Methods and apparatuses for performing secure transactions without transmitting biometric information

• US 20030074568A1
• Filed: 10/17/2001
• Published: 04/17/2003
• Est. Priority Date: 10/17/2001
• Status: Abandoned Application

• Current Assignee: Dalton Patrick Enterprises Incorporated
• Original Assignee: Dalton Patrick Enterprises Incorporated
• Inventors: Fisk, Richard W., Kinsella, David J.
• Application Number:
  US09/982,114
• Publication Number:
  US 20030074568A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

Methods, systems, and devices for performing secure transactions with remote computer systems. User authentication acts independently of any remote computer system with which the person may communicate. The authenticating device itself may be registered with remote computer systems with which the user wishes to obtain access. The device need not pass any biometric information to any remote computer system. Instead, biometric authentication may be initiated and completed on the device itself. What is passed from the device to the remote computer system is device-specific information, which identifies the device to the remote computer system.

Claims

1. A biometric passkey device configured to perform one or more transactions with a remote computer system without transmitting any biometric information to that remote computer system, the passkey device being configured to:

(a) authenticate the identity of a user by comparing the user'"'"'s unique biometric information with biometric information stored with the passkey device;

(b) transmit unique passkey device information to the remote computer system to authenticate the identity of the passkey device; and

(c) perform one or more transactions with the remote computer system if the identity of the user is first authenticated by the passkey device and the identity of the passkey device is next authenticated by the remote computer system.

2. The device of claim 1, wherein the device further comprises an authorization profile storage.

3. The device of claim 1, wherein the device further comprises an audit log storage.

4. The device of claim 1, wherein the device further comprises a substance detection sensor.

5. The device of claim 4, wherein the substance detection sensor detects blood alcohol content of the user.

6. The device of claim 1, wherein the unique passkey device information comprises a flag indicating the state of the passkey device.

7. The device of claim 6, wherein the flag indicates whether the device has authenticated the identity of the user.

8. The device of claim 6, wherein the flag indicates the age of the user.

9. The device of claim 1, wherein the device comprises a pointing device.

10. The device of claim 1, wherein the device comprises a personal digital assistant.

11. A system for performing secure transactions between a biometric passkey device and a remote computer system without transmitting any biometric information to that remote computer system, the system comprising:

(a) a biometric passkey device configured to (i) authenticate the identity of a user by comparing the user'"'"'s unique biometric information with biometric information stored with the passkey device; and

(ii) transmit unique passkey device information to the remote computer system; and

(b) a remote computer system configured to (i) authenticate the identity of the passkey device by comparing the unique passkey device information with device information stored on the remote computer system; and

(ii) allow the passkey device to perform one or more transactions on the remote computer system if the identity of the user is first authenticated by the passkey device and the identity of the passkey device is next authenticated by the remote computer system.

12. The system of claim 11, wherein the passkey device comprises a proxy passkey.

13. The system of claim 11, wherein the passkey device further comprises an authorization profile storage.

14. The system of claim 11, wherein the passkey device further comprises an audit log storage.

15. The system of claim 11, wherein the passkey device further comprises a substance detection sensor.

16. The system of claim 11, wherein the unique passkey device information comprises a flag indicating the state of the passkey device.

17. The system of claim 11, wherein the passkey device comprises a pointing device.

18. The system of claim 11, wherein the passkey device comprises a personal digital assistant.

19. The system of claim 11, wherein the remote computer system comprises retail computer system configured to allow users to make purchases.

20. A method for performing secure transactions between a biometric passkey device and a remote computer system without transmitting any biometric information to that remote computer system, the method comprising:

(a) authenticating the identity of a user by comparing the user'"'"'s unique biometric information with biometric information stored with the passkey device;

(b) transmitting unique passkey device information to the remote computer system;

(c) authenticating the identity of the passkey device by comparing the unique passkey device information with device information stored on the remote computer system; and

(d) performing one or more transactions on the remote computer system if the identity of the user is first authenticated by the passkey device and the identity of the passkey device is next authenticated by the remote computer system.

21. The method of claim 20, wherein the passkey device comprises a proxy passkey.

22. The method of claim 20, wherein the passkey device comprises an authorization profile storage.

23. The method of claim 20, wherein the passkey device comprises an audit log storage.

24. The method of claim 20, wherein the passkey device comprises a substance detection sensor.

25. The method of claim 20, wherein the unique passkey device information comprises a flag indicating the state of the passkey device.

26. The method of claim 20, wherein the passkey device comprises a pointing device.

27. The method of claim 20, wherein the passkey device comprises a personal digital assistant.

28. The method of claim 20, wherein the remote computer system comprises retail computer system configured to allow users to make purchases.