric match process performing one-to-many matching without using any associated information that uniquely identifies the prospective passenger, if a match exists between the second biometric template and a biometric template from the set of biometric templates.
The system of claim 12 , wherein the first and second biometric templates correspond to the iris.
The system of claim 13 , wherein the first biometric reading device acquires face data at the same time as the first biometric template.
The system of claim 12 , wherein the database forwards a subsequent set of biometrics with the same or different gate number, flight number, security risk, immigration status, time or other group, to replace the selected set forwarded to the second biometric reading device.
The system of claim 12 , wherein the second biometric reading device detects an unauthorized passenger if no match exists between the second biometric template and the forwarded set of biometric templates.
The system of claim 12 , wherein the second biometric reading device flags the matched biometric template in the forwarded set of biometric templates if a match exists between the second biometric template and one within the forwarded set of biometric templates.
The system of claim 12 , wherein the first biometric reading device establishes a confidence level in the identity of the individual, that the individual is actually a person the individual claims to be.
The system of claim 18 , wherein first biometric reading device establishes a confidence level in the identity of the individual by one of: verifying the individual's previous trip history, comparing the individual with his or her photo, and verifying the first biometric template against a biometric template known to have been previously acquired for the individual.
The system
[Truncated to input limit]