SINGLE STEP TRANSACTION AUTHENTICATION USING PROXIMITY AND BIOMETRIC INPUT

• US 20070245158A1
• Filed: 05/07/2007
• Published: 10/18/2007
• Est. Priority Date: 11/30/2005
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Brown, David, Hirt, Fred, Giobbi, John
• Granted Patent: US 9,542,542 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 2209/12 Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A system and method provide efficient, secure and highly reliable authentication for transaction processing and/or access control applications in which only biometric input is required from the user. A Personal Digital Key stores a biometric profile that comprises a representation of physical or behavioral characteristics that are uniquely associated with an individual that owns and carries the PDK. The PDK wirelessly transmits the biometric profile over a secure wireless transaction to a Reader for use in a biometric authentication process. The Reader compares the received biometric profile to a biometric input acquired at the point of transaction in order to determine if the transaction should be authorized.

Claims

1. A method for electronic transaction processing comprising:

wirelessly receiving data from a personal digital key (PDK);

receiving a biometric input;

authenticating the personal digital key;

authenticating the biometric input; and

performing a transaction responsive to the personal digital key and the biometric input being authenticated.

2. The method of claim 1, wherein receiving the biometric input comprises performing at least one of a fingerprint scan, a retinal scan, an iris scan, a facial scan, a palm scan, a DNA analysis, a signature analysis, and a voice analysis.

3. The method of claim 1, wherein wirelessly receiving data from a personal digital key includes receiving biometric data, and authenticating the biometric input includes comparing the biometric data to the biometric input for match.

4. The method of claim 3, wherein the biometric data is a portion or subset of an entire biometric data set for an attribute.

5. The method of claim 1, wherein wirelessly receiving data from a personal digital key includes establishing a secure communication channel between the PDK and a reader, and wherein a profile is sent from the PDK to the reader.

6. The method of claim 5, wherein the profile includes a PDK identification number and one from the group of financial information, credit card information and personal identification information.

7. The method of claim 1, wherein authenticating the personal digital key begins before authenticating the biometric input.

8. The method of claim 1, wherein authenticating the biometric input begins before authenticating the personal digital key.

9. The method of claim 1, wherein authenticating the personal digital key includes receiving data from the personal digital key and comparing it against an external system.

10. The method of claim 9, wherein the external system is one from the group of a central registry, a validation database and a private registry.

11. The method of claim 1 further comprising authenticating a reader.

12. The method of claim 1, wherein wirelessly receiving, receiving the biometric input, authenticating the personal digital key, authenticating the biometric input are performed by a reader device.

13. The method of claim 1, wherein receiving the biometric input and authenticating the biometric input are performed by the personal digital key.

14. The method of claim 1, wherein receiving authenticating the biometric input is performed by the personal digital key and the reader.

15. The method of claim 1, wherein performing a transaction comprises:

initiating the transaction;

communicating with another system to authorize and approve the transaction; and

presenting the status for the transaction.

18. The method of claim 1, wherein receiving the biometric input comprises obtaining a representation of physical or behavioral characteristics derived from the individual.

16. A method for electronic transaction authentication comprising:

wirelessly receiving data from a reader;

receiving a biometric input;

authenticating the reader

authenticating the biometric input; and

transmitting a signal authorizing a transaction responsive to the reader and the biometric input being authenticated.

17. The method of claim 16, wherein receiving the biometric input comprises performing at least one of a fingerprint scan, a retinal scan, an iris scan, a facial scan, a palm scan, a DNA analysis, a signature analysis, and a voice analysis.

19. A method for electronic transaction processing comprising:

wirelessly receiving a biometric reference from a personal digital key;

receiving a biometric input;

authenticating the biometric input; and

performing a transaction responsive to the biometric input being authenticated.

20. The method of claim 19, wherein receiving the biometric input comprises performing at least one of a fingerprint scan, a retinal scan, an iris scan, a facial scan, a palm scan, a DNA analysis, a signature analysis, and a voice analysis.