Bio-metric smart card, bio-metric smart card reader, and method of use

• US 20050029349A1
• Filed: 09/14/2004
• Published: 02/10/2005
• Est. Priority Date: 04/26/2001
• Status: Abandoned Application

• Current Assignee: Christopher M. Mcgregor, Mcgregor D. Scott, Travis M. Mcgregor
• Original Assignee: Christopher M. Mcgregor, Mcgregor D. Scott, Travis M. Mcgregor
• Inventors: McGregor, Christopher M., McGregor, D. Scott, McGregor, Travis M.
• Application Number:
  US10/940,920
• Publication Number:
  US 20050029349A1
• Time in Patent Office: Days
• US Class Current: 235/439
• CPC Class Codes: G05B 19/0425 Safety, monitoring
• CPC Class Codes: G05B 2219/23342 Pluggable rom, smart card
• CPC Class Codes: G05B 2219/24162 Biometric sensor, fingerprint as user access password
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges
• CPC Class Codes: G05B 2219/25192 Infrared
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system for increasing transaction security across existing infrastructure is provided. A user bio-metric sensor device is integrated into a credit or debit card. A display unit provides a key, preferably encrypted, upon successful utilization of the sensor device. Included in the key generation mechanism is an indicator of the transaction number or other sequential count indicative of card use. An authorization service decrypts the key in a manner at least partially dependent upon a second sequential count maintained in sync with the first count to determine whether the use is authorized. In one embodiment, a separate credit card reader may be configured to read conventional credit cards, smart cards, and credit cards incorporating such bio-metric sensor devices.

Claims

1. A self-contained apparatus configured for a user thereof to operate with at least some account number transaction devices that are adapted to receive and process account information associated with credit card and debit card transactions, the apparatus comprising:

a body sized with substantially a same shape, form factor, and properties of a plastic credit card integrated with a smart card for use with the account number transaction devices, the body having at least one transaction independent account number integral thereto;

one or more electronic circuits disposed within the body, the one or more electronic circuits including;

a display configured to display a dynamic security key code;

a bio-metric interface configured to receive bio-metric data;

a memory configured to electronically store bio-metric data associated with the user and the at least one transaction independent account number,

a processor that when activated is configured to;

compare the bio-metric data received from the bio-metric sensor with bio-metric data stored within the memory, wherein the bio-metric data is associated with the user of the apparatus;

increment a transaction counter if a positive comparison is found between the stored bio-metric data and the bio-metric data received from the bio-metric sensor;

generate an encryption key from the stored bio-metric data;

transmit the encryption key to the account number transaction devices along with the transaction independent account number; and

a power source disposed within the body, the power source configured to power at least some of the electronic circuits.

2. The apparatus of claim 1, further comprising an electrical connection to transmit the encryption key to the account number transaction devices.

3. The apparatus of claim 1, further comprising a wireless transceiver configured to transmit the encryption key and the at least one transaction independent account number.

4. The apparatus of claim 1, wherein the power source uses at least some of apparatus motion, solar power, physical contact by the user, and combinations thereof to generate electrical power.

5. The apparatus of claim 1, wherein the properties include one or more physical properties of the plastic credit card integrated with the smart card comprising flexibility, thickness, operational temperature, density, ductility, hardness, and combinations thereof.

6. An apparatus configured for a user thereof to read data from at least one card such as a credit card or a smart card, the apparatus comprising:

a body configured to receive at least a portion of the electronic transaction card card therein to read data therefrom;

a display configured to display a dynamic security key code;

a bio-metric interface configured to receive bio-metric data;

a memory configured to electronically store bio-metric data associated with the user and at least one transaction independent account number received from the electronic transaction card; and

a processor that when activated is configured to;

compare stored bio-metric data associated with the user thereof with bio-metric data received from the bio-metric interface;

compare stored account data associated with the user thereof;

increment a counter if the users bio-metric data associated with the at least one transaction independent account number matches the stored data;

generate an encryption key partially from the stored bio-metric data; and

transmit the encryption key to one or more account number transaction devices along with the transaction independent account number.

7. A method of processing a transaction associated with a transaction independent account number associated with a user thereof, the method comprising:

retrieving the transaction independent account number from a card;

receiving bio-metric authentication data from the user of the card from a bio-metric sensor;

comparing the bio-metric authentication data with stored data associated with the transaction independent account number;

determining if the user is authorized to use the card;

if the user is authorized to use the card;

incrementing a transaction counter;

generating a security key in a manner at least partially dependent upon a count of the transaction counter, and at least partially dependent upon the user'"'"'s bio-metric authentication data; and

transmitting the security and the transaction independent account number to an authorizing authority for processing thereof.