Abstract: A method of authenticating users is provided that includes capturing biometric authentication data of a user and processing the captured biometric data into an image. Moreover, the method includes determining a region of interest of the image and a gray scale image from the image, determining an optimum transformation parameter set within the region of interest, and aligning the gray scale image with an enrollment gray scale image generated during enrollment of the user using results of the optimum transformation parameter set determination. Furthermore, the method includes extracting biometric feature data from the gray scale image and verifying an identity of the user with extracted biometric feature data included in a region of agreement.

Abstract: A method of authentication is provided that includes capturing biometric data for a desired biometric type from an individual, determining an algorithm for converting the biometric data into authentication words, converting the captured biometric data into authentication words in accordance with the determined algorithm, including the authentication words in a probe, and comparing the probe against identity records stored in a server system. Each of the identity records includes enrollment biometric words of an individual obtained during enrollment. Moreover, the method includes identifying at least one of the identity records as a potential matching identity record when at least one of the authentication words included in the probe matches at least one of the enrollment biometric words included in the at least one identity record, and generating a list of potential matching identity records.

Abstract: A system and method for enabling analysis of enrolled biometric data is presented. A plurality of vectors each having a plurality of score values representative of the relationship between individual ones of the enrolled biometrics with a plurality of biometric representations forming a filter set are described. Judicious use of the vectors enables a filtering of the enrolled biometric data on a dynamic basis.

Abstract: A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A system and methodology for enabling analysis of enrolled biometric data is presented. A plurality of vectors each having a plurality of score values representative of the relationship between individual ones of the enrolled biometrics with a plurality of biometric representations forming a filter set are described. Judicious use of the vectors enables a filtering of the enrolled biometric data on a dynamic basis.

Abstract: A method of managing large scale biometric data identity matching includes identifying a plurality of biometric modalities to be used in conducting identity matches, determining one of the biometric modalities to be a primary biometric modality and determining whether at least one matching algorithm is compatible with matrix entries. When the at least one matching algorithm is compatible with a matrix entry the method includes assigning a plurality of matching systems to the matrix entry. The matching systems are configured to conduct 1:1 or 1:few matching after conducting a 1:N identity matching. Furthermore, the method includes comparing a probe against enrollment data records stored in a corresponding matching system, and storing information regarding a matching enrollment data record in a queue when the probe matches an enrollment data record.

Abstract: A distributed network of independently operable servers is provided. Each server is adapted to communicate over the network with at least one of the other servers and has a datastore with a plurality of datafields adapted to store information about at least one user. By enabling an authentication of a user based on a user supplied biometric identifier, the network is adapted to enable the transfer of information relating to the user between different servers.

Abstract: A method for integrating duplicate checks with an existing computer system includes capturing participant biometric data from each of a plurality of participants and enrolling each of the participants in a biometric duplicate check computer system. Moreover, the method includes checking for potentially duplicate biometric enrollment data records and communicating potentially duplicate unique identifiers associated with potentially duplicate biometric enrollment data records from the biometric duplicate check computer system to the existing program computer system. Furthermore, the method includes identifying potentially duplicate enrollment data records using the potentially duplicate unique identifiers, determining whether any of the potentially duplicate enrollment data records are true duplicate enrollment data records, and deleting true duplicate data records that are not to be retained.

Abstract: A method of confirming the identity of a user includes processing biometric credentials, generating a user configurable policy including identities of a plurality of authenticating entities, storing the user configurable policy in a device, presenting the device to an authenticating entity at an authentication station, and requesting biometric and personal data of the user from the device data. The biometric data corresponds to at least one biometric feature desired for authenticating the user and the requesting operation is performed by a workstation of the authenticating entity.

Abstract: A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: A biometrically enabled machine readable token is biometrically associated with the user or owner of the token. Such a token may be generated by initially providing biometric data of the user, and concealing the biometric data such that the biometric data is selectively accessible. The concealed biometric data is then used in generation of a token request message either by embedding the concealed biometric data into the token request message or by providing a concealed link thereto within the token request message. Once a token request message is received by a token issuer the concealed biometric data may be associated with the token. As the biometric data is concealed the specifics of that data are not accessible to third parties. Optionally the authenticity of the token may be effected by having the token issuer digitally signing the token.

Abstract: A biometric authentication engine includes components which are configured to authenticate a user based on at least one presented biometric.The system makes use of multiple threshold parameters or scores so that the authentication process is better tailored to match the specifics of the authentication request.

Abstract: A biometric authentication system configured to enable an authentication process has predefined parameters associated therewith and provides for authentication of a user based on a comparison of a presented biometric with at least one previously stored biometric. The authentication system includes a matching system providing as an output an output score based on the comparison of the presented biometric and the at least one previously stored biometric. Moreover the authentication system is configured to authenticate the user on determining that a parameter based on the output score, meets a threshold score, and includes an audit module configured to monitor the authentication process and to provide at least one revised threshold score. The at least one revised threshold score is provided based on an analysis of the performance of the authentication system over a predefined time period using current threshold scores.

Abstract: A data storage system that protects privacy and ensures security includes a plurality of nodes in a networked architecture, the nodes being adapted to securely communicate and co-operate with one another to allow storage and retrieval of data. A single piece of biometric data is associated only with a blinded identifier and securely divided across one or more nodes, adapted for data storage. The data itself and the link to the original individual, from whom the biometric was acquired, cannot be obtained without the co-operation of two or more nodes.