초록 ▼

A system, method and computer program product that utilizes biometric measurements for the authentication of users to enterprise resources. The system includes a biometric server that stores the engine and collections of data required by the system to authenticate users. In the present invention, it

A system, method and computer program product that utilizes biometric measurements for the authentication of users to enterprise resources. The system includes a biometric server that stores the engine and collections of data required by the system to authenticate users. In the present invention, it is the biometric policies that determine the way or method in which a user is to be authenticated by the system. The execution of the biometric policies involves the use of one or more biometric templates. Biometric devices utilize a scientific technique to identify a user based on compared measurements of unique personal characteristics. These measurements, called biometric measurements, may include, but are not limited to, measurements of finger and hand geometry, retina and facial images, weight, DNA data, breath, voice, typing stroke and signature. The biometric policies of the present invention provide flexibility to the level of protection for individual enterprise resources. In an embodiment of the present invention, a method of storing both biometric templates and digital certificates in a hierarchical structure allows for the ease of access to biometric templates and digital certificates. In another embodiment of the present invention, the system of the present invention is implemented as a roaming profile server in a certificate authority system.

대표청구항 ▼

[ What is claimed is:] [1.]1. A method for providing user authentication to enterprise resources, comprising the steps of:(a) setting up a biometric server including placing the user within a biometric group, wherein said biometric group defines one or more users having a specified characteristic, s

[ What is claimed is:] [1.]1. A method for providing user authentication to enterprise resources, comprising the steps of:(a) setting up a biometric server including placing the user within a biometric group, wherein said biometric group defines one or more users having a specified characteristic, said biometric server having stored therein at least two biometric policies that each define different authentication levels, each said authentication level defining a probability that the user is authorized to access the enterprise resources;(b) assigning one of said biometric policies to the user;(c) determining whether the user is authenticated by executing said assigned biometric policy; and(d) indicating that the user may access the enterprise resources if the user passes said assigned biometric policy, otherwise indicating that the user may not access the enterprise resources, wherein said assigned biometric policy is an OR policy having a list of devices, wherein said list of devices includes at least two different biometric devices, and wherein the user passes said OR policy if the user passes one of said biometric devices in said list of devices.