Method and apparatus for secure access payment and identification

• US 10,163,103 B2
• Filed: 07/31/2015
• Issued: 12/25/2018
• Est. Priority Date: 02/21/2006
• Status: Expired due to Fees

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): Ebersman, Bruce I
• Assistant Examiner(s): Anderson, John
• Application Number:
  US14/814,740
• Publication Number:
  US 20160155121A1
• Time in Patent Office: 1,243 Days
• Field of Search: 705 44
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 : Authentication

Abstract

According to one aspect, the invention provides a system for authenticating identities of a plurality of users. In one embodiment, the system includes a first handheld device including a wireless transceiver which is configured to transmit authentication information, a second device including a wireless receiver, where the second device is configured to receive the authentication information.

Claims

1. A system for authenticating a user for enabling a transaction, the system comprising:

a first device including;

a first processor, the first processor programmed to authenticate a user of the first device based on secret information known to the user of the first device and to generate first authentication information and also configured to receive first biometric information of the user of the first device from a biometric sensor and to retrieve information corresponding to previously stored second biometric information of the user of the first device;

a first wireless transceiver coupled to the first processor and programmed to transmit a first wireless signal; and

the biometric sensor configured to capture the first biometric information of the user of the first device; and

wherein the first processor is programmed to generate the first wireless signal including two or more of the first authentication information, at least a portion of at least one of the first biometric information and the second biometric information, and a time varying value subsequent to generation of the first authentication information, to provide the first wireless signal for processing by a second device; and

wherein the first processor is configured to receive an enablement signal indicating an approved transaction from the second device, wherein the enablement signal provided from the second device is based on one of the second device retrieving biometric information associated with the user of the first device from stored biometric information of a plurality of first users stored in a second memory of the second device and generating an indication of biometric authentication or the second device receiving the indication of biometric authentication associated with the user of the first device, and wherein the second device is also configured to use at least a portion of the first wireless signal with the indication of biometric authentication of the user of the first device to complete processing of the transaction, wherein processing of the transaction includes authentication of an identity of the user of the first device to enable the transaction.

2. The system according to claim 1, wherein the first processor is programmed to determine the first authentication information so that the first authentication information is generated based on at least part of the first biometric information or generated based on receiving the first biometric information.

3. The system according to claim 1, further comprising the second device, wherein the first device is configured to communicate with the second device, the second device including:

a second communication interface; and

a second processor coupled to the second communication interface and configured to;

receive the first authentication information of the user of the first device;

retrieve or receive second authentication information of the user of the first device; and

use the first authentication information and the second authentication information to authenticate the user of the first device to enable the transaction.

4. The system according to claim 1, further comprising the second device, wherein the first device is configured to communicate with the second device, the second device including:

a second processor;

a second wireless transceiver coupled to the second processor, and wherein the second processor is configured to;

receive the first authentication information of the user of the first device;

receive second authentication information of the user of the first device; and

use the first authentication information and the second authentication information to authenticate the user of the first device with the second device to enable the transaction.

5. The system of claim 1, wherein the first processor is further configured to compare stored authentication information with the first authentication information of the user and configured to enable the transaction based on a valid comparison.

6. The system of claim 1, further comprising the second device, wherein the first processor is further configured to encrypt the first authentication information to communicate to the second device.

7. The system of claim 1, wherein the first device includes a first memory coupled to the first processor included in the first device and configured to store respective biometric information.

8. The system of claim 1, wherein the first authentication information includes a multidigit public ID code for a credit card account, which a credit card issuer can map to a usable credit card number.

9. The system of claim 1, wherein the first processor is further configured to communicate information associated with the biometric information of the user of the first device.

10. The system of claim 1, wherein the first device includes a user interface coupled to the first processor included in the first device, wherein the first processor is configured to receive the first biometric information of the user of the first device, and wherein the first biometric information is employed by the user of the first device to initiate payment for the transaction.

11. The system of claim 1, wherein the first device is configured to communicate with a networked credit card validation-information entity configured to approve or deny financial transactions based on authentication of the user.

20. The system of claim 1, wherein the first device is configured to communicate with a networked credit card validation-information entity configured to approve or deny financial transactions based on authentication of the user.

21. The system according to claim 1, wherein the first biometric information is identical to the second biometric information.

22. The system according to claim 1, wherein the first biometric information is different than the second biometric information.

12. A system for authenticating a user for enabling a transaction, the system comprising:

a first device including;

a biometric sensor configured to capture first biometric information of the user;

a first processor programmed to;

authenticate a user of the first device based on secret information known to the user;

generate first authentication information;

execute one or both of retrieving second biometric information of the user previously stored and receiving the first biometric information of the user of the first device;

authenticate the user of the first device based on the second biometric information; and

generate a signal including two or more of the first authentication information, at least a portion of at least one of the first biometric information and the second biometric information, and a time varying value,

wherein generating the signal occurs subsequent to generation of the first authentication information; and

a first wireless transceiver coupled to the first processor and programmed to wirelessly transmit the signal to a second device for processing; and

wherein the first processor is further programmed to receive an enablement signal indicating an approved transaction from the second device, wherein the enablement signal is provided from the second device based on acceptance of the signal and use of the signal to enable the transaction.

13. The system according to claim 12, wherein the first processor is programmed to determine the first authentication information so that the first authentication information is generated based on at least part of the first biometric information or generated based on receiving the first biometric information.

14. The system of claim 12, further comprising the second device, wherein the second device is further configured to compare stored authentication information with the first authentication information of the user and configured to enable the transaction based on a valid comparison.

15. The system of claim 12, further comprising the second device, wherein the first processor is further configured to encrypt the first authentication information to communicate to the second device.

16. The system of claim 12, wherein the first device includes a first memory coupled to the first processor and configured to store respective biometric information.

17. The system of claim 12, wherein the first authentication information includes a multidigit public ID code for a credit card account, which a credit card issuer can map to a usable credit card number.

18. The system of claim 12, wherein the first processor is further configured to communicate information associated with biometric information of the user of the first device.

19. The system of claim 12, wherein the first device includes a user interface coupled to the first processor included in the first device, wherein the first processor is configured to receive biometric information of the user of the first device, and wherein the biometric information is employed by the user of the first device to initiate payment for the transaction.

23. The system according to claim 12, wherein the first biometric information is the same as the second biometric information.

24. The system according to claim 12, wherein the first biometric information is different than the second biometric information.