Universal secure registry

• US 10,733,607 B2
• Filed: 10/02/2019
• Issued: 08/04/2020
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): Choo, Johann Y
• Application Number:
  US16/590,872
• Publication Number:
  US 20200034850A1
• Time in Patent Office: 307 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 50/22 Social work or social welfare, e.g. community support activities or counselling services
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 : with central registration
• CPC Class Codes: G16H 10/60 : for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 : using challenge-response

Abstract

According to some aspects of the disclosure, an electronic ID device is configured to allow a user to select an account associated with the user to employ in a transaction. The electronic ID device comprises a biometric sensor configured to receive a biometric input provided by the user, a user interface configured to receive a user input, a communication interface configured to communicate with a secure registry, wherein the communication interface includes a near field communication transceiver, and a processor coupled to the biometric sensor to receive information concerning the biometric input.

Claims

1. An electronic ID device configured to allow a user to select an account associated with the user to employ in a transaction, the electronic ID device comprising:

a biometric sensor configured to receive a biometric input provided by the user;

a user interface configured to receive a user input, the user input including;

secret information known to the user; and

selection information concerning an account selected by the user from one or more accounts associated with the user;

a communication interface configured to communicate with a secure registry, wherein the communication interface includes a near field communication (NFC) transceiver; and

a processor coupled to the biometric sensor to receive information concerning the biometric input, wherein the processor is programmed to;

activate transaction software of the electronic ID device in response to a successful authentication of the user'"'"'s identity, wherein authentication of the user'"'"'s identity is based on at least one of the biometric input and the secret information;

generate a one-time non-predictable value;

obtain a public identifier that corresponds to private account information of the selected user account, wherein the public identifier does not contain any private account information of the selected user account;

generate authentication information from the one-time non-predictable value and the public identifier;

encrypt the authentication information; and

wirelessly communicate the encrypted authentication information to a requesting or receiving device via an authentication signal generated by the communication interface, the authentication signal comprising an NFC signal, such that the secure registry;

receives a transaction request and at least a portion of the encrypted authentication information from the requesting or receiving device, wherein the transaction request involves the selected user account;

decrypts the encrypted authentication information;

verifies the decrypted authentication information without using the private account information;

uses the public identifier from the encrypted authentication information to acquire the private account information of the selected user account; and

generates an enablement signal to enable the transaction request without transmitting the private account information.

2. The electronic ID device of claim 1, wherein the communication interface is configured to communicate with the secure registry either directly or via an intermediate device.

3. The electronic ID device of claim 1, wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via an induced signal generated by the communication interface.

4. The electronic ID device of claim 1, wherein the NFC signal is generated by NFC transceiver of the communication interface.

5. The electronic ID device of claim 1, wherein the communication interface further includes a magnetic stripe emulator.

6. The electronic ID device of claim 5, wherein the processor is further programmed to wirelessly communicate encrypted authentication information to the requesting or receiving device via a time-varying signal which emulates data provided by a magnetic-stripe card to a magnetic card reader, the time-varying signal generated by the magnetic stripe emulator of the communication interface.

7. The electronic ID device of claim 1, wherein in activating the transaction software of the electronic ID device, the processor is further programmed to render stored data legible.

8. The electronic ID device of claim 1, wherein the encrypted authentication information is one-time encrypted authentication information.

9. The electronic ID device of claim 1, wherein the communication interface is configured to communicate the encrypted authentication information to the secure registry, where the secure registry comprises a secure token database storing one or more tokens associated with the authentication information.

10. An electronic ID device configured to allow a user to select an account associated with the user to employ in a transaction, the electronic ID device comprising:

a biometric sensor configured to receive a biometric input provided by the user;

a user interface configured to receive a user input, the user input including;

secret information known to the user; and

selection information concerning an account selected by the user from one or more accounts associated with the user;

a communication interface configured to communicate with a secure registry, wherein the communication interface includes a magnetic stripe emulator; and

a processor coupled to the biometric sensor to receive information concerning the biometric input, wherein the processor is programmed to;

activate transaction software of the electronic ID device in response to a successful authentication of the user'"'"'s identity, wherein authentication of the user'"'"'s identity is based on at least one of the biometric input and the secret information;

generate a one-time non-predictable value;

obtain a public identifier that corresponds to private account information of the selected user account, wherein the public identifier does not contain any private account information of the selected user account;

generate authentication information from the one-time non-predictable value and the public identifier;

encrypt the authentication information; and

wirelessly communicate the encrypted authentication information to a requesting or receiving device via an authentication signal generated by the communication interface, the authentication signal comprising a time-varying signal which emulates data provided by a magnetic-stripe card to a magnetic card reader, such that the secure registry;

receives a transaction request and at least a portion of the encrypted authentication information from the requesting or receiving device, wherein the transaction request involves the selected user account;

decrypts the encrypted authentication information;

verifies the decrypted authentication information without using the private account information;

uses the public identifier from the decrypted authentication information to acquire the private account information of the selected user account; and

generates an enablement signal to enable the transaction request without transmitting the private account information.

11. The electronic ID device of claim 10, wherein the communication interface is configured to communicate with the secure registry either directly or via an intermediate device.

12. The electronic ID device of claim 10, wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via an induced signal generated by the communication interface.

13. The electronic ID device of claim 10, wherein the time-varying signal is generated by the magnetic stripe emulator of the communication interface.

14. The electronic ID device of claim 10, wherein the processor is further programmed to wirelessly communicate encrypted authentication information to the requesting or receiving device via a near field signal generated by the communication interface.

15. The electronic ID device of claim 10, wherein the processor is further programmed to wirelessly communicate encrypted authentication information to the requesting or receiving device via a Bluetooth™

wireless technology standard signal.

16. The electronic ID device of claim 10, wherein in activating the transaction software of the electronic ID device, the processor is further programmed to render stored data legible.

17. The electronic ID device of claim 10, wherein the encrypted authentication information is one-time encrypted authentication information.

18. The electronic ID device of claim 10, wherein the communication interface is configured to communicate the encrypted authentication information to the secure registry, where the secure registry comprises a secure token database storing one or more tokens associated with the authentication information.

19. An electronic ID device configured to allow a user to select an account associated with the user to employ in a transaction, the electronic ID device comprising:

a biometric sensor configured to receive a biometric input provided by the user;

a user interface configured to receive a user input, the user input including;

secret information known to the user; and

selection information concerning an account selected by the user from one or more accounts associated with the user;

a communication interface configured to communicate with a secure registry, wherein the communication interface includes a Bluetooth™

or Bluetooth™

Low Energy transceiver; and

a processor coupled to the biometric sensor to receive information concerning the biometric input, wherein the processor is programmed to;

activate transaction software of the electronic ID device in response to a successful authentication of the user'"'"'s identity, wherein authentication of the user'"'"'s identity is based on at least one of the biometric input and the secret information;

generate a one-time non-predictable value;

obtain a public identifier that corresponds to private account information of the selected user account, wherein the public identifier does not contain any private account information of the selected user account;

generate authentication information from the one-time non-predictable value and the public identifier;

encrypt the authentication information; and

wirelessly communicate the encrypted authentication information to a requesting or receiving device via an authentication signal generated by the communication interface, the authentication signal comprising a Bluetooth™

or Bluetooth™

Low Energy signal, such that the secure registry;

receives a transaction request and at least a portion of the encrypted authentication information from the requesting or receiving device, wherein the transaction request involves the selected user account;

decrypts the encrypted authentication information;

verifies the decrypted authentication information without the private account information;

uses the public identifier from the decrypted authentication information to acquire the private account information of the selected user account; and

generates an enablement signal to enable the transaction request without transmitting the private account information.

20. The electronic ID device of claim 19, wherein the communication interface is configured to communicate with the secure registry either directly or via an intermediate device.

21. The electronic ID device of claim 19, wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via an induced signal generated by the communication interface.

22. The electronic ID device of claim 19, wherein the Bluetooth™

or Bluetooth™

Low Energy signal is generated, respectively, by the Bluetooth™

or Bluetooth™

Low Energy transceiver of the communication interface.

23. The electronic ID device of claim 19, wherein the communication interface further includes one or more of:

a magnetic stripe emulator; and

a near field communication (NFC) transceiver.

24. The electronic ID device of claim 23, wherein the processor is further programmed to wirelessly communicate encrypted authentication information to the requesting or receiving device via one or more of:

a time-varying signal which emulates data provided by a magnetic-stripe card to a magnetic card reader, the time-varying signal generated by the magnetic stripe emulator of the communication interface; and

an NFC signal generated by the NFC transceiver of the communication interface.

25. The electronic ID device of claim 19, wherein in activating the transaction software of the electronic ID device, the processor is further programmed to render stored data legible.

26. The electronic ID device of claim 19, wherein the encrypted authentication information is one-time encrypted authentication information.

27. The electronic ID device of claim 19, wherein the communication interface is configured to communicate the encrypted authentication information to the secure registry, where the secure registry comprises a secure token database storing one or more tokens associated with the authentication information.