METHOD AND APPARATUS FOR SECURE ACCESS PAYMENT AND IDENTIFICATION

• US 20070198436A1
• Filed: 02/21/2007
• Published: 08/23/2007
• Est. Priority Date: 02/21/2006
• Status: Active Application

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Kenneth P. Weiss
• Inventors: Weiss, Kenneth
• Granted Patent: US 8,001,055 B2
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 : Authentication

Abstract

According to one aspect, the invention provides a system for validating an identity of a user to enable or prevent an occurrence of an event. In one embodiment, the system includes a first device including a wireless transmitter which is configured to transmit validation information, a second device including a wireless receiver, where the second device is configured to receive the validation information and further transmit the validation information; and a secure system in communication with the second device. According to one embodiment, the secure system includes a database. In a further embodiment, the secure system is configured to receive the validation information transmitted from the second device, and to transmit additional information to the second device following a receipt of the validation information to assist the second device in either enabling or preventing the occurrence of the event.

Claims

1. A system for validating an identity of a user to enable or prevent an occurrence of an event, the system comprising:

a first device including a wireless transmitter configured to transmit validation information;

a second device including a wireless receiver, the second device configured to receive the validation information and further transmit the validation information; and

a secure system in communication with the second device, the secure system including a database,

wherein the secure system is configured to receive the validation information transmitted from the second device, and

wherein the secure system is further configured to transmit additional information to the second device following a receipt of the validation information to assist the second device in either enabling or preventing the occurrence of the event.

2. The system of claim 1 wherein the second device includes a magnetic stripe emulator communicatively coupled to the wireless receiver and adapted to provide a time-varying signal emulating data provided by a magnetic stripe card to a magnetic card reader, in response to receiving the validation information from the first device.

3. The system of claim 2, wherein the second device includes a processor communicatively coupled to the wireless receiver and to the magnetic stripe emulator.

4. The system of claim 3, wherein the information includes any of a name, a card number, user identification, a device code, an amount of credit available, and an expiration date of the card for a transaction.

5. The system of claim 3, wherein the second device includes a LCD screen for displaying at least some of the information received by the second device.

6. The system of claim 5, wherein the processor is configured in combination with the LCD device to display indicia corresponding to the authorization of a transaction.

7. The system of claim 6, wherein the indicia includes picture information of a user of the first device.

8. The system of claim 2, wherein the second device includes an output device configured to transmit the validation information.

9. The system of claim 8, wherein the second device is configured to communicate with the magnetic card reader via the output device.

10. The system of claim 1, wherein the second device is configured to decrypt an encrypted wireless signal transmitted from the first device.

11. The system of claim 10, wherein the second device is configured to decrypt a time-varying encrypted wireless signal transmitted from the first device.

12. The system of claim 11, wherein the second device is configured to decrypt time-varying public and private key information contained within the wireless signal.

13. The system of claim 3, wherein the second device includes a user interface communicatively coupled to the processor.

14. The system of claim 13, wherein the processor is configured to determine whether the user is authorized to provide the information transmitted from the first device from data provided through the user interface.

15. The system of claim 1, wherein the second device is configured to determine whether the user is authorized to provide the validation information from the validation information transmitted from the first device.

16. The system of claim 15, wherein the validation information transmitted from the first device comprises user I.D. information.

17. The system of claim 15, wherein the validation information transmitted from the first device comprises biometric information of the user.

18. The system of claim 15, wherein the validation information transmitted from the first device comprises any of secret information, a PIN, a password, or a passcode of the user.

19. The system of claim 15, wherein the data transmitted from the first device comprises information about an uncounterfeitable token of the user.

20. The system of claim 2, wherein the second device includes a substrate housing the magnetic stripe emulator.

21. The system of claim 20, wherein the substrate comprises a programmable magnetic stripe.

22. The system of claim 3, wherein the processor is configured to provide binary data to the magnetic stripe emulator.

23. The system of claim 1, further wherein the secure system is configured to transmit data received from the second device to a networked credit card validation entity coupled to the secure system.

24. The system of claim 1, wherein the first device is configured to receive authentication information of the user.

25. The system of claim 24, wherein the authentication information includes biometric information of the user.

26. The system of claim 25, wherein the first device is configured to generate a non-predictable signal from the biometric information.

27. The system of claim 26, wherein the first device is further configured to generate a time varying non-predictable signal from the biometric information.

28. The system of claim 24, wherein the first device is configured to authenticate the authentication information of the user and to allow or not allow operation of the first device based on the authentication information.

29. The system of claim 28, wherein the authentication information includes biometric information of the user.

30. The system of claim 29, wherein the biometric information of the user comprises a voice signature of the user.

31. The system of claim 30, wherein the biometric information of the user comprises a fingerprint of the user.

32. The system of claim 31, wherein the authentication information of the user comprises a PIN.

33. The system of claim 1, wherein the secure system is configured to access authenticating indicia of the user;

and to transmit the authenticating indicia from the secure database to the second device.

34. The system of claim 33, further comprising an act of generating a non-predictable code at the second device from the first authentication information.

35. The system of claim 34, wherein the non-predictable code is a time-varying code.

36. The system of claim 35, wherein the second device is configured to transmit the time-varying code to the secure system;

and wherein the secure system is configured to determine from the time-varying code the authentication information.

37. The system of claim 36, wherein communication between the second device and the secure system is over any of a wide area network, the Internet, and a wireless network.

38. The system of claim 1, wherein the second device includes a processor, wherein the second device includes a memory configured to store public keys of a plurality of users, and wherein the wireless receiver and/or processor is configured to decrypt an encrypted wireless signal transmitted from the first device.

39. The system of claim 38, wherein the second device is configured to look up a public key of the user and to decrypt the authentication information with the public key of the user.

40. The system of claim 39, wherein the authentication information includes any of a name, an identification number, an e-mail address, and at least a portion of a picture of the user.

41. The system of claim 38, wherein the second device is configured to periodically update the public keys of the plurality of users.

42. The system of claim 1, wherein the second device includes a processor, wherein the second device includes a memory configured to store picture data, wherein the wireless receiver and/or processor is configured to decrypt an encrypted wireless signal transmitted from the first device, and wherein the second device is configured to access the picture data based on the decrypted authentication information.

43. The system of claim 42, wherein picture information of the user may be viewed with the second device.

44. The system of claim 42, wherein the encrypted wireless signal transmitted from the first device includes a first portion of the picture information of the user.

45. The system of claim 44, wherein the second device is configured to access a second portion of the picture information of the user and to combine the first portion of the picture and the second portion of the picture.

46. The system of claim 1, wherein the second device includes a processor, wherein the wireless receiver and/or processor is configured to decrypt an encrypted wireless signal transmitted from the first device, and wherein the encrypted wireless signal includes encrypted authentication information which has been encrypted with a first private key of the user.

47. The system of claim 1, wherein the second device includes a processor, wherein the wireless receiver and/or processor is configured to decrypt an encrypted wireless signal transmitted from the first device, and wherein the second device is configured to request the encrypted wireless signal from the first device.

48. The system of claim 1, wherein the first device is configured to transmit a first wireless signal including first encrypted authentication information.

49. The system of claim 48, wherein the first device includes a first processor, a first biometric detector and a first memory,

wherein the first processor is configured to compare stored biometric data with detected biometric data of the user and configured to enable or disable use of the first device based on a result of the comparison and configured to encrypt first authentication information with a first private key into first encrypted authentication information,

wherein the first biometric detector is configured for detecting biometric data of the user, and wherein the first memory is configured to store biometric data of the user, a private key of the user authorized to use the first device, and the first authentication information.

50. The system of claim 49, wherein the second device includes a second processor, a second biometric detector and a second memory,

wherein the second biometric detector configured to detect biometric data of a user of the second device, and

wherein, the second memory configured to store biometric data of the user of the second device and a plurality of public keys of a plurality of users associated with a plurality of devices configured to transmit authentication information to the second device.

51. The system of claim 50, wherein the biometric data is fingerprint data and each biometric detector is a fingerprint sensor.

52. The system of claim 50, wherein the second processor is configured to use the public key of the user to decrypt the encrypted first authentication information.

53. The system of claim 49, wherein the first encrypted authentication information includes an encrypted DES key of the user.

54. The system of claim 53, wherein the first encrypted authentication information also includes a DES key encrypted portion of biometric data of the user.

55. The system of claim 54, wherein the portion of biometric data is a portion of a digital image of the user.

56. The system of claim 49, wherein the first encrypted authentication information comprises a digital signature of the user.

57. The system of claim 49, wherein the first encrypted authentication information comprises a one-time random code of the user.

58. The system of claim 50, wherein the second memory also comprises a portion of authentication data of a plurality of first users.

59. The system of claim 58, wherein the biometric data of the plurality of first users comprises at least a portion of a digital image of the plurality of first users.

60. The system of claim 50, wherein the first device can be any of a handheld device, a cell phone, a PDA, a PC, a credit card sized device, an ID badge, a key FOB, a passport, and a wrist watch.

61. The system of claim 50, wherein the database comprises biometric information of a plurality of users.

62. The system of claim 61, wherein the biometric information of the plurality of users includes at least a portion of digital image data of the plurality of users.

125. The system of claim 1, wherein the second device communicates an amount of purchase by a user of the first device with the secure system and receives any of an approval or denial for the purchase without the credit card number, a credit card number of a user and an approval or denial of the purchase, and an available balance of the user.

126. The system of claim 1, wherein the second device validates the information transmitted from the first device and transmits the validated information to the secure system, and wherein the secure system provides the additional information to enable or prevents the occurrence of the event based on the validated information as communicated by the second device.

127. The system of claim 1, wherein the secure system validates the information transmitted from the second device and wherein the secure system provides the additional information to enable or prevents the occurrence of the event based on the validated information.

128. The system of claim 1, wherein the second device validates the information transmitted from the first device based on the validation information transmitted from the first device and the additional information provided by the secure system, and wherein the second device enables or prevents the occurrence of the event based on the validation information and the additional information.

63. A method employing a system to validate an identity of a user to enable or prevent an occurrence of an event, the system including a first device, a second device and a secure system including a database, the method comprising acts of:

receiving at the second device validation information wirelessly transmitted from the first device;

communicating the validation information from the second device to the secure system; and

receiving at the second device additional information from the secure system, wherein the additional information assists the second device in either enabling or preventing the occurrence of the event.

64. The method of claim 63 wherein the second device includes a magnetic stripe emulator communicatively coupled to the wireless receiver, and wherein the method further comprises an act of providing a time-varying signal emulating data provided by a magnetic stripe card to a magnetic card reader, in response to receiving the validation information from the first device.

65. The method of claim 64, wherein the second device includes a processor communicatively coupled to the wireless receiver and to the magnetic stripe emulator.

66. The method of claim 65, wherein the information includes any of a name, a card number, user identification, a device code, an amount of credit available, and an expiration date of the card for a transaction.

67. The method of claim 65, wherein the second device includes a LCD screen, and wherein the method further comprises an act of displaying at least some of the information received by the second device on the LCD screen.

68. The method of claim 67, wherein the processor is configured in combination with the LCD device to display indicia corresponding to the authorization of a transaction.

69. The method of claim 68, further comprising an act of including picture information of a user of the first device in the indicia.

70. The method of claim 64, wherein the second device includes an output device, and wherein the method further comprises an act of transmitting the validation information from the second device with the output device.

71. The method of claim 70, further comprising an act of communicating with the magnetic card reader via the output device.

72. The method of claim 65, further comprising an act of decrypting an encrypted wireless signal transmitted from the first device with the second device.

73. The method of claim 72 further comprising an act of decrypting, with the second device, a time-varying encrypted wireless signal transmitted from the first device.

74. The method of claim 73, further comprising an act of decrypting, with the second device, information encrypted with a private key contained within the wireless signal.

75. The method of claim 65, wherein the second device includes a user interface communicatively coupled to the processor.

76. The method of claim 75, further comprising an act of determining with the processor whether the user is authorized to provide the validation information transmitted from the first device from data provided through the user interface.

77. The method of claim 65, further comprising an act of determining with the processor whether the user is authorized to provide the validation information from the validation information transmitted from the first device.

78. The method of claim 77, further comprising an act of including user I.D. information in the validation information transmitted from the first device.

79. The method of claim 77, further comprising an act of including biometric information of the user in the validation information transmitted from the first device.

80. The method of claim 77, further comprising an act of including any of secret information, a PIN, a password, or a passcode of the user in the validation information transmitted from the first device.

81. The method of claim 77, further comprising an act of including information about an uncounterfeitable token of the user in the data transmitted from the first device.

82. The method of claim 64, wherein the second device includes a substrate housing the magnetic stripe emulator.

83. The method of claim 82, wherein the substrate comprises a programmable magnetic stripe.

84. The method of claim 65, further comprising an act of providing binary data to the magnetic stripe emulator with the processor.

85. The method of claim 63, further comprising an act of, with the secure system, transmitting data received from the second device to a networked credit card validation-information entity coupled to the secure system.

86. The method of claim 63, further comprising an act of receiving, with the first device, authentication information of the user.

87. The method of claim 86, further comprising an act of including the biometric information of the user in the authentication information.

88. The method of claim 87, further comprising an act of generating, with the first device, a non-predictable signal from the biometric information.

89. The method of claim 88, further comprising an act of generating, with the first device, a time varying non-predictable signal from the biometric information.

90. The method of claim 86, further comprising acts of:

authenticating, with the first device, the authentication information of the user; and

allowing or not allowing operation of the first device based on the authentication information.

91. The method of claim 90, further comprising an act of including biometric information of the user in the authentication information.

92. The method of claim 91, wherein the biometric information of the user comprises a voice signature of the user.

93. The method of claim 92, wherein the biometric information of the user comprises a fingerprint of the user.

94. The method of claim 93, wherein the authentication information of the user comprises a PIN.

95. The method of claim 63, wherein the secure system is configured to accessing, with the secure system, authenticating indicia of the user;

and to transmit the authenticating indicia from the secure database to the second device.

96. The method of claim 95, further comprising an act of generating a non-predictable code at the second device from the first authentication information.

97. The method of claim 96, wherein the non-predictable code is a time-varying code.

98. The method of claim 97, further comprising an act of transmitting the time-varying code to the secure system with the second device;

and determining from the time-varying code the authentication information with the secure system.

99. The method of claim 98, further comprising an act of communicating between the second device and the secure system over any of a wide area network, the Internet, and a wireless network.

100. The method of claim 63, wherein the second device includes a processor and a memory, and wherein the method further comprises acts of:

storing public keys of a plurality of users in the memory; and

decrypting an encrypted wireless signal transmitted from the first device using the wireless receiver and/or processor.

101. The method of claim 100, further comprising acts of:

looking up a public key of the user with the second device; and

decrypting, with the second device, the authentication information with the public key of the user.

102. The method of claim 101, wherein the authentication information includes any of a name, an identification number, an e-mail address, and at least a portion of a picture of the user.

103. The method of claim 100, further comprising an act of periodically updating the public keys of the plurality of users with the second device.

104. The method of claim 63, wherein the second device includes a processor, and a memory configured to store picture data, and wherein the method further comprises acts of:

decrypting, with the wireless receiver and/or processor, an encrypted wireless signal transmitted from the first device, and

accessing, with the second device, the picture data based on the decrypted authentication information.

105. The method of claim 104, further comprising an act of viewing the picture information of the user with the second device.

106. The method of claim 104, further comprising an act of including a first portion of the picture information of the user in the encrypted wireless signal transmitted from the first device.

107. The method of claim 106, further comprising acts of:

accessing a second portion of the picture information of the user with the second device; and

combining the first portion of the picture and the second portion of the picture with the second device.

108. The method of claim 63, wherein the second device includes a processor, and wherein the method includes acts of:

decrypting an encrypted wireless signal transmitted from the first device with the wireless receiver and/or processor;

encrypting the authentication information with a first private key of the user; and

including the encrypted authentication information in the encrypted wireless signal.

109. The method of claim 63, wherein the second device includes a processor, and wherein the method further comprises acts of:

decrypting an encrypted wireless signal transmitted from the first device with the wireless receiver and/or processor, and

requesting the encrypted wireless signal from the first device with the second device.

110. The method of claim 63, further comprising an act of transmitting a first wireless signal including first encrypted authentication information with the first device.

111. The method of claim 110, wherein the first device includes a first processor, a first biometric detector and a first memory, and wherein the method further comprises acts of:

comparing stored biometric data with detected biometric data of the user with the first processor;

enabling or disabling use of the first device based on a result of the act of comparing with the first processor;

encrypting first authentication information with a first private key into first encrypted authentication information with the first processor;

detecting biometric data of the user with the first biometric detector; and

storing biometric data of the user, a private key of the user authorized to use the first device, and the first authentication information in the memory.

112. The method of claim 111, wherein the second device includes a second processor, a second biometric detector and a second memory, and wherein the method further comprises acts of:

detecting biometric data of a user of the second device with the second biometric detector, storing, in the second memory, biometric data of the user of the second device and a plurality of public keys of a plurality of users associated with a plurality of devices configured to transmit authentication information to the second device.

113. The method of claim 112, wherein the biometric data is fingerprint data and each biometric detector is a fingerprint sensor.

114. The method of claim 112, further comprising an act of decrypting the encrypted first authentication information with the public key of the user.

115. The method of claim 111, wherein the first encrypted authentication information includes an encrypted DES key of the user.

116. The method of claim 115, wherein the first encrypted authentication information also includes a DES key encrypted portion of biometric data of the user.

117. The method of claim 116, wherein the portion of biometric data is a portion of a digital image of the user.

118. The method of claim 111, wherein the first encrypted authentication information comprises a digital signature of the user.

119. The method of claim 111, wherein the first encrypted authentication information comprises a one-time random code of the user.

120. The method of claim 112, further comprising an act of including a portion of authentication data of a plurality of first users in the second memory.

121. The method of claim 120, wherein the biometric data of the plurality of first users comprises at least a portion of a digital image of the plurality of first users.

122. The method of claim 112, wherein the first device can be any of a handheld device, a cell phone, a PDA, a PC, a credit card sized device, an ID badge, a key FOB, a passport, and a wrist watch.

123. The method of claim 112, further comprising an act of including biometric information of a plurality of users in the database.

124. The method of claim 123, further comprising an act of including at least a portion of digital image data of the plurality of users in the biometric information of the plurality of users.

129. The method of claim 63, further comprising acts of communicating with the second device an amount of purchase by a user of the first device to the secure system and receiving from the secure system any of an approval or denial for the purchase without the credit card number, a credit card number of a user and an approval or denial of the purchase, and an available balance of the user.

130. The method of claim 63, further comprising acts of validating with the second device the information transmitted from the first device and transmitting the validated information to the secure system, and receiving from the secure system the additional information to enable or prevent the occurrence of the event based on the validated information.

131. The method of claim 63, further comprising the act of validating with the secure system information transmitted from the second device and providing with the secure system the additional information to enable or prevents the occurrence of the event based on the validated information.

132. The method of claim 63, further comprising validating with the second device the information transmitted from the first device based on the validation information transmitted from the first device and the additional information provided by the secure system, and enabling or preventing with the second device the occurrence of the event based on the validation information and the additional information.