SYSTEM FOR BIOMETRIC SECURITY USING A FOB

• US 20080008359A1
• Filed: 09/21/2007
• Published: 01/10/2008
• Est. Priority Date: 07/10/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Gray, William, Larkin, Carl, Saunders, Peter, Montgomery, Joshua, Bonalle, David, Fields, Seth, Beenau, Blayn
• Granted Patent: US 7,506,819 B2
• Time in Patent Office: Days
• US Class Current: 382/117
• CPC Class Codes: G01D 21/00 Measuring or testing not otherwise provided for
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0215 : Including financial accounts
• CPC Class Codes: G07C 9/247 : electronically, e.g. by comparing signal of hand-writing with a reference signal from the pass
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 : with central registration
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 : for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

The present invention discloses a system and methods for biometric security using biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. The device for verifying samples compares the biometric samples with information stored on databases.

Claims

1. A transponder-reader transaction system configured with a retinal scan sensor, said system comprising:

a transponder configured to communicate with a reader;

said reader configured to communicate with said system;

said retinal scan sensor configured to detect a proffered retinal scan sample, said retinal scan sensor configured to communicate with said system; and

,

a verification device configured to verify said proffered retinal scan sample to facilitate a transaction.

2. The transponder-reader transaction system of claim 1, wherein said retinal scan sensor is configured to communicate with said system via at least one of a transponder, a reader, and a network.

3. The transponder-reader transaction system of claim 1, further comprising a database configured to store at least one data packet, wherein said data packet comprises at least one of:

proffered and registered retinal scan samples, proffered and registered user information, terrorist information, and criminal information.

4. The transponder-reader transaction system of claim 1, further comprising a database of retinal scan and user information, said database contained in at least one of the transponder, transponder reader, sensor, remote server, merchant server and transponder-reader system.

5. The transponder-reader transaction system of claim 1, wherein said retinal scan sensor is configured with at least one of:

a low-intensity light source and an optical coupler.

6. The transponder-reader transaction system of claim 1, wherein said retinal scan sensor is configured to detect and verify retinal scan characteristics including at least one of:

blood vessel patterns, pupil dilation and body heat.

7. The transponder-reader transaction system of claim 1, wherein said verification device is at least one of a third-party security vendor device and protocol/sequence controller.

8. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered retinal scan sample with a registered retinal scan sample, wherein said registered retinal scan sample is associated with at least one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

9. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered retinal scan sample with a registered retinal scan sample, wherein different registered retinal scan samples are associated with a different one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

10. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered retinal scan sample with a registered retinal scan sample, wherein said registered retinal scan sample is primarily associated with first user information, wherein said first information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, and wherein said registered retinal scan sample is secondarily associated with second user information, wherein said second information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, where second user information is different than first user information.

11. The transponder-reader transaction system of claim 1, wherein said transponder-reader transaction system is configured to begin mutual authentication upon verification of said proffered retinal scan sample.

12. The transponder-reader transaction system of claim 1, wherein said transponder is configured to deactivate upon rejection of said proffered retinal scan sample.

13. The transponder-reader transaction system of claim 1, wherein said verification device is configured to facilitate at least one of authorized access, activation of a second device, a financial transaction, and a non-financial transaction.

14. The transponder-reader transaction system of claim 1, wherein said reader is further configured to provide a first radio frequency (RF) interrogation signal for powering a transponder system, to receive a transponder system RF signal, and to communicate transponder system account data related to said transponder system RF signal to a merchant system, said reader including, a first interrogator for providing said first RF interrogation signal;

said transponder system authentication circuit comprising a reader authentication circuit in communication with said first interrogator for authenticating said transponder system RF signal;

an RFID reader database for storing RFID reader data, said reader database in communication with said reader authentication circuit;

an RFID reader protocol/sequence controller in communication with at least one of said first interrogator, said reader authentication circuit, and said reader database, said reader protocol/sequence controller configured to facilitate control of an order of operation of said first interrogator, said reader authentication circuit, and said reader database; and

an RFID reader communications interface configured to communicate with said merchant system, said reader communications interface configured to provide said transponder system account data, wherein said transponder system is configured to receive said first RF interrogation signal, to authenticate said first RF interrogation signal, and to transmit said transponder system account data, said transponder system further comprising;

a first transponder responsive to said first RF interrogation signal;

a transponder system authentication circuit in communication with said first transponder, said transponder system authentication circuit configured to authenticate said first RF interrogation signal;

a transponder system database for storing said transponder system account data, said transponder system database in communication with said transponder system authentication circuit; and

a transponder system protocol/sequence controller in communication with at least one of said first transponder, said transponder system authentication circuit, and said transponder system database, said transponder system protocol/sequence controller configured to control the order of operation of said first transponder, said transponder system authentication circuit, and said transponder system database, wherein said transponder system protocol/sequence controller is configured to activate said transponder system authentication circuit in response to said first RF interrogation signal having an RFID reader authentication code, said transponder system authentication circuit configured to encrypt said reader authentication code to provide an encrypted RFID reader authentication code, said transponder system authentication circuit configured to provide said encrypted RFID reader authentication code to said first transponder for providing to said reader, wherein said reader is configured to receive said encrypted RFID reader authentication code, and wherein said reader protocol/sequence controller is configured to activate said reader authentication circuit in response to said encrypted RFID reader authentication code, wherein said reader database is configured to provide a transponder system decryption security key to said reader authentication circuit in response to said encrypted RFID reader authentication code, said transponder system decryption security key for use in decrypting said encrypted RFID reader authentication code to form a decrypted RFID reader authentication code, said transponder system decryption security key provided to said reader based on an unique transponder identification code, wherein said reader authentication circuit is configured to compare said decrypted RFID reader authentication code and said reader authentication code to determine whether a match exists, and wherein said reader protocol/sequence controller is configured to activate said reader communications interface where said reader authentication circuit matches said decrypted RFID reader authentication code and said reader authentication code.

15. The transponder-reader transaction system of claim 1, further comprising said system configured to determine whether a user requested transaction exceeds a preloaded value defined by a preloaded value data file associated with a transponder;

determine whether said transaction exceeds a combination of said preloaded value and a reload value defined by a reload protocol data file associated with said transponder, wherein said preloaded value data file and said reload protocol data file define predetermined values for use in satisfying a user transaction request;

notify a user to proffer a biometric sample to authorize use of said combination of said preloaded value and said reload value to complete said transaction;

detect a proffered biometric sample at a sensor communicating with said system;

verify said proffered biometric sample; and

authorize said transaction to proceed by applying said preloaded value from a first funding source associated with said transponder and applying a portion of said reload value from one of said first funding source and a second funding source according to said reload protocol data file.

16. A method for facilitating biometric security using a retinal scan sensor in a transponder-reader transaction system comprising:

receiving a proffered retinal scan sample detected at said retinal scan sensor communicating with said system;

verifying said proffered retinal scan sample; and

facilitating authorizing a transaction to proceed upon said verification of said proffered retinal scan sample.

17. The method of claim 16, wherein said step of verifying further comprises using said retinal scan sensor to detect and verify retinal scan characteristics including at least one of:

blood vessel patterns, pupil dilation and body heat.

18. The method of claim 16, wherein said step of verifying comprises verifying said proffered retinal scan sample using one of a protocol/sequence controller and a third-party security vendor.

19. The method of claim 16, further comprising determining when said transaction complies with a preset transaction limitation, wherein said preset transaction limitation comprises at least one of a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

20. The method of claim 16, further comprising requiring a second proffered retinal scan simple to override a preset transaction limitation.