Multi-functional identification recognition system capable of recognizing the identity of users

A multi-functional identification recognition system includes a server storing a database, the database containing a plurality of user identities. For each user identity, the database stores a corresponding plurality of identification fields for uniquely identifying a user corresponding to the user identity. The multi-functional identification recognition system also includes a multi-functional identification reader being in communication with the server through an internet connection and having a plurality of identity recognizing devices. When the user registers with the server or verifies identification data already stored in the server, a plurality of identity recognizing devices read the user's identification data and send the identification data to the server through the internet connection, and each type of identification data is stored in or checked against one of the identification fields corresponding to the user.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The invention relates to a multi-functional identification recognition system, and more particularly, to a multi-functional identification recognition system having a multi-functional identification reader with a plurality of identity recognizing devices for recognizing the identity of users.

2. Description of the Prior Art

In modern times there has been a great increase in the number of different access cards or accounts that people use for accessing various services. Examples include bank accounts accessible through either an automatic teller machine (ATM) or through online banking, accounts through various other websites, as well as door access cards that people use for entering buildings.

With the increased number of cards and accounts that people use to access these services, it becomes problematic for people to manage all of the cards, user names, personal identification numbers, and passwords necessary to gain access. Furthermore, if an unauthorized person manages to gain access to a user's service by illegally obtaining an access card and/or a password, the unauthorized person can cause great damage as a result of this unauthorized access. Although two-step or multi-step authentication is helpful for avoiding unauthorized access, this also creates more hassle for the user. Since there are usually multiple devices required for performing two-step or multi-step authentication, this causes inconvenience when the user has to switch from one device to another in order to perform verification.

SUMMARY OF THE INVENTION

According to an exemplary embodiment, a multi-functional identification recognition system is disclosed. The multi-functional identification recognition system includes a server storing a database, the database containing a plurality of user identities, wherein for each user identity, the database stores a corresponding plurality of identification fields for uniquely identifying a user corresponding to the user identity. The multi-functional identification recognition system also includes a multi-functional identification reader being in communication with the server through an internet connection and having a plurality of identity recognizing devices, wherein when the user registers with the server or verifies identification data already stored in the server, a plurality of identity recognizing devices read the user's identification data and send the identification data to the server through the internet connection, and each type of identification data is stored in or checked against one of the identification fields corresponding to the user.

According to another exemplary embodiment, a method of authenticating a user's identity using a multi-functional identification recognition system is disclosed. The method includes the user registering with a database stored in a server, the database containing a plurality of user identities, wherein for each user identity, the database stores a corresponding plurality of identification fields for uniquely identifying a user corresponding to the user identity; registering identification data for each user using a multi-functional identification reader being in communication with the server through an internet connection and having a plurality of identity recognizing devices, wherein when the user registers with the server, a plurality of identity recognizing devices read the user's identification data and send the identification data to the server through the internet connection, and each type of identification data is stored in one of the identification fields corresponding to the user; and verifying the user's identity by reading the user's identification data with the multi-functional identification reader, sending the read identification to the server, and comparing the read identification data with the identification data stored in the database.

DETAILED DESCRIPTION

Please refer toFIG. 1.FIG. 1is a functional block diagram of a multi-functional identification recognition system10according to the present invention. The multi-functional identification recognition system10contains a server12having a database14contained therein. The database14can also be located outside of the server12, but in any case, the server12will still be able to read from and write to the database14. A multi-functional identification reader20and a service provider18are each connected to the server12via the internet16. The server12, the multi-functional identification reader20, and the service provider18can each be connected to the internet16through either a wireless or a wired connection. The service provider18can be any kind of service in which a user's identity needs to be verified before access is granted to the service provider18. Examples of the service provider18include an ATM, an online banking account, other online accounts, access control doors in high security buildings or office buildings, and so on.

Please refer toFIG. 2.FIG. 2is a functional block diagram of the multi-functional identification reader20according to the present invention. The multi-functional identification reader20contains a controller22such as a microprocessor or a central processing unit for controlling the operation of the multi-functional identification reader20and for executing software code stored in a memory24. The memory24is preferably a non-volatile memory for storing the software code in a non-volatile manner, and the memory24may also include random access memory (RAM) for temporarily storing software code or data that is being operated on by the controller22.

The multi-functional identification reader20contains a plurality of identity recognizing devices for reading different forms of the user's identification data. The multi-functional identification reader20may contain any number of identity recognizing devices, and the following are provided for reference only. The present invention preferably contains two or more identity recognizing devices, but there is no upper limit as to how many identity recognizing devices the multi-functional identification reader20may contain. To start with, the multi-functional identification reader20may contain an iris scanner26for scanning the user's eyes. A retina scanner can be used instead of or in addition to the iris scanner26, as is well known to a person having ordinary skill in the art. In either case, an ocular scan of one or preferably both of the user's eyes is produced and stored in the database14.

The multi-functional identification reader20may contain a fingerprint scanner28for scanning any or all of the user's fingerprints. Instead of scanning only a single fingerprint or a few fingerprints of the user, all of the user's fingerprints may be scanned and stored in the database14. In a similar manner the multi-functional identification reader20may contain a finger vein scanner30and/or a palm vein scanner32. The finger vein scanner30scans the user's finger or fingers and creates images of human finger vein patterns beneath the skin's surface for each finger. The palm vein scanner32similarly creates images of vein patterns beneath the skin's surface for each of the user's palms. The finger vein scanner30can scan one or all of the user's fingers and store the resulting images in the database14, and the palm vein scanner32can similarly scan one or both of the user's palms and store the resulting images in the database14.

A near field communication (NFC) scanner34can be used to scan a user's physical identification device such as a contactless smartcard or any other device that makes use of NFC technology. The user may store code values in the database14for one NFC-compatible object or multiple-NFC compatible objects, and there is no limit as to how many NFC code values can be stored in the database14.

The multi-functional identification reader20may include a one-dimensional barcode scanner36or a two-dimensional barcode scanner38for scanning one or more barcodes that are located on objects in the user's possession. The two-dimensional barcodes may be any type of matrix barcode such as a Quick Response Code (QR code). A keypad40may also be installed on the multi-functional identification reader20for allowing the user to enter a personal identification number (PIN) or a password. This PIN or password is stored in the database14, and can be used to verify the user's identity as is well known in the art.

Please refer toFIG. 3.FIG. 3is a user profile50showing an example of an entry in the database14for a user identity (UID)52. For each UID52, a corresponding plurality of identification fields are stored in the database14for uniquely identifying the user that corresponds to the UID52. In this example, the user profile50contains the following identification fields that correspond to the UID52. Iris profiles54store one or more iris images of the user. As stated above, retina images could also be stored instead of or in addition to the iris images. Fingerprint profiles56may store images related to any or all of the user's fingerprints. Finger vein profiles58and palm vein profiles60can also be stored in a similar manner. One or more NFC code values62corresponding to the UID52may also be stored in the user profile50. That is, the user may wish to store NFC codes for multiple smart cards or other NFC-compatible objects instead of storing only a single NFC code. One-dimensional barcode values64and two-dimensional barcode values66may be stored in the user profile50, with one or more of each type capable of being stored. PIN or password values68can also be stored in the user profile50, and again either one or more than one PIN or password can be stored. The user is able to customize exactly which of the above identification fields to use, and how much data to store in each of the different identification fields.

Please refer toFIG. 4.FIG. 4is an example of a service profile80that a user has created for a given service provider that the user would like to access. First of all, the service profile80stores a field for a UID82to indicate the user that is being granted access, and another field for a given service provider called “Service A”84. A different service profile could be set up for each different combination of users and service providers, and the service profile governs how the indicated user is granted access to the indicated service provider.

In the example of service profile80, three different identification fields are present, and these fields respectively contain a fingerprint of the first finger on the left hand86, a fingerprint of the third finger on the right hand88, and an NFC code referred to as “NFC code A”90that the user has registered in the database14. A sequence field92asks the user if the identification data corresponding to the three different identification fields needs to be input in the indicated sequence or not. In this example, sequence field92indicates that the indicated sequence is indeed required. This means that the user needs to input the fingerprint of the first finger on the left hand86, the fingerprint of the third finger on the right hand88, and the NFC code A90in this exact sequence in order for the user indicated by UID82to be granted access to the indicated service “Service A”84. If any of the required identification data is not input or is input in the wrong sequence, or if any extra identification data is provided, then the user will not be granted access. In the example shown inFIG. 4, the user has a high degree of control for customizing how many identification fields are used, which particular identification fields are used, and whether or not a given sequence is required in order to access each different service provider that the user has registered in the database14.

Please refer toFIG. 5.FIG. 5is a flowchart describing the method for a user to register a user profile in the database14according to the present invention. Steps in the flowchart will be explained as follows.

Step202: The user creates a user profile to be stored and registered in the database14. Referring to the example of the user profile50shown inFIG. 3, the user profile50contains the UID52and a plurality of identification fields54-68that correspond to the UID52.

Step204: The user creates a service profile to be stored and registered in the database14. Referring to the example of the service profile80shown inFIG. 4, the service profile80contains the UID82, the indicated service “Service A”84, the three different identification fields86,88, and90, and the sequence field92.

Please refer toFIG. 6.FIG. 6is a flowchart describing how a user is granted or denied access to the service provider18by entering identification data according to the present invention. Steps in the flowchart will be explained as follows.

Step252: The user initiates a transaction with the service provider18. The user may initiate the transaction in a variety of ways, such as by pressing a button, opening a software application, or by starting to enter identification data via the multi-functional identification reader20.

Step254: The user enters a plurality of types of identification data using the multi-functional identification reader20in order to verify the user's identity.

Step256: Determine if the user's identity has been properly verified. If so, go to step258. If not, go to step260.

Step258: The user is permitted to access the service provider18since the user's identity has been verified. Go to step262.

Step260: The user is not permitted to access the service provider18since the user's identity has not been verified.

Since the server12, the multi-functional identification reader20, and the service provider18are all in communication with one another over the internet16, the multi-functional identification reader20can be placed anywhere that is convenient for a user to access it. Many multi-functional identification readers20can be placed all over the world, and the user simply needs to use one of them in order to verify the user's identity. For example, a multi-functional identification reader20can be placed near or on an ATM for permitting the user to access the ATM, can be placed near an access control door for permitting the user to enter through the access control door, or can be placed in a user's home so that the user can access services online. Since the user's identity can be verified with a high degree of confidence using the multi-functional identification recognition system10, the multi-functional identification recognition system10can even replace the function of a notary public or other systems that are currently used for verifying identities.

Since the multi-functional identification reader of the present invention multi-functional identification recognition system can recognize a user's identity using a plurality of different types of identification data, the present invention provides strong protection to whatever service provider makes use of the multi-functional identification reader.