System and method for platform-independent biometrically verified secure information transfer and access control

Abstract

The inventive data processing system and method enable verifiable secure transfer of information between two or more parties, each having access to at least one identity verification system, utilizing a platform-independent architecture to enable verification of identities of parties sending and receiving secured (e.g., encrypted) information, and ensuring that only an authorized receiving party gains access to the secured information, regardless of the type, model, ownership and/or quantity of biometric identity verification (BIV) systems being utilized by each party. In one embodiment of the inventive system and method, parties desiring to securely transfer information between one another register at a central security management system, and each provide one or more biometric enrollments. Thereafter, the inventive system also enables any registered party to send biometrically (and otherwise) secured information to the other party utilizing any available BIV system (or systems) that is compatible with one or more of their registered biometric enrollments, regardless of BIV system ownership, and without requiring local enrollment. In another embodiment of the inventive system and method, a party registered with the system that owns certain secured content is able to selectively designate identities of one or more registered parties that are authorized to access the secured content and/or a portion thereof, upon verification of identity, and optionally provide one or more rules of varying complexity governing such access.

1 . A data processing method for biometrically verifying at least one aspect of a transfer of information between a first party and a second party, comprising the steps of: 
 (a) indicating, by the first party to a biometric security management system, that the second party is an intended recipient of the information;    (b) causing, by the first party utilizing a first information transfer system, operable to receive and transmit the information and comprising a first at least one biometric identity verification system, the information to be made available to the second party;    (c) accessing, by the second party utilizing a second information transfer system, operable to receive and transmit the information and comprising a second at least one biometric identity verification system, the information; and    (d) verifying, by said security management system, an identity of at least one of the first and second parties to the other party, utilizing a corresponding at least one of said at least first, and at least second biometric identity verification system.    
   
   
       2 . The data processing method of  claim 1 , wherein the information comprises at least one of: text, image, audio, video, transactional information, instrument readings, sensor readings, link to other information, biometric information, and executable program instructions.  
   
   
       3 . The data processing method of  claim 1 , wherein: 
 said step (b) further comprises the step of: 
 (e) transmitting the information, by said first information transfer system to said second information transfer system, through a communication link therebetween; and  
   wherein said step (c) further comprises the step of: 
 (f) receiving the information, by said second information transfer system from said first information transfer system, through said communication link therebetween.  
   
   
   
       4 . The data processing method of  claim 1 , wherein: 
 said step (b) further comprises the step of: 
 (g) storing the information, in a information storage system operable to communicate with said second information transfer system, through a communication link therebetween; and  
   wherein said step (c) further comprises the step of: 
 (h) accessing said stored information, by said second information transfer system, through said communication link therebetween.  
   
   
   
       5 . The data processing method of  claim 1 , further comprising the steps of: 
 (i) prior to said step (b), securing the information, by restricting access thereto, in accordance with at least one access criteria;    wherein said step (b) further comprises the step of: (j) providing the second party with access data indicative of at least one action necessary to meet said at least one access criteria; and    (k) prior to said step (c) and as a prerequisite for performance thereof, meeting said at least one access criteria, by the second party.    
   
   
       6 . The data processing method of  claim 1 , wherein each of said at least one first, and at least one second biometric identity verification systems are operable to verify the identity of a corresponding one of the first or second party, by acquiring at least one biometric characteristic thereof, said at least one biometric characteristic being selected from a group comprising: a human fingerprint, a human facial feature, a human voice, a human speech pattern, a human movement pattern, a human blood vessel pattern, a human retina, a human iris feature, human DNA, human hand grip dynamic, human odor, human ear structure, and a human writing style.  
   
   
       7 . The data processing method of  claim 1 , wherein each of the first, and the second parties, comprises at least one of: at least one individual, and at least one group.  
   
   
       8 . The data processing method of  claim 1 , further comprising the steps of: 
 (l), prior to said step (a), generating a unique identification record for each of the first and second parties, by said biometric security management system, comprising the steps of: 
 (m) providing, for each of the first and second parties to said biometric security management system, identification data representative of said identity thereof;  
 (n) providing, for each of the first and second parties to said biometric security management system, at least one baseline biometric identifier representative of that party's at least one biometric characteristic and acquired therefrom by a corresponding one of said at least one first, and at least one second biometric identity verification systems; and  
 (o) storing, for each of the first and second parties, said identification data and said at least one baseline biometric identifier in said unique identification record.  
   
   
   
       9 . The data processing method of  claim 8 , wherein said step (a) further comprises the steps of: 
 (p) acquiring, by at least one third biometric identity verification system from the first party, a first at least one biometric identifier;    (q) providing said first at least one biometric identifier to said biometric security management system;    (r) comparing, by said biometric security management system, said first at least one biometric identifier with said first at least one baseline biometric identifier stored in said first identification record, in accordance with first at least one predetermined identification criteria, to verify said identity of the first party; and    (s) when said identity of the first party is verified at said step (r), proceeding to said step (b), and otherwise indicating a rejection of said first at least one biometric identifier to the first party, and only proceeding to said step (b), when said identity of the first party is verified at said step (r).    
   
   
       10 . The data processing method of  claim 9 , wherein said at least one third biometric identity verification system comprises at least one of: said first at least one biometric identity verification system, said second at least one biometric identity verification system, and at least one other biometric identity verification system.  
   
   
       11 . The data processing method of  claim 9 , wherein said step (b) further comprises the step of: 
 (t) providing confirmation, by said biometric security management system to the second party, of said verified identity of the first party as a provider of the information, in conjunction with the information being made available to the second party.    
   
   
       12 . The data processing method of  claim 8 , further comprising the steps of: 
 (u) after said step (b), but prior to said step (c), acquiring, by a fourth at least one biometric identity verification system from the second party, a second at least one biometric identifier;    (v) providing said second at least one biometric identifier to said biometric security management system;    (w) comparing, by said biometric security management system, said second at least one biometric identifier with said second at least one baseline biometric identifier stored in said second identification record, in accordance with second at least one predetermined identification criteria, to verify said identity of the second party; and    (x) when said identity of the second party is verified at said step (w), proceeding to said step (c), and otherwise performing the following step: 
 (y) indicating a rejection of said second at least one biometric identifier to the second party, and only proceeding to said step (c) when said identity of the second party is verified at said step (w).  
   
   
   
       13 . The data processing method of  claim 12 , wherein said at least one fourth biometric identity verification system comprises at least one of: said first at least one biometric identity verification system, said second at least one biometric identity verification system, and at least one other biometric identity verification system.  
   
   
       14 . The data processing method of  claim 12 , wherein said step (b) further comprises the step of: 
 (z) after said step (c), providing confirmation, by said biometric security management system to the first party, of said verified identity of the second party and of the second party's access to the information.    
   
   
       15 . The data processing method of  claim 12 , further comprising the steps of: 
 (aa) prior to said step (b), securing the information, by restricting access thereto, in accordance with at least one access criteria, wherein said at least one criteria, comprises a primary access criteria of enabling access to the information by the second party only upon successful verification of said identity of the second party;    (bb) in conjunction with said step (b), providing the second party with access data indicative of at least one action necessary to meet said at least one access criteria, wherein said step (x) further comprises the step of:    (cc) when said identity of the second party is verified at said step (w), prior proceeding to said step (c), releasing access to said secured information to the second party.    
   
   
       16 . The data processing method of  claim 15 , further comprising the steps of: 
 (dd) prior to said step (aa), defining, by the first party for the information being made available at said step (b), said at least one access criteria, such that said at least one access criteria comprises at least one other access criteria in addition to said primary access criteria.    
   
   
       17 . The data processing method of  claim 16 , further comprising the steps of: 
 (ee) after step (dd) storing said at least one access criteria in said first identification record, such that said at least one access criteria may be selectively or automatically applied to all subsequent information being made available by the first party.    
   
   
       18 . The data processing method of  claim 8 , wherein said step (d) further comprises the steps of: 
 (ff) recording, by said biometric security management system in at least one of said first and said second identification records, data indicative of at least a portion of: actions of the first party relating to performance of said steps (a) to (d); actions of the second party relating to performance of said step (c), results of performance of all steps prior to and including said step (c).    
   
   
       19 . The data processing method of  claim 8 , wherein each of said first and second identification records, and all contents thereof, are accessible to the corresponding first, and second party.  
   
   
       20 . The data processing method of  claim 8 , comprising the steps of: 
 (gg) after said step (l), providing by the first party to said biometric security management system, a first at least one additional baseline biometric identifier representative of the first party's at least one additional biometric characteristic and acquired therefrom by a first at least one other biometric identity verification system; and    (hh) storing said first at least one additional baseline biometric identifier in said first at least one baseline biometric identifier.    
   
   
       21 . The data processing method of  claim 8 , comprising the steps of: 
 (jj) after said step (l), providing by the second party to said biometric security management system, a second at least one additional baseline biometric identifier representative of the second party's at least one additional biometric characteristic and acquired therefrom by a second at least one other biometric identity verification system; and    (kk) storing said second at least one additional baseline biometric identifier in said second at least one baseline biometric identifier.    
   
   
       22 . The data processing method of  claim 1 , wherein each of said first and said second information transfer systems is selected from a group of: at least one computer, and at least one mobile communication device.  
   
   
       23 . A data processing system for biometrically verifying at least one aspect of a transfer of information between a first party and a second party, comprising: 
 a first information transfer system, operable to transmit and receive the information, comprising a first at least one biometric identity verification system,    a second information transfer system, operable to receive and transmit the information comprising a second at least one biometric identity verification system, and operable to communicate with said first information transfer system through a first at least one communication link, and    a biometric security management system, operable to communicate with said first and said second information transfer systems through a second at least one communication link, wherein said first information transfer system is further operable by the first party to: (1) indicate the second party as an intended recipient of the information, and (2) cause the information to be made available to the second party, wherein said second information transfer system is operable by the second party to accessing the information, and wherein said biometric security management system, is operable to verify an identity of at least one of the first and second parties to the other party when the second party accesses the information.