Office Action 1: Non-Final Rejection (2023-05-17)
Rejection types: 102 - Lack of Novelty, 103 - Obviousness, 112 - Written Description/Enablement, Double Patenting

CLAIMS:
CLM 18051129 6 2022-10-31 29 CLAIMS Independent
1\. An authentication method comprising a verification process and an authentication process, wherein the verification process and the authentication process are conducted on at least two distinct systems, wherein at least parts of the verification process are conducted on at least one 5 verification device and at least parts of the authentication process are conducted on at least one authentication device, wherein the verification process comprises: capturing first biometric data of a person; extracting second biometric data from a biometric identification document; comparing the first biometric data with corresponding second biometric data from the 10 biometric identification document to obtain a similarity value comparable with a first similarity threshold; and wherein the authentication process comprises: capturing live biometric data of the person; receiving the first biometric data of the person; 15 comparing the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticating the person. Independent
2\. The authentication method of claim 1, wherein the verification process further comprises, in 20 response to the similarity value of the first biometric data compared with the second biometric data exceeding the first similarity threshold: verifying an identity of the person; gathering additional data; certifying the first biometric data and the additional data; and 25 storing the certified first biometric data and the certified additional data. Dependent
3\. The authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person, and wherein, in the verification process, storing the certified first biometric data and the certified additional data comprises storing the certified data on the mobile 30 device of the person, and wherein, in the authentication process, receiving the first biometric data of the person comprises transferring the certified first biometric data from the mobile device of the person to the authentication device. Dependent 30
4\. The authentication method of claim 2, wherein at least one of the verification devices is a self- service terminal, and wherein the verification process, conducted on the self-service terminal, further comprises: 5 obtaining an identification number, wherein the identification number is a unique identification number extracted from the biometric identification document; in response to the similarity value of the first biometric data and the corresponding second biometric data from the biometric identification document exceeding the first similarity threshold: generating a key using the additional data; 10 encrypting the certified first biometric data and the certified additional data with the key generated from the additional data; and storing the encrypted certified first biometric data and the encrypted certified additional data with the identification number in a central database; and wherein, in the authentication process, receiving the first biometric data of the person 15 comprises: capturing an image of an authentication biometric identification document of the person; extracting authentication additional data from the authentication biometric identification document; 20 extracting an authentication identification number from the biometric document; generating a key using the authentication additional data; requesting the stored encrypted certified first biometric data from the central database using the authentication identification number; and decrypting the encrypted certified first biometric data with the key generated from 25 the authentication additional data. Dependent
5\. The authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person, and wherein, in the verification process, the certified first biometric data and the certified additional data are stored on the mobile device of the person, and wherein 30 the verification process, in response to the person announcing their need to being authenticated in the near future, further comprises: obtaining an identification number; and 31storing the certified first biometric data and the certified additional data with the identification number in a central database. Dependent
6\. The authentication method of claim 2, wherein the verification process further comprises: 5 extracting data specific to the verification device from the verification device; generating a key using the data extracted from the verification device; encrypting the certified first biometric data and certified additional data with the key generated from the extracted data; and storing the encrypted certified first biometric data and the certified additional data in a 10 central database; in response to the person announcing their need to being authenticated in the near future, requesting consent to use the encrypted certified first biometric data and the certified additional data; and in response to the consent of the person to use the encrypted certified first biometric data 15 and the certified additional data, decrypting the encrypted certified first biometric data and certified additional data with the key generated from the data extracted from the verification device. Dependent
7\. The authentication method of claim 5, wherein the authentication process further comprises: 20 making a plurality of certified first biometric data items of people to authenticate available from a central database to an authentication device; and wherein receiving the certified first biometric data of the person comprises comparing the plurality of certified first biometric data items with the captured live biometric data of the person and selecting, in response to one of the plurality of certified first biometric data being similar to 25 the live biometric data, the similar certified first biometric data as first biometric data of the person. Dependent
8\. The authentication method of claim 4, wherein the central database is at least one of: secured by a hardware security module, and encrypted. Dependent
30 329. The authentication method of claim 1, wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise at least one of: biometric facial images, iris scans, and fingerprint images. Dependent
5 10. The authentication method of claim 2, wherein the additional data comprises at least one of: data extracted from the biometric document, manually entered data, and data retrieved from a third party. Dependent
11\. The authentication method of claim 1, wherein the first biometric data, the second biometric 10 data from the biometric identification document and the live biometric data comprise vectorized representations of biometric facial images, iris scans, fingerprint images, or a combination thereof. Dependent
12\. The authentication method of claim 1, wherein capturing at least one of the first biometric 15 data, and capturing the live biometric data, comprises taking a photo of at least a part of the person; and wherein extracting the second biometric data from the biometric identification document in the verification process comprises at least one of taking a further photo of the biometric identification document, scanning the biometric identification document, or visually inspecting 20 the biometric identification document. Dependent
13\. The authentication method of claim 1, further comprising, during the authentication process: when a requirement of authentication ends, deleting the received first biometric data of the person. Dependent 25 Independent
14\. The authentication method of claim 2, wherein authenticating the person comprises at least one of: granting access to an area, transferring the certified additional data to the authentication device, and decrypting the certified additional data. Dependent
30 15. The authentication method of claim 1, wherein the verification process further comprises generating a user account associated with a unique user ID for the person, wherein the user account is secured by a user name and a PIN. Dependent 33
16\. An automatic authentication system for authenticating a person, the system comprising: at least one verification device; and at least one authentication device; 5 wherein the at least one verification device is remote from the at least one authentication device; wherein the at least one verification device and the at least one authentication device are configured to communicate via a network; and wherein the at least one verification device is configured to: capture first biometric data of a person; 10 extract second biometric data from a biometric identification document; and compare the first biometric data with corresponding second biometric data from the biometric identification document to obtain a similarity value comparable with a first similarity threshold; and wherein the at least one authentication device is configured to: 15 capture live biometric data of the person; receive the first biometric data of the person; compare the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticate the person. Independent 20 Independent
17\. The automatic authentication system of claim 16 further comprising a database system, wherein the database system is remote from the at least one verification device and the at least one authentication device; wherein the database system configured to communicate with the verification device and the authentication device via the network; and wherein the database 25 system is configured to: receive data from the at least one verification device; and make data available to the at least one authentication device. Dependent
18\. The automatic authentication system of claim 16 further configured, in response to the 30 similarity value of the first biometric data compared with the second biometric data exceeding the first similarity threshold, to: verify an identity of the person; 34gather additional data; certify the first biometric data and the additional data; and store the certified first biometric data and the certified additional data. Dependent
5 19. A non-transitory computer-readable medium storing program code instructions executable by an automatic authentication system including at least one verification device and at least one authentication device remote from the at least one verification device, to: at the verification device: capture first biometric data of a person; 10 extract second biometric data from a biometric identification document; and compare the first biometric data with corresponding second biometric data from the biometric identification document to obtain a similarity value comparable with a first similarity threshold; and at the authentication device: 15 capture live biometric data of the person; receive the first biometric data of the person; compare the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticate the person. Independent

OFFICE ACTION:
DETAILED ACTION
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Double Patenting
The nonstatutory double patenting rejection is based on a judicially created doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or improper timewise extension of the “right to exclude” granted by a patent and to prevent possible harassment by multiple assignees. A nonstatutory double patenting rejection is appropriate where the conflicting claims are not identical, but at least one examined application claim is not patentably distinct from the reference claim(s) because the examined application claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969).
A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may be used to overcome an actual or provisional rejection based on nonstatutory double patenting provided the reference application or patent either is shown to be commonly owned with the examined application, or claims an invention made as a result of activities undertaken within the scope of a joint research agreement. See MPEP § 717.02 for applications subject to examination under the first inventor to file provisions of the AIA  as explained in MPEP § 2159. See MPEP § 2146 et seq. for applications not subject to examination under the first inventor to file provisions of the AIA . A terminal disclaimer must be signed in compliance with 37 CFR 1.321(b).
The USPTO Internet website contains terminal disclaimer forms which may be used. Please visit www.uspto.gov/patent/patents-forms. The filing date of the application in which the form is filed determines what form (e.g., PTO/SB/25, PTO/SB/26, PTO/AIA /25, or PTO/AIA /26) should be used. A web-based eTerminal Disclaimer may be filled out completely online using web-screens. An eTerminal Disclaimer that meets all requirements is auto-processed and approved immediately upon submission. For more information about eTerminal Disclaimers, refer to www.uspto.gov/patents/process/file/efs/guidance/eTD-info-I.jsp.
Claims 1-16, 18-19 are rejected on the ground of nonstatutory double patenting as being unpatentable over claims 1-13 of U.S. Patent No. 11,487,860 B1. Although the claims at issue are not identical, they are not patentably distinct from each other because claims 1-5, 8-16, 18-19 of the instant application are anticipated by the reference claims 1-13 of the parent (‘860).
Regarding claim 1, ‘860 discloses an authentication method comprising a verification process and an authentication process, wherein the verification process and the authentication process are conducted on at least two distinct systems, wherein at least parts of the verification process are conducted on at least one verification device and at least parts of the authentication process are conducted on at least one authentication device, wherein the verification process comprises (cl. 1- An authentication method comprising a verification process and an authentication process, wherein the verification process and the authentication process are conducted on at least two distinct systems, wherein at least parts of the verification process are conducted on at least one verification device including a self-service terminal, and at least parts of the authentication process are conducted on at least one authentication device, wherein the verification process comprises): capturing first biometric data of a person; extracting second biometric data from a biometric identification document; comparing the first biometric data with corresponding second biometric data from the biometric identification document to obtain a similarity value comparable with a first similarity threshold (cl. 1- capturing first biometric data of a person; extracting second biometric data from a biometric identification document; obtaining an identification number, wherein the identification number is a unique identification number extracted from the biometric identification document; comparing the first biometric data with the second biometric data from the biometric identification document and calculating a first similarity value based on the comparison, wherein the first similarity value is compared with a first similarity value threshold); and wherein the authentication process comprises: capturing live biometric data of the person; receiving the first biometric data of the person; comparing the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticating the person. (cl. 1- wherein the authentication process comprises: capturing live biometric data of the person; receiving the first biometric data of the person by: (i) capturing an image of the biometric identification document of the person; (ii) extracting the identification number from the biometric identification document; (iii) generating the key using the extracted identification number and the additional data related to the person; (iv) requesting the stored encrypted certified first biometric data from the central database using the identification number; and (v) decrypting the encrypted certified first biometric data with the key generated using the extracted identification number and the additional data related to the person; comparing the live biometric data with the first biometric data and calculating a second similarity value based on the comparison; and authenticating the person in response to the second similarity value exceeding a second similarity value threshold.)
Regarding claim 2, ‘860 discloses in the authentication method of claim 1, wherein the verification process further comprises, in response to the similarity value of the first biometric data compared with the second biometric data exceeding the first similarity threshold: verifying an identity of the person; gathering additional data; certifying the first biometric data and the additional data; and storing the certified first biometric data and the certified additional data.(cl. 1)
Regarding claim 3, ‘860 discloses in the authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person, and wherein, in the verification process, storing the certified first biometric data and the certified additional data comprises storing the certified data on the mobile  device of the person, and wherein, in the authentication process, receiving the first biometric data of the person comprises transferring the certified first biometric data from the mobile device of the person to the authentication device. (cl. 3)
Regarding claim 4, ‘860 discloses in the authentication method of claim 2, wherein at least one of the verification devices is a self- service terminal, and wherein the verification process, conducted on the self-service terminal, further comprises: obtaining an identification number, wherein the identification number is a unique identification number extracted from the biometric identification document; in response to the similarity value of the first biometric data and the corresponding second biometric data from the biometric identification document exceeding the first similarity threshold: generating a key using the additional data; encrypting the certified first biometric data and the certified additional data with the key generated from the additional data; and storing the encrypted certified first biometric data and the encrypted certified additional data with the identification number in a central database; and wherein, in the authentication process, receiving the first biometric data of the person comprises: capturing an image of an authentication biometric identification document of the person; extracting authentication additional data from the authentication biometric identification document; extracting an authentication identification number from the biometric document; generating a key using the authentication additional data; requesting the stored encrypted certified first biometric data from the central database using the authentication identification number; and decrypting the encrypted certified first biometric data with the key generated from the authentication additional data. (cl. 4)
Regarding claim 5, ‘860 discloses in the authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person, and wherein, in the verification process, the certified first biometric data and the certified additional data are stored on the mobile device of the person, and wherein the verification process, in response to the person announcing their need to being authenticated in the near future, further comprises: obtaining an identification number; and storing the certified first biometric data and the certified additional data with the identification number in a central database. (cl. 3)
Regarding claim 8, ‘860 discloses in the authentication method of claim 4, wherein the central database is at least one of: secured by a hardware security module, and encrypted. (cl. 4)
Regarding claim 9, ‘860 discloses in the authentication method of claim 1, wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise at least one of: biometric facial images, iris scans, and fingerprint images. (cl. 5)
Regarding claim 10, ‘860 discloses in the authentication method of claim 2, wherein the additional data comprises at least one of: data extracted from the biometric document, manually entered data, and data retrieved from a third party. (cl. 6)
Regarding claim 11 ‘860 discloses in the authentication method of claim 1, wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise vectorized representations of biometric facial images, iris scans, fingerprint images, or a combination thereof. (cl. 7)
Regarding claim 12, ‘860 discloses in the authentication method of claim 1, wherein capturing at least one of the first biometric data, and capturing the live biometric data, comprises taking a photo of at least a part of the person; and wherein extracting the second biometric data from the biometric identification document in the verification process comprises at least one of taking a further photo of the biometric identification document, scanning the biometric identification document, or visually inspecting the biometric identification document. (cl. 8)
Regarding claim 13, ‘860 discloses in the authentication method of claim 1, further comprising, during the authentication process: when a requirement of authentication ends, deleting the received first biometric data of the person. (cl. 9)
Regarding claim 14, ‘860 discloses in the authentication method of claim 2, wherein authenticating the person comprises at least one of: granting access to an area, transferring the certified additional data to the authentication device, and decrypting the certified additional data. (cl. 10)
Regarding claim 15, ‘860 discloses in the authentication method of claim 1, wherein the verification process further comprises generating a user account associated with a unique user ID for the person, wherein the user account is secured by a user name and a PIN. (cl. 11)
Regarding claim 16, ‘860 discloses an automatic authentication system for authenticating a person, the system comprising: at least one verification device; and at least one authentication device;  wherein the at least one verification device is remote from the at least one authentication device; wherein the at least one verification device and the at least one authentication device are configured to communicate via a network; and wherein the at least one verification device is configured to: capture first biometric data of a person;  extract second biometric data from a biometric identification document; and compare the first biometric data with corresponding second biometric data from the biometric identification document to obtain a similarity value comparable with a first similarity threshold; and wherein the at least one authentication device is configured to: capture live biometric data of the person; receive the first biometric data of the person; compare the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticate the person. (cl. 1)
Regarding claim 18, ‘860 discloses in the automatic authentication system of claim 16 further configured, in response to the similarity value of the first biometric data compared with the second biometric data exceeding the first similarity threshold, to: verify an identity of the person; gather additional data; certify the first biometric data and the additional data; and store the certified first biometric data and the certified additional data. (cl. 2)
Regarding claim 19, ‘860 discloses a non-transitory computer-readable medium storing program code instructions executable by an automatic authentication system including at least one verification device and at least one authentication device remote from the at least one verification device, to: at the verification device: capture first biometric data of a person; extract second biometric data from a biometric identification document; and compare the first biometric data with corresponding second biometric data from the biometric identification document to obtain a similarity value comparable with a first similarity threshold; and at the authentication device:  capture live biometric data of the person; receive the first biometric data of the person; compare the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticate the person. (cl. 1)
Therefore patent claims 1-13 of ’860 are in essence “species” of the generic invention of application claims 1-5, 8-16, 18-19. It has been held that a generic invention is “anticipated” by a “species” within the scope of the generic invention. See In re Goodman, 29 USPQ2d 2010 (Fed. Cir. 1993)
Specification
The title of the invention is not descriptive.  A new title is required that is clearly indicative of the invention to which the claims are directed.
Claim Objections
Claim 17 is objected to because of the following informalities:  Claim 17 recites “wherein the database system configured to…”  Examiner believes the limitation should recite “wherein the database system is configured to…”.  Appropriate correction is required.
Allowable Subject Matter
Claim 4 would be allowable if rewritten to overcome the rejection(s) under 35 U.S.C. 112(b) or 35 U.S.C. 112 (pre-AIA ), 2nd paragraph, set forth in this Office action and the nonstatutory double patenting rejection and to include all of the limitations of the base claim and any intervening claims.
Claim Rejections - 35 USC § 112
The following is a quotation of 35 U.S.C. 112(b):
(b)  CONCLUSION.—The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the subject matter which the inventor or a joint inventor regards as the invention.
The following is a quotation of 35 U.S.C. 112 (pre-AIA ), second paragraph:
The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the subject matter which the applicant regards as his invention.
Claims 1-19 are rejected under 35 U.S.C. 112(b) or 35 U.S.C. 112 (pre-AIA ), second paragraph, as being indefinite for failing to particularly point out and distinctly claim the subject matter which the inventor or a joint inventor (or for applications subject to pre-AIA  35 U.S.C. 112, the applicant), regards as the invention.
Claim 1 recites “the verification process and the authentication process are conducted on at least two distinct systems”.  The meaning of this recitation is unclear.  Are both the verification process and the authentication process to be conducted on two distinct systems or is each one of the verification process and the authentication process to be conducted on its own system?
Claims 1 and 16 have two separate recitations of ‘a similarity value’. It is unclear if these ‘similarity values’ are the same or different similarity values.
Claims 1, 16 and 19 recite the limitation ‘comparable with a first similarity threshold’.  It is unclear what is meant by ‘comparable’.  The term “comparable” is not defined by the claim, the specification does not provide a standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be reasonably apprised of the scope of the invention.
Claims 2, 4, 16, 18 recite the limitation ‘the similarity value’.  It is unclear which ‘similarity value’ is being referenced since claims 2 and 16 have two separate recitations of ‘a similarity value’.
Claim 3 recites ‘the certified data’.  It is unclear which data is being referred to, the certified first biometric data, the certified additional data, or both?
Claim 4 recites ‘authentication additional data’.  It is unclear if this ‘additional’ data is the same ‘additional data’ previously recited, or if it is a different ‘additional’ data.
Claim 4 recites ‘an authentication identification number’ at line 20.  It is unclear if this ‘identification number’ is the same, different or related to the previously recited ‘identification number’ at line 5.
Claim 4 recites generating ‘a key’ at line 21.  It is unclear if this ‘key’ is the same, different or related to the previously recited ‘key’ at line 9.  Likewise, claim 4 also recites ‘the key’ at line 24.  It is unclear which ‘key’ is being referred to in this instance also, the ‘key’ at line 9, or the ‘key’ at line 21 or a different key.
Claim 5 recites the limitation ‘the verification device’. There is insufficient antecedent basis for this limitation in the claim.
The term “near future” in claims 5 and 6 is a relative term which renders the claim indefinite. The term “near” is not defined by the claim, the specification does not provide a standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be reasonably apprised of the scope of the invention.
Claim 7 which depends from claim 5 recites ‘a central database’.  However, claim 5 also recites ‘a central database’.  Is the database in claim 7 the same as that of claim 5?
The term “similar” in claim 7 at line 6 is a relative term which renders the claim indefinite. The term “similar” is not defined by the claim, the specification does not provide a standard for ascertaining the requisite degree, and one of ordinary skill in the art would not be reasonably apprised of the scope of the invention.
Claim 9 recites “wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise at least one of: biometric facial images, iris scans, and fingerprint images.”  From the wording of this limitation, it is unclear if the 3 different biometric data recitations each require the ‘data’ to be of the same type as one of the recited biometric types (facial, iris, fingerprint) or if each of the ‘data’ recitations can be a different one of the recited biometric types.
Claim 12 recites the limitation “taking a further photo of the biometric identification document”.  This recitation is unclear since no previous photo of the biometric identification document has been recited in claim 12 or claim 1 from which from which it depends.
Thus, due to these ambiguities, a person of ordinary skill in the art would not be reasonably apprised of the scope of the invention rendering the claims indefinite.
Claims 2-15, 17-18 are rejected as being dependent on, and failing to cure the deficiencies of, rejected independent claims 1 and 16 respectively
Claim Rejections - 35 USC § 102
(a)(2) the claimed invention was described in a patent issued under section 151, or in an application for patent published or deemed published under section 122(b), in which the patent or application, as the case may be, names another inventor and was effectively filed before the effective filing date of the claimed invention.
Claims 1-3, 5, 8-10, 12, 14, 15, 16, 18, 19 are rejected under 35 U.S.C. 102(a)(2) as being anticipated by Polychronidis et al. (US Pub. 20210294880 A1).
Polychronidis discloses the following limitations:
1. An authentication method comprising a verification process and an authentication process, wherein the verification process and the authentication process are conducted on at least two distinct systems (Fig. 1- mobile device 105 = one distinct system; vetting process 107, para. 27 – running on an individual server or datacenter = second distinct system),
wherein at least parts of the verification process are conducted on at least one verification device (para. 19) and at least parts of the authentication process are conducted on at least one authentication device (para. 41- The token created in step 206 can be stored and used by vetting process 107, for example, to reauthenticate or verify the user identity in future transactions.),
wherein the verification process comprises: capturing first biometric data of a person; extracting second biometric data from a biometric identification document; comparing the first biometric data with corresponding second biometric data from the  biometric identification document to obtain a similarity value comparable with a first similarity threshold (para. 19, 29- The picture is processed to extract any relevant information (e.g., name and identification number, such as a driver's license number) and/or biometrics (e.g., a picture of the person). The person seeking authentication can also be asked to photograph a recent utility bill to verify an address and billing name. The fingerprint of the person seeking authentication can be also recorded if the mobile device has that capability or a “selfie” (i.e., a photograph or video of oneself) may be taken using the mobile device. All of these data points are then checked against third-party, government, or commercial databases. For example, a state Department of Motor Vehicles database may be used to confirm the driver's license data (e.g., driver's license number, name, address, picture, etc.), an FBI database may be used to confirm that a fingerprint matches a name, and a commercial or private database (e.g., Equifax) may be used to verify financial information. The selfie photograph of the person seeking authentication can be checked against the picture on the driver's license or other government issued ID as well as checked against social media pictures. Having many data points that are checked and correlated will result in a higher confidence score confirming the identity of the person.); and wherein the authentication process comprises: capturing live biometric data of the person; receiving the first biometric data of the person; comparing the live biometric data with the first biometric data; and in response to a similarity value of the live biometric data and the first biometric data exceeding a second similarity threshold, authenticating the person.(Fig. 3, para. 44-46- note- stored token contains first biometric data of the person; matching = second similarity threshold)
2. The authentication method of claim 1, wherein the verification process further comprises, in response to the similarity value of the first biometric data compared with the second biometric data exceeding the first similarity threshold: verifying an identity of the person; gathering additional data; certifying the first biometric data and the additional data; and storing the certified first biometric data and the certified additional data. (Fig. 2, para. 31, 35-Biometric and/or other user information is combined and encrypted with data from the mobile device and/or from the mobile network to create the token. All of the data needed to create the token is available from or through the mobile device, such as biometric, location, time, and mobile identifier data. A mobile device such as a mobile telephone or smartphone is highly authenticated by the mobile network and, therefore, can be used to provide a highly unique identifier comprising a combination of the mobile device identifier and user biometrics. The token can later be used to verify the user and/or to confirm a user's location. Note- token = certified biometric data and additional data; para. 41- the token is stored and used by the vetting process)
3. The authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person (para. 37- in step 202, still or video images of the user are collected via the mobile device; para. 27- token (digital ID transferred to mobile device), and wherein, in the verification process, storing the certified first biometric data and the certified additional data comprises storing the certified data on the mobile device of the person, and wherein, in the authentication process, receiving the first biometric data of the person comprises transferring the certified first biometric data from the mobile device of the person to the authentication device.(para. 48- Current user data may also be sent to the vetting process with the reauthentication token. The current user data may be a current mobile device location, a time that the biometric data was captured by the mobile device, a location where the biometric data was captured, or any data that indicates the user's current location. A positive reauthentication indication is received from the vetting process only if the current user data matches an expected value or range of values.)
5. The authentication method of claim 2, wherein at least one of the verification devices is a mobile device of the person (para. 37- in step 202, still or video images of the user are collected via the mobile device; para. 27- token (digital ID transferred to mobile device), and wherein, in the verification process, the certified first biometric data and the certified additional data are stored on the mobile device of the person (para. 37- in step 202, still or video images of the user are collected via the mobile device; para. 27- token (digital ID transferred to mobile device), and wherein the verification process, in response to the person announcing their need to being authenticated in the near future, further comprises: obtaining an identification number; and storing the certified first biometric data and the certified additional data with the identification number in a central database.(para. 41- in step 206, the biometric data is encrypted along with an identifier for the mobile device to create a token. The identifier for the mobile device may include one or more of an International Mobile Station Identity (IMSI), an International Mobile Equipment Identity (IMEI), a Mobile Station International Subscriber Directory Number (MSISDN), a unique mobile device identifier, and a network identifier. The token is created only if the identification documents and, therefore, the user's identity are verified. The token created in step 206 can be stored and used by vetting process 107, for example, to reauthenticate or verify the user identity in future transactions.; claim 1)
8. The authentication method of claim 4, wherein the central database is at least one of: secured by a hardware security module, and encrypted. (para. 41)
9. The authentication method of claim 1, wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise at least one of: biometric facial images, iris scans, and fingerprint images.(para. 19, 27)
10. The authentication method of claim 2, wherein the additional data comprises at least one of: data extracted from the biometric document, manually entered data, and data retrieved from a third party. (para. 19-20)
12. The authentication method of claim 1, wherein capturing at least one of the first biometric data, and capturing the live biometric data, comprises taking a photo of at least a part of the person (para. 19); and wherein extracting the second biometric data from the biometric identification document in the verification process comprises at least one of taking a further photo of the biometric identification document, scanning the biometric identification document, or visually inspecting the biometric identification document.(abstract, para. 19)
14. The authentication method of claim 2, wherein authenticating the person comprises at least one of: granting access to an area, transferring the certified additional data to the authentication device, and decrypting the certified additional data. (para. 47- the user is allowed to perform a task only if a positive reauthentication indication is received from the vetting process. The task may be a financial transaction, a website login, an acknowledgement, access to a location or event, access to content, or any other action that requires enhanced security or privacy considerations.)
15. The authentication method of claim 1, wherein the verification process further comprises generating a user account associated with a unique user ID for the person, wherein the user account is secured by a user name and a PIN. (para. 27)
Claim Rejections - 35 USC § 103
The following is a quotation of 35 U.S.C. 103 which forms the basis for all obviousness rejections set forth in this Office action:
A patent for a claimed invention may not be obtained, notwithstanding that the claimed invention is not identically disclosed as set forth in section 102, if the differences between the claimed invention and the prior art are such that the claimed invention as a whole would have been obvious before the effective filing date of the claimed invention to a person having ordinary skill in the art to which the claimed invention pertains. Patentability shall not be negated by the manner in which the invention was made.
Claim 6 is rejected under 35 U.S.C. 103 as being unpatentable over Polychronidis as applied to claim 2 above, and further in view of Gormley et al. (US Pub. 20130305059 A1).
Regarding claim 6, Polychronidis discloses in the authentication method of claim 2, wherein the verification process further comprises: extracting data specific to the verification device from the verification device; generating a key using the data extracted from the verification device; encrypting the certified first biometric data and certified additional data with the key generated from the extracted data (cl. 1- encrypting the biometric data with an identifier for the mobile device to create a token); and storing the encrypted certified first biometric data and the certified additional data in a central database (para. 41- in step 206, the biometric data is encrypted along with an identifier for the mobile device to create a token. The identifier for the mobile device may include one or more of an International Mobile Station Identity (IMSI), an International Mobile Equipment Identity (IMEI), a Mobile Station International Subscriber Directory Number (MSISDN), a unique mobile device identifier, and a network identifier. The token is created only if the identification documents and, therefore, the user's identity are verified. The token created in step 206 can be stored and used by vetting process 107, for example, to reauthenticate or verify the user identity in future transactions.; claim 1); in response to the person announcing their need to being authenticated in the near future, requesting consent to use the encrypted certified first biometric data and the certified additional data (para. 32- (para. 41- in step 206, the biometric data is encrypted along with an identifier for the mobile device to create a token. The identifier for the mobile device may include one or more of an International Mobile Station Identity (IMSI), an International Mobile Equipment Identity (IMEI), a Mobile Station International Subscriber Directory Number (MSISDN), a unique mobile device identifier, and a network identifier. The token is created only if the identification documents and, therefore, the user's identity are verified. The token created in step 206 can be stored and used by vetting process 107, for example, to reauthenticate or verify the user identity in future transactions.; claim 1)
Polychronidis does not specifically teach decrypting the encrypted certified first biometric data and certified additional data with the key generated from the data extracted from the verification device.  However, in analogous art of confirming a person’s identity, Gormley teaches decrypting the encrypted certified first biometric data and certified additional data with the key generated from the data extracted from the verification device (see Fig. 2, para. 50, 53- The reader 211 then receives the encrypted data sent from the chip 214 and decrypts the data using the key constructed from the additional data) and therefore, one of ordinary skill in the art, as of the effective filing date of the claimed invention, would have found it obvious to use this teaching of Gormley with the disclosure of Polychronidis as a known way of decrypting the token to allow the biometric data and additional data of a passenger to be matched and thus processed through a security check.
Claims 7 and 17 are rejected under 35 U.S.C. 103 as being unpatentable over Polychronidis and further in view of Hoyos et al. (US Pub. 20080122578 A1)
Regarding claim 7, Polychronidis discloses the authentication method of claim 5, but does not specifically teach making a plurality of certified first biometric data items of people to authenticate available from a central database to an authentication device; and wherein receiving the certified first biometric data of the person comprises comparing the plurality of certified first biometric data items with the captured live biometric data of the person and selecting, in response to one of the plurality of certified first biometric data being similar to the live biometric data, the similar certified first biometric data as first biometric data of the person. However, these limitation are known and used in the related art of confirming a user’s identity as evidenced by Hoyos (see Fig. 1, para. 9, 20- image database (i.e. central database) storing plurality of biometric templates being made available for authentication) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Hoyos with the disclosure of Polychronidis as a known way of using biometrics to authenticate multiple passengers through a secondary security check point such as at a boarding area/gate area.
Regarding claim 17, Polychronidis discloses the automatic authentication system of claim 16 but does not specifically teach a database system, wherein the database system is remote from the at least one verification device and the at least one authentication device; wherein the database system configured to communicate with the verification device and the authentication device via the network; and wherein the database  system is configured to: receive data from the at least one verification device; and make data available to the at least one authentication device. However, these limitation are known and used in the art as evidenced by Hoyos (see Fig. 2, para. 17, 20- image database being remote from biometric verification device 12 (verification device) and biometric authentication device 16 (authentication device) communicating via a network) and therefore, one of ordinary skill in the art as of the effective filing data of the claimed invention would have found it obvious to use this teaching of Hoyos with the disclosure of Polychronidis as a known way of using enrolled biometrics to authenticate a passenger through a secondary security check point such as boarding area/gate area.
Claim 11 is rejected under 35 U.S.C. 103 as being unpatentable over Polychronidis and further in view of Takahashi et al. (US Pub. 20070118758 A1)
Regarding claim 11, Polychronidis discloses the authentication method of claim 1, and also discloses that the biometric data comprises facial images, iris scan or fingerprint images (para. 19, 27) but does not specifically teach wherein the first biometric data, the second biometric data from the biometric identification document and the live biometric data comprise vectorized representations of biometric facial images, iris scans, fingerprint images, or a combination thereof.  However, this concept of using vectorized representations of biometric readings for authentication is known and used in the art as evidenced by Takahashi (see para. 2, 71-73) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Takahashi with the disclosure of Polychronidis as a known way of comparing biometric data in determining if a biometric reading (live biometric data) matches enrolled/registered biometric data.
Claim 13 is rejected under 35 U.S.C. 103 as being unpatentable over Polychronidis and further in view of Fukuda (US Pub. 200226048 A1)
Regarding claim 13, Polychronidis discloses the authentication method of claim 1, but does not specifically teach during the authentication process: when a requirement of authentication ends, deleting the received first biometric data of the person. However, this concept of deleting biometric data of a user after the ending of an authentication requirement is known and used in the art of biometric authentication as evidenced by Fukuda (see para. 44, claim 6) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Fukuda with the disclosure of Polychronidis as a known way of preventing unauthorized future use of a user’s biometric data.
Regarding claims 16 and 18, they are rejected as applied to claims 1 and 2 because a corresponding system would have been necessitated to carry forth the method steps of claims 1 and 2.  The applied prior art also discloses the corresponding architecture.
Regarding claim 19, it merely recites a computer program that when executed, performs the functional steps of method claim 1, and thus, rejected for the same rationale.
Conclusion

APPLICANT REBUTTAL: Remarks/Ar
g
uments:
Summary of Claim Amendments
Original claims 1-19 have been cancelled, and new claims 20-32 are submitted for examination. No new matter is added by way of these amendments.
Double Patenting
The claims stand rejected on the ground of non-statutory obviousness-type double patenting over the claims of US 11487860. As the original claims are cancelled, the double patenting rejections are rendered moot.
Title
The title stands objected to as not being descriptive. Applicant submits that the title is descriptive: the claims are directed to a biometric authentication method, and a biometric authentication system, as indicated in the title.
Claim Objections
Claim 17 stands objected to for a grammatical error. Claim 17 has been cancelled, rendering this objection moot.
Claim Rejections Under 35 USC 112
The original claims stand rejected as being indefinite. As the original claims have been cancelled, Applicant submits that the rejections under 35 USC 112 are rendered moot.
Claim Rejections Under 35 USC 102 and 103, and Allowable Subject Matter
Claims 1-3, 5, 8-10, 12, 14-16, 18, and 19 stand rejected as being anticipated by Polychronidis (US 2021/0294880). Claim 6 stands rejected as being obvious in view of Polychronidis and Gormley (US 2013/0305059). Claims 7 and 17 stand rejected as being obvious in view of Polychronidis and Hoyos (US 2008/0122578). Claim 11 stands rejected as being obvious in view of Polychronidis and Takahashi
(US 2007/0118758). Claim 13 stands rejected as being obvious in view of Polychronidis and Fukuda (US 2009/0226048).
Applicant submits that the rejections under 35 USC 102 and 103 are rendered moot, as the original claims have been cancelled. Applicant notes, in addition, that Polychronidis does not disclose first and second self-service kiosks as recited in the newly submitted claims.
Conclusion

NEXT OFFICE ACTION: DETAILED ACTION
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Claims 20-32 are pending.  Claims 1-19 have been cancelled.
Response to Arguments
Applicant’s arguments filed 11/17/2023 have been fully considered but they are not persuasive.
In light of applicant’s claim amendments, the rejections under 35 USC § 112  are withdrawn.
Applicant’s arguments regarding the rejections of the claims under the prior art have been fully considered.  However, those arguments are rendered moot in light of the new grounds of rejection outlined below, which were necessitated by the applicant's amendment.
Specification
The title of the invention is not descriptive.  A new title is required that is clearly indicative of the invention to which the claims are directed.  Applicant asserts that the title ‘biometric authentication system’ is descriptive.  Examiner disagrees.  The title merely indicates the type of the invention and does not describe the invention that the claims are directed to.
Claim Objections
Claim 24 is objected to because of the following informalities: Claim 24 recites the limitation the central database.  There is insufficient antecedent basis for this limitation in the claim.  Appropriate correction is required.
Claim Rejections - 35 USC § 102
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the rejections under this section made in this Office action:
A person shall be entitled to a patent unless –
(a)(1) the claimed invention was patented, described in a printed publication, or in public use, on sale, or otherwise available to the public before the effective filing date of the claimed invention.
Claims 20-23, 25, 27, 28, 31 are rejected under 35 U.S.C. 102(a)(1) as being anticipated by Bouatou et al. (US Pub. 2016-125179 A1).
Bouatou discloses the following limitations:
20. (new) A method comprising:
capturing, at a first self-service kiosk, live biometric data of a person, the live biometric data including an image of the person (para. 26- When arriving at the check-in desk 6, the traveller 1 shows his/her ticket, his/her biometric passport 2 and places his/her right hand on the fingerprint scanner 10. The check-in officer launches, in a single operation, the acquisitions 11.1, 11.2, 11.3, 11.4 and 11.5 of the traveller's 1 fingerprints with the fingers being respectively placed on the acquisition pads 10.1 to 10.5 of the fingerprint scanner 10.);
extracting, at the first self-service kiosk, reference biometric data from a biometric identification document (para. 26- The biometric passport 2 is, in turn, placed on a specific reader that provides access to information contained in the secured chip 3, specifically the certified records 4 and 5 of the traveller's 1 right hand index and middle finger prints.);
comparing the live biometric data with the reference biometric data extracted from the biometric identification document to verify an identity of the person (para. 26- The acquisitions 11.2 and 11.3 corresponding to the traveller's index and middle fingers prints are then compared with the certified records 4 and 5 contained in the secured chip 3 of the biometric passport 2.);
in response to verification of the identity of the person, storing enrollment data associating (i) the live biometric data, (ii) the reference biometric data, and (iii) additional data corresponding to the person (para. 26-  Upon completion of the comparison, the secured chip 3 transmits a piece of information indicating whether the biometrics characteristics are identical with or different from the certified records 4 and 5. If the acquisitions 11.2 and 11.3 match the records 4 and 5, the traveller 1 is identified as the passport holder and his/her civil status is confirmed. The server 12 then stores in a catalogue 15 of second biometric characteristics, the acquisitions 11.1, 11.4 and 11.5 corresponding to the traveller's 1 thumb, ring finger and little finger prints and then associates therewith a secondary identifier 16, here the traveller's flight number 1 together with his/her seat number on the plane,);
subsequent to storing the enrollment data, capturing, at a second self- service kiosk, further live biometric data of the person, the further live biometric data including a further image of the person (para. 27- When checking in his/her luggage 7, the traveller 1 applies his/her right hand onto a fingerprint scanner, the acquisition pads 10.1, 10.4 and 10.5 of which only are active.);
in response to capturing the further live biometric data, retrieving the enrollment data; comparing the further live biometric data with at least a portion of the enrollment data to authenticate the person (para. 27- The acquisitions of the thumb, ring finger and little finger prints are sent to the server 12 which, after comparison, matches the acquired fingerprints and the acquisitions 11.1, 11.4 and 11.5 saved in the catalogue 15 and returns a message indicating the traveller's 1 secondary identifier 16, i.e. his/her flight number and seat on the plane to the remote display screen 11, to the attention of the security officer in charge of the check-point 7. The security officer then knows that the traveller 1 has regularly checked-in on one of the departing flights and the server 12 records that the traveller 1 has checked in his/her luggage); and
in response to authenticating the person based on the comparison of the further live biometric data with the enrollment data, granting the person access to a restricted area, at the second self-service kiosk. (para. 27- The traveller's 1 identification at the access point 8 to the boarding area takes place in the same manner and the server 1 records that the traveller has crossed the access point 8 to the boarding area. Thus, when checking in at the plane boarding desk 9, the traveller 1 identifies again as per his/her secondary identifier by scanning his/her thumb, his/her ring finger and his/her little finger prints. The server 12 confirms that the person whose thumb, ring finger and little finger prints have just been read is the traveller 1, that he/she actually went through all the check-points prior to the flight and that he/she can therefore enter the plane.)
21. (new) The method of claim 20, further comprising, at the first self-service kiosk: extracting a portion of the additional data, comprising a unique identification number, from the biometric identification document. (para. 30- The scanner 54 reads the data 55 of the area 53. It is connected to a processing unit 56 which queries in a manner known per se, the biometric characteristic data base 57 associating MRZ area data and certified records of biometric characteristics. The processing unit 56 identifies the field 58 of the database 57 containing the information 55 and then uses the certified records 4 and 5 of the traveller's right hand prints of his/her index and middle finger associated with the field 58 to make a comparison with the acquisitions 11.2 and 11.3.)
23. (new) The method of claim 20, wherein storing the enrollment data includes storing the enrollment data in a central database. (paras. 26-27- server 12)
25. (new) The method of claim 20, wherein the live biometric data, the reference biometric data, and the further live biometric data each comprise at least one of:(i) a facial image, (ii) an iris scan, or (iii) a fingerprint image. (para. 12- the biometric characteristics acquired are advantageously selected from the following ones: fingerprint, vein, face, iris, skin texture, peri-ocular venous pattern, skin folds.)
Claim Rejections - 35 USC § 103
The following is a quotation of 35 U.S.C. 103 which forms the basis for all obviousness rejections set forth in this Office action:
A patent for a claimed invention may not be obtained, notwithstanding that the claimed invention is not identically disclosed as set forth in section 102, if the differences between the claimed invention and the prior art are such that the claimed invention as a whole would have been obvious before the effective filing date of the claimed invention to a person having ordinary skill in the art to which the claimed invention pertains. Patentability shall not be negated by the manner in which the invention was made.
Claims 22 and 29 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Gormley et al. (US Pub. 20130305059 A1).
Regarding claim 22, Bouatou does not specifically teach wherein storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data.  However, in the related art of using biometric passports, Gormley teaches storing the enrollment data includes encrypting the enrollment data with a key generated from at least a portion of the additional data. (see paras. 48-50).  Therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention, would have found it obvious to use this teaching of Gormely  with the disclosure of Bouatou as a known way of protecting the enrollment data from an eavesdropper intercepting the data as suggested by Gormley.
Claims 24 and 30 are rejected under 35 U.S.C. 103 as being unpatentable over Bouatou and further in view of Hoyos et al. (US Pub. 20080122578 A1)
Regarding claim 24 (new), although Boutaou teaches storing enrollment data for a traveller on an airplane, it does not specifically teach storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  However, in the related art of identifying passengers at various checkpoints, Hoyos teaches storing, in the central database a plurality of additional sets of enrollment data corresponding to respective additional persons; wherein retrieving the enrollment data includes performing a search of the central database, based on the further live biometric data.  (see Fig. 1, para. 9, 20- image database (i.e. central database) storing plurality of biometric templates being made available for authentication) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Hoyos with the disclosure of Boutaou as a known way of using biometrics to authenticate multiple passengers through a secondary security check point such as at a boarding area/gate area.
Claims 26 and 32 are rejected under 35 U.S.C. 103 as being unpatentable over Boutaou and further in view of Fukuda (US Pub. 200226048 A1)
Regarding claim 26 (new), Boutaou does not specifically teach when an authentication requirement for the person ends, deleting the enrollment data. However, this concept of deleting biometric data of a user after the ending of an authentication requirement is known and used in the art of biometric authentication as evidenced by Fukuda (see para. 44, claim 6) and therefore, one of ordinary skill in the art as of the effective filing date of the claimed invention would have found it obvious to use this teaching of Fukuda with the disclosure of Boutaou as a known way of preventing unauthorized future use of a user’s biometric data.
Regarding claims 27-32, they are rejected as applied to claims 20-22 and 24-26 because a corresponding system would have been necessitated to carry forth the method steps of claims 27-32.  The applied prior art also discloses the corresponding architecture.  (see Figs. 1, 3, 4)
Conclusion
Applicant's amendment necessitated the new ground(s) of rejection presented in this Office action.  Accordingly, THIS ACTION IS MADE FINAL.  See MPEP § 706.07(a).  Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a).
A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the mailing date of this action.  In the event a first reply is filed within TWO MONTHS of the mailing date of this final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened statutory period will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the advisory action.  In no event, however, will the statutory period for reply expire later than SIX MONTHS from the date of this final action.

CITED REFERENCE SUMMARIES: Ref US20210294880A1: Claims:
A method for creating a token, comprising: collecting images of identification documents from a user via a mobile device; collecting still or video images of the user via said mobile device; searching one or more databases using search parameters generated from the identification documents and the images; verifying said identification documents and said images based upon information collected from the one or more databases; prompting the user to provide biometric data; and encrypting the biometric data with an identifier for the mobile device to create a token.
collecting images of identification documents from a user via a mobile device;
collecting still or video images of the user via said mobile device;
searching one or more databases using search parameters generated from the identification documents and the images;
verifying said identification documents and said images based upon information collected from the one or more databases;
prompting the user to provide biometric data; and
encrypting the biometric data with an identifier for the mobile device to create a token.
The method of claim 1 , wherein the identification documents are selected from one or more of still images, videos, printed text, electronic text, forms, papers, identification cards, passports, photographs, invoices, statements, and biometric data.
The method of claim 1 , wherein the search parameters are generated using character recognition processing on said identification documents.
The method of claim 1 , wherein the search parameters are generated using facial recognition processing of images of the user.
The method of claim 1 , wherein the databases comprise one or more of a government database, a commercial database, and a social media database.
The method of claim 1 , wherein the search parameters comprise one or more of a name, a date of birth, a driver's license number, a registration number, an address, an account number, and biometric parameters.
The method of claim 1 , wherein the information collected from the one or more databases comprises financial record data, utility record data, social media data, and government record data.
The method of claim 1 , wherein the biometric data comprises one or more of an iris pattern, facial features, fingerprint, heartbeat, and voice signals.
The method of claim 1 , wherein the identifier for the mobile device comprises one or more of an International Mobile Station Identity (IMSI), an International Mobile Equipment Identity (IMEI), a Mobile Station International Subscriber Directory Number (MSISDN), a unique mobile device identifier, and a network identifier.
The method of claim 1 , further comprising: apply a value to each verified identification document, wherein the value corresponds to a level of confidence that the identification document has confirmed the identity of the user; combining the values to create a confidence score; and associating the confidence score with said token.
apply a value to each verified identification document, wherein the value corresponds to a level of confidence that the identification document has confirmed the identity of the user;
combining the values to create a confidence score; and
associating the confidence score with said token.
A vetting server for performing the method of claim 1 , comprising: at least one processor and a memory coupled to the at least one processor, the memory storing program instructions executable by the at least one processor to cause the computer system to perform the steps for creating a token.
at least one processor and a memory coupled to the at least one processor, the memory storing program instructions executable by the at least one processor to cause the computer system to perform the steps for creating a token.
A method for reauthenticating a user, comprising: prompting the user to provide biometric data on a mobile device; obtaining an identifier for the mobile device; encrypting the biometric data with the mobile device identifier to create a reauthentication token; sending the reauthentication token to a vetting process; and receiving an indication from said vetting process whether or not the user is reauthenticated, wherein the user is reauthenticated if the reauthentication token matches a stored token.
prompting the user to provide biometric data on a mobile device;
obtaining an identifier for the mobile device;
encrypting the biometric data with the mobile device identifier to create a reauthentication token;
sending the reauthentication token to a vetting process; and
receiving an indication from said vetting process whether or not the user is reauthenticated, wherein the user is reauthenticated if the reauthentication token matches a stored token.
The method of claim 12 , further comprising: sending current user data to the vetting process with the reauthentication token; and receiving a positive reauthentication indication from the vetting process only if the current user data matches an expected value or range of values.
sending current user data to the vetting process with the reauthentication token; and
receiving a positive reauthentication indication from the vetting process only if the current user data matches an expected value or range of values.
The method of claim 13 , wherein the current user data is a current mobile device location, a time that the biometric data was captured by the mobile device, or a location where the biometric data was captured.
The method of claim 12 , wherein the biometric data comprises one or more of an iris pattern, facial features, fingerprint, heartbeat, and voice signals.
The method of claim 12 , wherein the identifier for the mobile device comprises one or more of an International Mobile Station Identity (IMSI), an International Mobile Equipment Identity (IMEI), a Mobile Station International Subscriber Directory Number (MSISDN), a unique mobile device identifier, and a network identifier.
The method of claim 12 , further comprising: allowing the user to perform a task only if a positive reauthentication indication is received from the vetting process.
allowing the user to perform a task only if a positive reauthentication indication is received from the vetting process.
The method of claim 17 , wherein the task is selected from one or more of a financial transaction, a website login, an acknowledgement, access to a location or event, and access to content.
The method of claim 12 , further comprising: allowing the user to perform a task only if a reauthentication indication is received from the vetting process with a confidence score exceeding a prescribed threshold.
allowing the user to perform a task only if a reauthentication indication is received from the vetting process with a confidence score exceeding a prescribed threshold.
A mobile device for performing the method of claim 12 , comprising: at least one processor and a memory coupled to the at least one processor, the memory storing program instructions executable by the at least one processor to cause the computer system to perform the steps for reauthenticating a user.
at least one processor and a memory coupled to the at least one processor, the memory storing program instructions executable by the at least one processor to cause the computer system to perform the steps for reauthenticating a user.
Ref US20130305059A1: Claims:
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data; a key construction unit communicatively coupled to a reader configured to read the data from the token; wherein the key construction unit uses the user identity document data read from the token to construct a key for decrypting the user information stored on the storage device.
a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data;
a key construction unit communicatively coupled to a reader configured to read the data from the token;
wherein the key construction unit uses the user identity document data read from the token to construct a key for decrypting the user information stored on the storage device.
A decryption system according to claim 1 wherein the key construction unit derives the key based on one or more of a user identity document number, an expiry date of the user identity document and preferably a user's date of birth.
A decryption system according to claim 1 wherein the or a user manually enters the user identity document data prior to the reader reading the data encoded on the token.
A decryption system according to claim 1 in which the reader is configured to read the user information stored on the storage device.
A decryption system according to claim 1 in which the token further comprises user identification information and in particular in which the reader is further configured to read the user identification information from the token.
A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document.
A decryption system according to claim 5 further comprising a comparator for comparing the user identification information read from the token and the user information decrypted from the storage device associated with the user identity document and further comprising authentication means for authenticating the user depending upon the result of the comparison.
A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token.
A decryption system according to claim 1 in which the token is a boarding pass having the user identity document data encoded in a specific region of the boarding pass.
A decryption system according to claim 1 further comprising a mobile device associated with a user for storing the token, wherein the mobile device comprises a near field communication, NFC, chip communicatively coupled with the mobile device for transmitting the token to the reader such as an airport check-in security desk.
A decryption system according to claim 1 in which the key construction unit is configured to construct the key in response to the reader reading the user identity document data encoded in machine readable form on or within the token.
A decryption system according to claim 1 in which the identity document reader is primed to decrypt the user identification information encrypted on or within the storage device in response to the reader reading the user identity document data from the token.
A decryption system according to claim 1 in which the reader is a wireless reading means preferably comprising a near field communication, NFC, reading means configured to communicate with a mobile device for storing the token storage device and further preferably comprising a radio frequency identification, RFID, reading means configured to communicate with the storage device.
A boarding pass for use with the decryption system of claim 1 , the pass comprising: user identity document data associated with a user identity document, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
user identity document data associated with a user identity document, the data encoded in a machine readable form wherein the data is encoded on or within a predetermined region of the token and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
A token generating system for generating a boarding pass and the like comprising: a server configured to collect user identity document data from a user and to construct a token such as a boarding pass including the user identity document data encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
a server configured to collect user identity document data from a user and to construct a token such as a boarding pass including the user identity document data encoded in a machine readable form wherein the server is configured to generate the token having the data encoded on or within a predetermined region and the data comprises a user identity document number and an expiry date of the user identity document and preferably the user's date of birth.
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a reader configured to read data from a token such as a boarding pass and the like, the token including user identity document data encoded in a machine readable form, the reader configured to read the data encoded on the storage device; and a key construction unit configured to derive a key from the user identity document data encoded on or within the token which enables the reader to decrypt the user information stored on the storage device.
a reader configured to read data from a token such as a boarding pass and the like, the token including user identity document data encoded in a machine readable form, the reader configured to read the data encoded on the storage device; and
a key construction unit configured to derive a key from the user identity document data encoded on or within the token which enables the reader to decrypt the user information stored on the storage device.
A decryption system according to claim 16 in which the reader is configured to read the user identity document data from a predetermined region of the token.
A decryption system for decrypting user information encrypted on a storage device associated with a user identity document, the system comprising: a server configured to collect user identity document data from the or a user and to construct a token comprising the user identity document data; a reader configured to read the data from the token wherein the reader uses the user identity document data read from the token to decrypt the user information stored on the storage device.
a reader configured to read the data from the token wherein the reader uses the user identity document data read from the token to decrypt the user information stored on the storage device.
A decryption system according to claim 18 wherein the reader is a portable reader or scanner such as a mobile telephone.
A decryption system according to claim 18 in which the user identity document is a passport and preferably in which the user identity document or passport is pre-stored on a mobile communication device, preferably in a secured manner.
The decryption system according to claim 18 further comprising the step of reading a user identity document biometric facial image using the user identity document data.
The decryption system according to claim 18 further comprising the step of capturing an image of the user with a camera and preferably the step of comparing the captured image with the passport biometric facial image read from the user identity document.
Ref US20080122578A1: Claims:
A process for ensuring the provenance of passengers at a transportation facility, comprising: providing a first biometric reading device at a first station associated with a check-in area of the transportation facility; providing a second biometric reading device at a second station associated with a departure or boarding area of the facility; acquiring a first biometric template of a given passenger arriving at the check-in area using the first reading device; entering a name or other information corresponding to the given passenger into a background check system; forwarding the acquired first biometric template from the first station to the second station; acquiring a second biometric template of the given passenger using the second reading device when the passenger appears at the second station associated with the departure or boarding area; comparing the second biometric template with each of a number of biometric templates forwarded to the second station from the first station and corresponding to all passengers that have checked in for departure on the same vehicle as the given passenger; and determining whether or not a match exists between the second biometric template and one of the biometric templates forwarded to the second station from the first station.
providing a first biometric reading device at a first station associated with a check-in area of the transportation facility;
providing a second biometric reading device at a second station associated with a departure or boarding area of the facility;
acquiring a first biometric template of a given passenger arriving at the check-in area using the first reading device;
entering a name or other information corresponding to the given passenger into a background check system;
forwarding the acquired first biometric template from the first station to the second station;
acquiring a second biometric template of the given passenger using the second reading device when the passenger appears at the second station associated with the departure or boarding area;
comparing the second biometric template with each of a number of biometric templates forwarded to the second station from the first station and corresponding to all passengers that have checked in for departure on the same vehicle as the given passenger; and
determining whether or not a match exists between the second biometric template and one of the biometric templates forwarded to the second station from the first station.
The process of claim 1 , including comparing the first biometric template acquired at the first station with a preexisting template obtained previously for the given passenger and stored in an image database.
Ref US20070118758A1: Claims:
A processing device that generates helper data used for generating a password used to authenticate a user based on biometric information on the user, wherein master helper data, created in advance based on the user's biometric information, is converted to generate the helper data corresponding to the password.
wherein master helper data, created in advance based on the user's biometric information, is converted to generate the helper data corresponding to the password.
The processing device according to claim 1 , wherein the master helper data has a value for each distribution interval of the user's biometric information, and said processing device assigns a partial value of the password to a distribution interval of the user's biometric information whose master helper data value corresponds to a first value, assigns other values to the distribution intervals of the user's biometric information whose master helper data value corresponds to a second value, and combines the assigned values to generate the helper data.
wherein the master helper data has a value for each distribution interval of the user's biometric information, and
said processing device assigns a partial value of the password to a distribution interval of the user's biometric information whose master helper data value corresponds to a first value, assigns other values to the distribution intervals of the user's biometric information whose master helper data value corresponds to a second value, and combines the assigned values to generate the helper data.
The processing device acc
[Truncated to input limit]