Tokenless electronic transaction system

• US 20040020982A1
• Filed: 07/14/2003
• Published: 02/05/2004
• Est. Priority Date: 11/28/1994
• Status: Active Grant

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Indivos Corporation (Solidus Networks Incorporated)
• Inventors: Hoffman, Ned, Lee, Jonathan Alexander, Pare, David Ferrin Jr.
• Granted Patent: US 6,985,608 B2
• Time in Patent Office: Days
• US Class Current: 235/379
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/04 : Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06V 40/1365 : Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/33 : by means of a password
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

The invention as described provides a method and system for tokenless authorization of commercial transactions between a buyer and a seller using a computer system. The method comprises the steps of registering a buyer, wherein the buyer registers with the computer system a PIN, at least one registration biometric sample, and at least one buyer financial account. The method also includes a seller registration step, wherein the seller registers with the computer system at least one seller financial account. In a proposal step, the seller offers a proposed commercial transaction to the buyer usually comprising price information. If the buyer accepts the seller'"'"'s proposal, in an acceptance step, the buyer signals his/her acceptance by adding to the proposed commercial transaction the buyer'"'"'s personal authentication information comprising a PIN and at least one bid biometric sample which is obtained from the buyer'"'"'s person. In a transmission step, the bid biometric sample and PIN are forwarded to the computer system. The computer system compares the bid biometric sample with registration biometric samples for producing either a successful or failed identification of the buyer in a buyer identification step. Upon determination of sufficient resources, a financial account of the buyer is debited and a financial account of the seller is credited, in a payment step. Therefore, a commercial transaction is conducted without the buyer having to use any portable man-made memory devices such as smartcards or swipe cards.

Claims

1. A method for tokenless authorization of a financial transaction between a payor and a payee using an electronic identicator and at least one payor bid biometric sample, said method comprising the steps of:

a. a payor registration step, wherein the payor registers with an electronic identicator at least one registration biometric sample and at least one payor account data;

b. a transaction formation step, wherein the financial transaction is formed between the payor and the payee, comprising at least one payor bid biometric sample, wherein the bid biometric sample is obtained from the payor'"'"'s person;

c. at least one transmission step, wherein the payor bid biometric sample is electronically forwarded to the electronic identicator;

d. an identification step, wherein the electronic identicator compares the payor bid biometric sample with at least one registered biometric sample for accessing the payor'"'"'s previously registered account data; and

e. a transaction payment step, wherein payor pays payee without the payor presenting smart cards or magnetic swipe cards;

2. A voluntary tokenless identification computer system for determining an individual'"'"'s identity from an examination of at least one bid biometric sample and a bid personal identification code gathered during a bid step, and comparison with previously recorded registration biometric samples and registration personal identification codes gathered during a registration step, said system comprising:

a. at least one computer;

b. first gathering means for voluntary input of at least one registration biometric sample and a registration personal identification code from an individual during the registration step;

c. second gathering means for voluntary input of at least one bid biometric sample and bid personal identification code, from an individual during a bid step;

d. first interconnecting means for interconnecting said first and second gathering means to said computer for transmitting the gathered biometric samples and personal identification codes from said first and second gathering means to said computer;

e. means for storing a plurality of registration biometric samples;

f. means for associating a subset of the stored registration biometric samples with a registration personal identification code;

g. means for comparison of a bid biometric sample with the registration biometric samples associated with the registration personal identification code corresponding to the bid personal identification code, for producing an evaluation;

h. execution means within said computer for storage of data and processing and execution of commands for producing a determination; and

i. means for output of said evaluation, or determination, from said computer.

3. A voluntary tokenless identification computer system for determining an individual'"'"'s identity from an examination of at least one bid biometric sample gathered during a bid step, and comparison with previously recorded registration biometric samples gathered during a registration step, said system comprising:

a. at least one computer;

b. first gathering means for voluntary input of at least one registration biometric sample from an individual during the registration step;

c. second gathering means for voluntary input of at least one bid biometric sample, from an individual during a bid step;

d. first interconnecting means for interconnecting said first and second gathering means to said computer for transmitting the gathered biometric samples from said first and second gathering means to said computer;

e. means for storing a plurality of registration biometric samples;

f. means for associating a subset of the stored registration biometric samples with a registration personal identification code;

g. means for comparison of a bid biometric sample with the registration biometric samples, for producing an evaluation;

h. execution means within said computer for storage of data and processing and execution of commands for producing a determination; and

i. means for output of said evaluation, or determination, from said computer.