Systems and methods for tokenless authentication of consumers during payment transactions

• US 10,475,032 B2
• Filed: 01/26/2018
• Issued: 11/12/2019
• Est. Priority Date: 10/29/2013
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Ghosh, Debashis, Shuken, Randy, Lesbirel, Mary Elizabeth
• Primary Examiner(s): Norman, Samica L
• Application Number:
  US15/880,742
• Publication Number:
  US 20180150847A1
• Time in Patent Office: 655 Days
• Field of Search: 705 44, 705 50, 705 18, 705 736, 705348, 705 39, 37920201, 382124, 380229
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

A computer-implemented method for tokenless authentication of a paying consumer during a payment transaction uses a computing device having a processor and a memory. The method includes receiving a plurality of biometric data sets for a plurality of consumers. Each biometric data set includes at least a biometric image of a consumer and an associated payment account identifier. The method also includes receiving, from a first biometric input device communicatively coupled to the processor, a first biometric image of the paying consumer including an iris image. The method further includes determining a payment account associated with the paying consumer based on at least the first biometric image and the plurality of biometric data sets. The method also includes authenticating use of the payment account by the paying consumer for a payment transaction at the retail location by comparing the first biometric image to the plurality of biometric data sets.

Claims

1. A consumer biometric authentication apparatus, comprising:

a processing unit configured to authenticate, for a payment transaction executed by a point of sale device at a retail location, a use of a payment account by a visiting consumer physically present at the retail location;

a memory communicatively coupled to the processing unit, wherein the memory has stored therein (i) a biometric data set for a first consumer, the biometric data set including at least one biometric image of the first consumer, and (ii) a payment account identifier associated with the first consumer;

a communication interface in operable communication with the processing unit, and configured to (i) receive an iris image of the visiting consumer from an iris recognition device proximate an entrance to the retail location, (ii) transmit the received iris image to the processing unit, wherein the processing unit authenticates the use of the payment account upon matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer, authenticating the visiting consumer as the first consumer; and

a media output component configured to, upon authentication of the use of the payment account, present identifying information of the first consumer to the point of sale device prior to completion of the payment transaction.

2. The consumer biometric authentication apparatus of claim 1, wherein the biometric data set for the first consumer further includes an authorized tokenless passcode, and wherein the communication interface in operable communication with the processing unit is further configured to:

receive, from the visiting consumer, a tokenless passcode; and

transmit the received tokenless passcode to the processing unit, wherein the processing unit authenticates the use of the payment account by comparing the received tokenless passcode to the authorized tokenless passcode associated with the payment account.

3. The consumer biometric authentication apparatus of claim 1, wherein the processing unit is further configured to authenticate the use of the payment account by the visiting consumer without use of any physical identification token.

4. The consumer biometric authentication apparatus of claim 1, wherein the processing unit is further configured to authenticate the use of the payment account by the visiting consumer without use of any physical portable item for storing payment account data.

5. The consumer biometric authentication apparatus of claim 1, wherein the communication interface in operable communication with the processing unit is further configured to:

receive, from a biometric input device proximate to the point of sale device, a biometric image of the visiting consumer, the biometric input device being different from the iris recognition device; and

transmit the received biometric image to the processing unit, wherein the processing unit authenticates use of the payment account by the visiting consumer using at least the received biometric image.

6. The consumer biometric authentication apparatus of claim 1, wherein the processing unit is further configured to receive the iris image while the visiting consumer is near a point of entry of the retail location.

7. The consumer biometric authentication apparatus of claim 1, wherein the processing unit is further configured to authenticate the use of the payment account by:

creating a list of consumers physically present at the retail location based at least in part on a corresponding iris image for each consumer physically entering the retail location, the list including the visiting consumer;

transmitting the list to the media output component, wherein the media output component presents the list to the point of sale device for display prior to completion of the payment transaction;

verifying, using the list, that the visiting consumer is at the retail location during the payment transaction; and

authenticating the use of the payment account by matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer.

8. The consumer biometric authentication apparatus of claim 1, wherein the identifying information of the first consumer includes at least one of payment account information, a name of the first consumer, and a picture of the first consumer, and wherein the media output component is further configured to:

receive, from the visiting consumer, a tokenless input verifying the identifying information of the first consumer presented to the point of sale device; and

transmit the received tokenless input to the processing unit, wherein the processing unit authenticates the use of the payment account by comparing the received tokenless input to stored information associated with the first consumer.

9. A computer-implemented method to authenticate, for a payment transaction executed by a point of sale device at a retail location, a use of a payment account by a visiting consumer physically present at the retail location, said method implemented using a consumer biometric authentication apparatus having a processor and a memory, said method comprising:

receiving, in the memory, (i) a biometric data set for a first consumer, the biometric data set including at least one biometric image of the first consumer, and (ii) a payment account identifier associated with the first consumer;

receiving an iris image of the visiting consumer from an iris recognition device proximate an entrance to the retail location and in communication with the processor;

authenticating the use of the payment account upon matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer, authenticating the visiting consumer as the first consumer; and

presenting identifying information of the first consumer to the point of sale device prior to completion of the payment transaction.

10. The method of claim 9, wherein the biometric data set for the first consumer further includes an authorized tokenless passcode, and wherein the method further comprises:

receiving, from the visiting consumer, a tokenless passcode; and

authenticating use of the payment account by comparing the tokenless passcode to the authorized tokenless passcode associated with the payment account.

11. The method of claim 9, wherein authenticating the use of the payment account comprises authenticating the visiting consumer without use of any physical identification token.

12. The method of claim 9 further comprising:

receiving, from a biometric input device different from the iris recognition device, a biometric image of the visiting consumer proximate to the point of sale device used for processing the payment transaction; and

authenticating use of the payment account by the visiting consumer using at least the received biometric image.

13. The method of claim 9 further comprising receiving the iris image while the visiting consumer is near a point of entry of the retail location.

14. The method of claim 9, wherein authenticating the use of the payment account further comprises:

creating a list of consumers physically present at the retail location based at least in part on a corresponding iris image for each consumer physically entering the retail location, the list including the visiting consumer;

transmitting the list to the point of sale device for display prior to completion of the payment transaction;

verifying, using the list, that the visiting consumer is at the retail location during the payment transaction; and

authenticating the use of the payment account by matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer.

15. The method of claim 9 wherein the identifying information of the first consumer includes at least one of payment account information, a name of the first consumer, and a picture of the first consumer, and wherein the method further comprises:

receiving, from the visiting consumer, a tokenless input verifying the identifying information of the first consumer presented to the point of sale device; and

authenticating the use of the payment account by comparing the received tokenless input to stored information associated with the first consumer in the memory.

16. A non-transitory computer-readable storage media having computer-executable instructions embodied thereon for authenticating a use of a payment account during a payment transaction executed by a point of sale device at a retail location by a visiting consumer physically present at the retail location, wherein when executed by at least one processor of a computing device, the computer-executable instructions cause the at least one processor to:

receive (i) a biometric data set for a first consumer, the biometric data set including at least one biometric image of the first consumer, and (ii) a payment account identifier associated with the first consumer;

receive an iris image of the visiting consumer from an iris recognition device proximate an entrance to the retail location and in communication with the processor;

authenticate the use of the payment account upon matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer, authenticating the visiting consumer as the first consumer; and

present identifying information of the first consumer to the point of sale device prior to completion of the payment transaction.

17. The computer-readable storage media of claim 16, wherein the biometric data set for the first consumer further includes an authorized tokenless passcode, and wherein the computer-executable instructions further cause the at least one processor to:

receive, from the visiting consumer, a tokenless passcode; and

authenticate use of the payment account by comparing the tokenless passcode to the authorized tokenless passcode associated with the payment account.

18. The computer-readable storage media of claim 16, wherein the computer-executable instructions further cause the at least one processor to authenticate the visiting consumer without use of any physical identification token.

19. The computer-readable storage media of claim 16, wherein the computer-executable instructions further cause the at least one processor to:

receive, from a biometric input device different from the iris recognition device, a biometric image of the visiting consumer proximate to a point of sale of the payment transaction; and

authenticate use of the payment account by the visiting consumer using at east the received biometric image.

20. The computer-readable storage media of claim 16, wherein the computer-executable instructions further cause the at least one processor to authenticate the visiting consumer by:

creating a list of consumers physically present at the retail location based at least in part on a corresponding iris image for each consumer physically entering the retail location, the list including the visiting consumer;

transmitting the list to the point of sale device for display prior to completion of the payment transaction;

verifying, using the list, that the visiting consumer is at the retail location during the payment transaction; and

authenticating the use of the payment account by matching the received iris image of the visiting consumer with the at least one biometric image of the first consumer.