Methods and apparatus for providing biometric authentication and authorization services
Methods and apparatus are described which allow different companies, individuals and/or government entities to use biometric security and/or access systems or services without having to store biometric information for individuals on a ongoing basis and/or to perform a comparison between recently captured biometric information corresponding to an individual seeking access to a location or a service. In various embodiments a biometric server is used to control access to stored biometric information where the server and/or database storing the biometric server are located remotely, e.g., at a central location, physically remote from the sites where access to locations and/or services are provided. The storage and use of the biometric information can be and often is implemented and controlled by a separate company from the company using the server to determine whether access or a service should be provided to an individual.
1 . A method of providing a biometric service, the method comprising:
receiving, at a service provider system, a purchase order, said purchase order being for an individual to whom a purchased service is to be provided, but whose identity is unknown to the service provider system at the time of the purchase order;
sending, from the service provider system, a provisioning message to a biometric server, said provisioning message including an identifier which can be used to associate, at a later time, biometric information with the purchased service to be provided;
receiving, at the biometric server, said provisioning message including said identifier;
providing the individual, to whom the purchased service is to be provided, said identifier;
receiving at the biometric server, from a user device, subsequent to receiving said provisioning message and subsequent to the individual, to whom the purchased service is to be provided, being provided with said identifier, first user registration information including said identifier and first user provided biometric information corresponding to a first individual user, said first individual user being the individual to whom the purchased service is to be provided, said first individual user registering with said biometric server without disclosure of a real name of the first individual user who will be using the purchased service;
storing the first user provided biometric information in a storage device;
receiving a first query including first captured biometric information from a first remote system, said first remote system being one of a plurality of systems to which the biometric server provides identification services;
performing, at the biometric server, a first identification operation on the first captured biometric information, said first identification operation being based on at least the first captured biometric information or features extracted from the first captured biometric information and the first user provided biometric information included in said received first user registration information with said identifier; and
returning to the first remote system a first query response, said first query response being a function of whether the first identification operation indicates a match between the first user provided biometric information included in said received first user registration information with said identifier and the first captured biometric information, said first query response indicating that access to the purchased service should be granted when the first identification operation indicates that there is a match between the first user provided biometric information included in the received first user registration information with said identifier and the first captured biometric information.
2 . The method of claim 1 ,
wherein said identifier is a ticket number; and
wherein the method further comprises:
storing, in said biometric server, first biometric information use authorization information provided by the first individual user, said first biometric information use authorization information indicating businesses for which the first user provided biometric information can be used.
3 . The method of claim 1 , further comprising:
receiving, at the biometric server, a delete biometric information request from the first individual user; and
automatically deleting, at the biometric server, the first user provided biometric information in response to the received delete biometric information request.
4 . The method of claim 3 , further comprising:
detecting a security breach at the biometric server; and
informing the first individual user of the detected security breach.
5 . The method of claim 1 ,
wherein said identifier is a ticket number;
wherein the first remote system includes a first sensor for capturing said first captured biometric information, the method further comprising:
operating the first sensor to capture biometric information corresponding an individual seeking entry to an area or seeking to obtain a service; and
communicating the captured biometric information to the biometric server as part of the first query.
6 . The method of claim 5 ,
wherein said first service is a park service; and
wherein the first query includes information identifying the first remote system from which the first query is sent.
7 . The method of claim 6 , wherein the first remote system is an amusement park system used to control access to an amusement park service.
8 . The method of claim 6 , wherein the first remote system is a home security alarm system located in a home of the first individual user.
9 . The method of claim 6 , wherein the first remote system is an employer business system used by an employer of the first individual user to control access to a business site.
10 . The method of claim 9 , wherein a record stored in the biometric server indicates that the first individual user has authorized the use of the first user provided biometric information to be used for identification services provided for the first individual user's home security system, a first employer system of a first employer who employs the first individual user and at least one amusement park system.
11 . The method of claim 10 , wherein the biometric server stores multiple different types of biometric information corresponding to the first individual user, said different types of biometric information including: a voice sample, a handwriting sample, a face image, hand shape information or feature information.
12 . The method of claim 1 , wherein the user device is a smartphone or tablet device.
13 . The method of claim 1 , wherein the user device is a laptop or another communications device via which a user can communicate information with other devices.
14 . A system comprising:
a service provider system configured to:
receive a purchase order, said purchase order being for an individual to whom a purchased service is to be provided, but whose identity is unknown to the service provider system at the time of the purchase order;
send a provisioning message to a biometric server, said provisioning message including an identifier which can be used to associate, at a later time, biometric information with the purchased service to be provided;
provide the individual, to whom the purchased service is to be provided, said identifier; and
said biometric server including:
a first receiver;
a first transmitter;
a storage device; and
a first processor configured to:
operate the biometric server to receive said provisioning message including said identifier from the service provider system;
operate the biometric server to receive, from a user device, subsequent to receiving said provisioning message and subsequent to the individual, to whom the purchased service is to be provided, being provided with said identifier, first user registration information including said identifier and first user provided biometric information corresponding to a first individual user, said first individual user being the individual to whom the purchased service is to be provided, said first individual user registering with said biometric server without disclosure of a real name of the first individual user who will be using the purchased service;
store the first user provided biometric information in said storage device;
operate the biometric server to receive a first query including first captured biometric information from a first remote system, said first remote system being one of a plurality of systems to which the biometric server provides identification services;
perform, at the biometric server, a first identification operation on the first captured biometric information, said first identification operation being based on at least the first captured biometric information or features extracted from the first captured biometric information and the first user provided biometric information included in said received first user registration information with said identifier; and
operate the biometric server to return to the first remote system a first query response, said first query response being a function of whether the first identification operation indicates a match between the first user provided biometric information included in said received first user registration information with said identifier and the first captured biometric information, said first query response indicating that access to the purchased service should be granted when the first identification operation indicates that there is a match between the first user provided biometric information included in the received first user registration information with said identifier and the first captured biometric information.
15 . The system of claim 14 ,
wherein said identifier is a ticket number; and
wherein said first processor is further configured to:
store, in said server storage device, first biometric information use authorization information provided by the first individual user, said first biometric information use authorization information indicating businesses for which the first user provided biometric information can be used.
16 . The system of claim 14 , wherein said first processor is further configured to:
operate the biometric server to receive a delete biometric information request from the first individual user; and
automatically delete, at the biometric server, the first user provided biometric information in response to the received delete biometric information request.
17 . The system of claim 16 , wherein said first processor is further configured to:
detect a security breach at the biometric server; and
operate the biometric server to inform the first individual user of the detected security breach.
18 . The system of claim 14 ,
wherein said identifier is a ticket number;
wherein said system includes said first remote system; and
wherein the first remote system includes:
a first sensor for capturing said first captured biometric information;
a second transmitter; and
a second processor configured to:
operate the first sensor to capture biometric information corresponding an individual seeking entry to an area or seeking to obtain a service; and
operate the first remote system to communicate the captured biometric information to the biometric server as part of the first query.
19 . The system of claim 18 ,
wherein said first service is a park service; and
wherein the first query includes information identifying the first remote system from which the first query is sent.
20 . The system of claim 19 ,
wherein the first remote system is an amusement park system used to control access to an amusement park service.