System and method for selectively initiating biometric authentication for enhanced security of financial transactions

• US 10,275,768 B2
• Filed: 03/20/2015
• Issued: 04/30/2019
• Est. Priority Date: 01/14/2015
• Status: Active Grant

• Current Assignee: Tactilis Pte. Limited
• Original Assignee: Tactilis Pte. Limited
• Inventors: Gardiner, Michael, Canzi, Adriano
• Primary Examiner(s): Ade, Garcia
• Application Number:
  US14/664,429
• Publication Number:
  US 20160275499A1
• Time in Patent Office: 1,502 Days
• Field of Search: 705 18
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06V 10/95 structured as a network, e.g. client-server architectures
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A method and system of selectively initiation biometric security based on thresholds is described. The method includes determining a transaction amount of a current transaction involving an electronic portable transaction device, retrieving a threshold amount from a data storage device, comparing the transaction amount and threshold amount, and, if the transaction amount matches or exceeds the threshold amount, initiating a biometric authentication process.

Claims

1. A method of selectively initiating biometric authentication for financial transactions involving an electronic portable transaction device comprising a smart card, the electronic portable transaction device including a processing module comprising a physical processor and a biometric authentication module comprising a biometric sensor and a controller, the method comprising:

(a) collecting a first biometric sample from a user using the biometric sensor;

(b) formatting by the controller the user'"'"'s first biometric sample into a template;

(c) storing the template in a memory inside the biometric authentication module;

(d) identifying by the physical processor a transaction amount associated with an electronic transaction involving the electronic portable transaction device;

(e) retrieving by the physical processor a fixed threshold amount associated with the electronic portable transaction device;

(f) comparing by the physical processor the transaction amount and the fixed threshold amount;

(g) determining by the physical processor whether the transaction amount matches or exceeds the fixed threshold amount; and

(h) when the transaction amount matches or exceeds the fixed threshold amount, initiating by the physical processor a biometric authentication process involving the biometric authentication module, wherein the initiating a biometric authentication comprises requesting a user of the electronic portable transaction device to provide a second biometric sample, via the biometric sensor and comparing the second biometric sample to the template stored within the biometric authentication module.

2. The method of claim 1, wherein initiating a biometric authentication comprises requesting biometric data associated with a user from an interface device for facilitating communication between the electronic portable transaction device and payment processing system, wherein the interface device comprises a biometric scanner.

3. The method of claim 1, further comprising receiving by the physical processor a request to conduct an electronic financial transaction.

4. The method of claim 1, wherein a data storage device is located at the electronic portable transaction device, at a payment processing system, or at an interface device for facilitating communication between the electronic portable transaction device and a payment processing system.

13. The method of claim 1, further comprising:

(i) identifying by the physical processor a second transaction amount associated with a second electronic transaction involving the electronic portable transaction device;

(j) retrieving by the physical processor the fixed threshold amount associated with the electronic portable transaction device;

(k) comparing by the physical processor the second transaction amount and the fixed threshold amount;

(l) determining by the physical processor whether the second transaction amount matches or exceeds the fixed threshold amount; and

(m) when the second transaction amount matches or exceeds the fixed threshold amount, initiating by the physical processor a second biometric authentication process involving the biometric authentication module, wherein the initiating a biometric authentication comprises requesting the user of the electronic portable transaction device to provide a third biometric sample, via the biometric sensor and comparing the third biometric sample to the template stored within the biometric authentication module.

5. An electronic portable transaction device comprising a smart card for selectively initiating biometric authentication for financial transactions, comprising:

a biometric authentication module comprising a biometric sensor and a controller;

a processing module comprising a physical processor, configured to execute a program configured to;

(a) identify a transaction amount associated with an electronic transaction involving the electronic portable transaction device,

(b) retrieve a fixed threshold amount associated with the electronic portable transaction device from a data storage device,

(c) compare the transaction amount and the fixed threshold amount,

(d) determine whether the transaction amount matches or exceeds the fixed threshold amount, and

(e) when the transaction amount matches or exceeds the fixed threshold amount, request a user of the electronic portable transaction device to provide a biometric sample via the biometric sensor; and

a memory configured to store the program.

6. The device of claim 5, wherein the data storage device comprises a read only memory unit of the smart card.

7. The device of claim 6, wherein the data storage device and the memory comprise the same component.

8. The device of claim 5, wherein the smart card further comprises a set of contact pads configured to engage with a set of contact pads at an interface device for facilitating communication between the smart card and a payment processing system.

9. The smart card of claim 5, wherein the smart card further comprises a biometric authentication module, comprising a biometric sensor configured to collect a user'"'"'s first biometric sample to be stored in the memory, and a controller configured to process the measured biometric characteristics of the user'"'"'s first biometric sample into a template format and compare the template to a second biometric sample entered through the biometric sensor during authentication.

10. The device of claim 5 further comprising a transceiver configured to engage in wireless data communication with an interface device for facilitating communication between the electronic portable transaction device and a payment processing system.

11. The device of claim 5, wherein the fixed threshold amount is stored in the data storage device located at the interface device, and the processing module is further configured to retrieve the fixed threshold amount from the data storage device.

12. The device of claim 5, wherein the fixed threshold amount is stored in the data storage device located at the payment processing system, and the processing module is further configured to retrieve the fixed threshold amount from the data storage device.

14. The device of claim 5, wherein the physical processor is further configured to execute the program configured to:

(f) identify a second transaction amount associated with a second electronic transaction involving the electronic portable transaction device,

(g) retrieve the fixed threshold amount associated with the electronic portable transaction device from the data storage device,

(h) compare the second transaction amount and the fixed threshold amount,

(i) determine whether the second transaction amount matches or exceeds the fixed threshold amount, and

(j) when the second transaction amount matches or exceeds the fixed threshold amount, request the user of the electronic portable transaction device to provide a second biometric sample via the biometric sensor.