Abstract: A method of authorising a user in communication with a workstation is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorization methods each requiring data only from available user information entry devices. The user then selects one of the determined authorization methods for use in user authorization. Optionally, each authorization method is associated with a security level relating to user access to resources. Once the authorization method is selected, the user provides user authorization information in accordance with a determined user authorization method and registration proceeds.

Abstract: A method of authorising a user in communication with a workstation is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorisation methods each requiring data only from available user information entry devices. The user then selects one of the determined authorisation methods for use in user authorisation. Optionally, each authorisation method is associated with a security level relating to user access to resources. Once the authorisation method is selected, the user provides user authorisation information in accordance with a determined user authorisation method and registration proceeds.

Abstract: A method of authorizing a user in communication with a workstation is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorization methods each requiring data only from available user information entry devices. The user then selects one of the determined authorization methods for use in user authorization. Optionally, each authorization method is associated with a security level relating to user access to resources. Once the authorization method is selected, the user provides user authorization information in accordance with a determined user authorization method and registration proceeds.

Abstract: A method, system and computer program product which allows identification of an enrollment biometric template having a highest probability of matching a sample biometric template from a plurality of enrolled biometric templates without compromising or significantly compromising system security. In one embodiment of the invention, first feature set information is derived from sample and enrollment biometric templates. The first feature set information generally comprises spatially dependent information associated with a fingerprint. The first feature set information is then used to determine which enrollment biometric template has the highest probability of matching the sample biometric template. Second feature set information is then derived from the biometric sample template and the determined enrollment biometric template and used to perform a one-to-one match. The second feature set information generally comprises pattern dependent information associated with a fingerprint.

Abstract: A method for matching biometric data is disclosed. A biometric information source is sensed to provide an image thereof. The image is then analysed to extract features therefrom. A feature is selected as a first feature and a plurality of polygons are generated with a location of the first feature as a vertex of each. The polygons are then used to search a lookup table in order to determine an orientation and translation of the image relative to stored reference data.

Abstract: A method for matching biometric data is disclosed. A biometric information source is sensed to provide an image thereof. The image is then analysed to extract features thereform. A feature is selected as a first feature and a plurality of polygons are generated with a location of the first feature as a vertex of each. The polygons are then used to search a lookup table in order to determine an orientation and translation of the image relative to stored reference data.

Abstract: A method for matching biometric data is disclosed. A biometric information source is sensed to provide an image thereof. The image is then analysed to extract features therefrom. A feature is selected as a first feature and a plurality of polygons are generated with a location of the first feature as a vertex of each. The polygons are then used to search a lookup table in order to determine an orientation and translation of the image relative to stored reference data.

Abstract: A method for matching biometric data is disclosed. A biometric information source is sensed to provide an image thereof. The image is then analyzed to extract features therefrom. A feature is selected as a first feature and a plurality of polygons are generated with a location of the first feature as a vertex of each. The polygons are then used to search a lookup table in order to determine an orientation and translation of the image relative to stored reference data.

Abstract: An authentication mechanism for use with biometric systems which optimizes data extraction on areas or regions having a high probability of matching a reference biometric template, allows a reduction in both the size and number of data packet transmissions to be made to a biometric matching engine and includes data packet transmission prioritization.

Abstract: An authentication mechanism for use with biometric systems which optimizes data extraction on areas or regions having a high probability of matching a reference biometric template, allows a reduction in both the size and number of data packet transmissions to be made to a biometric matching engine and includes data packet transmission prioritization.

Abstract: A method for matching biometric data on an authentication server is disclosed. An authentication server is provided having biometric template data stored thereon. A plurality of workstation processors in communication with the authentication server is also provided. A sensed biometric image is provided to a processor out of the plurality of workstation processors from an individual. From the authentication server to the processor, co-ordinate data relating to a plurality of non-contiguous features of the template data are provided. Characteristic data is extracted from the biometric image, the characteristic data for correlation with the provided coordinate data allowing for a subsequent alignment of the biometric image within a known frame of reference relative to the template data on the basis of the provided data and the other data.

Abstract: A method for matching biometric data on an authentication server is disclosed. An authentication server is provided having biometric template data stored thereon. A plurality of workstation processors in communication with the authentication server is also provided. A sensed biometric image is provided to a processor out of the plurality of workstation processors from an individual. From the authentication server to the processor, co-ordinate data relating to a plurality of non-contiguous features of the template data are provided. Characteristic data is extracted from the biometric image, the characteristic data for correlation with the provided co-ordinate data allowing for a subsequent alignment of the biometric image within a known frame of reference relative to the template data on the basis of the provided data and the other data.

Abstract: A method for matching biometric data on a smart card is disclosed. A smart card is provided having biometric template data stored thereon. A host processor in communication with the smart card is also provided. A sensed biometric image is provided to the host processor from an individual. From the smart card to the host processor, co-ordinate data relating to a plurality of non-contiguous features of the template data are provided. Other data is extracted from the biometric image, the other data for correlation with the provided co-ordinate data allowing for a subsequent alignment of the biometric image within a known frame of reference relative to the template data on the basis of the provided data and the other data. Once aligned, biometric data is extracted from the biometric image, the biometric data within the known frame of reference and then the extracted biometric data is transmitted to the smartcard.

Abstract: A method of supporting a substantially secure backup copy of a key-server database, said database comprising security information specific to a plurality of users, absent the need for a duplicate key-server is disclosed. According to the method, each individual's security data is stored within the key-server database and is also stored on a portable data storage device, such as a smart card or a PCMCIA token. If the key-server crashes and the database stored thereon is lost, a duplicate key-server database is reconstructed using the aggregate of the partial database files stored on each individual's portable data storage device. Similarly, when a portable data storage device is lost, it can be rebuilt from the data stored within the key-server.

Abstract: A method in which a data access request by a user to access data of a destination server, such as the data that needs to be updated when a login and/or password is changed, is provided consistently. The destination servers are redundant, and instead of directing the access request directly to one of the redundant destination servers, an intermediate level of servers is provided that selects one of the destination servers to serve the data access request. This selection is made so that the data access request from a particular source may be directed to the same destination server. The data access request includes data that is unique to the source and/or to the user, and the selection is made in dependence on the result of a transformation, such as a hash function, performed on the unique data. Since the redundant destination servers may each identically serve the data access request, the data access request can be routed to any destination server without any change in the processing of the request.

Abstract: A method of implementing password level security is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorization methods each requiring data only from available user information entry devices. The user then selects one of the determined authorization methods for use in user authorization. Optionally, each authorization method is associated with a security level relating to user access to resources. Once the authorization method is selected, the user provides user authorization information in accordance with a determined user authorization method and registration proceeds. Once registration is complete, a password is passed from a password database to a password entry sub-system to provide access to that system.

Abstract: A method of authorizing a user in communication with a workstation is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorization methods each requiring data only from available user information entry devices. The user then selects one of the determined authorization methods for use in user authorization. Optionally, each authorization method is associated with a security level relating to user access to resources. Once the authorization method is selected, the user provides user authorization information in accordance with a determined user authorization method and registration proceeds.

Abstract: An authentication mechanism for use with biometric systems which optimizes data extraction on areas or regions having a high probability of matching a reference biometric template, allows a reduction in both the size and number of data packet transmissions to be made to a biometric matching engine and includes data packet transmission prioritization.

Abstract: A method of generating dynamic password is disclosed. A method of generating a dynamic password comprising the steps of providing a plurality of variable parameters, each parameter from the plurality of variable parameters being variable upon predetermined criteria; providing a plurality of predetermined static parameters; and processing at least some of the plurality of variable parameters and of the predetermined static parameters according to a dynamic password generating equation manipulating at least some of the plurality of variable parameters and of the predetermined static parameters resulting in an ordered sequence of dynamic and static parameters.

Abstract: A method, system and computer program product which allows identification of an enrollment biometric template having a highest probability of matching a sample biometric template from a plurality of enrolled biometric templates without compromising or significantly compromising system security. In one embodiment of the invention, first feature set information is derived from sample and enrollment biometric templates. The first feature set information generally comprises spatially dependent information associated with a fingerprint. The first feature set information is then used to determine which enrollment biometric template has the highest probability of matching the sample biometric template. Second feature set information is then derived from the biometric sample template and the determined enrollment biometric template and used to perform a one-to-one match. The second feature set information generally comprises pattern dependent information associated with a fingerprint.