SYSTEM AND METHOD FOR PROFFERING MULTIPLE BIOMETRICS FOR USE WITH A FOB

• US 20080046379A1
• Filed: 09/20/2007
• Published: 02/21/2008
• Est. Priority Date: 07/10/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Gray, William, Larkin, Carl, Saunders, Peter, Montgomery, Joshua, Bonalle, David, Fields, Seth, Beenau, Blayn
• Granted Patent: US 8,289,136 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07345 by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G07C 2009/00984 : fob
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Claims

1. A transponder-reader transaction system configured with a hand geometry scan sensor, said system comprising:

a transponder configured to communicate with a reader;

said reader configured to communicate with said system;

said hand geometry scan sensor configured to detect a proffered hand geometry scan sample, said hand geometry scan sensor configured to communicate with said system; and

,

a verification device configured to verify said proffered hand geometry scan sample to facilitate a transaction.

2. The transponder-reader transaction system of claim 1, wherein said hand geometry scan sensor is configured to communicate with said system via at least one of a transponder, a reader, and a network.

3. The transponder-reader transaction system of claim 1, further comprising a database configured to store at least one data packet, wherein said data packet comprises at least one of:

proffered and registered hand geometry scan samples, proffered and registered user information, terrorist information, and criminal information.

4. The transponder-reader transaction system of claim 1, further comprising a database of hand geometry scan and user information, said database contained in at least one of the transponder, transponder reader, sensor, remote server, merchant server and transponder-reader system.

5. The transponder-reader transaction system of claim 1, wherein said hand geometry scan sensor is configured with at least one of:

infrared optical sensor and a three-dimensional imaging system.

6. The transponder-reader transaction system of claim 1, wherein said hand geometry scan sensor is configured to detect and verify hand geometry scan characteristics including at least one of:

blood flow, body heat, hand shape, finger length, finger thickness, and finger curvature.

7. The transponder-reader transaction system of claim 1, wherein said verification device is at least one of a third-party security vendor device and protocol/sequence controller.

8. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered hand geometry scan sample with a registered hand geometry scan sample, wherein said registered hand geometry scan sample is associated with at least one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

9. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered hand geometry scan sample with a registered hand geometry scan sample, wherein different registered hand geometry scan samples are associated with a different one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

10. The transponder-reader transaction system of claim 1, wherein said verification device is further configured to compare said proffered hand geometry scan sample with a registered hand geometry scan sample, wherein said registered hand geometry scan sample is primarily associated with first user information, wherein said first information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, and wherein said registered hand geometry scan sample is secondarily associated with second user information, wherein said second information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, where second user information is different than first user information.

11. The transponder-reader transaction system of claim 1, wherein said transponder-reader transaction system is configured to begin mutual authentication upon verification of said proffered hand geometry scan sample.

12. The transponder-reader transaction system of claim 1, wherein said transponder is configured to deactivate upon rejection of said proffered hand geometry scan sample.

13. The transponder-reader transaction system of claim 1, wherein said verification device is configured to facilitate at least one of authorized access, activation of a second device, a financial transaction, and a non-financial transaction.

14. The transponder-reader transaction system of claim 1, wherein said reader is further configured to provide a first radio frequency (RF) interrogation signal for powering a transponder system, to receive a transponder system RF signal, and to communicate transponder system account data related to said transponder system RF signal to a merchant system, said reader including, a first interrogator for providing said first RF interrogation signal;

said transponder system authentication circuit comprising a reader authentication circuit in communication with said first interrogator for authenticating said transponder system RF signal;

an RFID reader database for storing RFID reader data, said reader database in communication with said reader authentication circuit;

an RFID reader protocol/sequence controller in communication with at least one of said first interrogator, said reader authentication circuit, and said reader database, said reader protocol/sequence controller configured to facilitate control of an order of operation of said first interrogator, said reader authentication circuit, and said reader database; and

an RFID reader communications interface configured to communicate with said merchant system, said reader communications interface configured to provide said transponder system account data, wherein said transponder system is configured to receive said first RF interrogation signal, to authenticate said first RF interrogation signal, and to transmit said transponder system account data, said transponder system further comprising;

a first transponder responsive to said first RF interrogation signal;

a transponder system authentication circuit in communication with said first transponder, said transponder system authentication circuit configured to authenticate said first RF interrogation signal;

a transponder system database for storing said transponder system account data, said transponder system database in communication with said transponder system authentication circuit; and

a transponder system protocol/sequence controller in communication with at least one of said first transponder, said transponder system authentication circuit, and said transponder system database, said transponder system protocol/sequence controller configured to control the order of operation of said first transponder, said transponder system authentication circuit, and said transponder system database, wherein said transponder system protocol/sequence controller is configured to activate said transponder system authentication circuit in response to said first RF interrogation signal having an RFID reader authentication code, said transponder system authentication circuit configured to encrypt said reader authentication code to provide an encrypted RFID reader authentication code, said transponder system authentication circuit configured to provide said encrypted RFID reader authentication code to said first transponder for providing to said reader, wherein said reader is configured to receive said encrypted RFID reader authentication code, and wherein said reader protocol/sequence controller is configured to activate said reader authentication circuit in response to said encrypted RFID reader authentication code, wherein said reader database is configured to provide a transponder system decryption security key to said reader authentication circuit in response to said encrypted RFID reader authentication code, said transponder system decryption security key for use in decrypting said encrypted RFID reader authentication code to form a decrypted RFID reader authentication code, said transponder system decryption security key provided to said reader based on an unique transponder identification code, wherein said reader authentication circuit is configured to compare said decrypted RFID reader authentication code and said reader authentication code to determine whether a match exists, and wherein said reader protocol/sequence controller is configured to activate said reader communications interface where said reader authentication circuit matches said decrypted RFID reader authentication code and said reader authentication code.

15. The transponder-reader transaction system of claim 1, further comprising said system configured to determine whether a user requested transaction exceeds a preloaded value defined by a preloaded value data file associated with a transponder;

determine whether said transaction exceeds a combination of said preloaded value and a reload value defined by a reload protocol data file associated with said transponder, wherein said preloaded value data file and said reload protocol data file define predetermined values for use in satisfying a user transaction request;

notify a user to proffer a biometric sample to authorize use of said combination of said preloaded value and said reload value to complete said transaction;

detect a proffered biometric sample at a sensor communicating with said system;

verify said proffered biometric sample; and

authorize said transaction to proceed by applying said preloaded value from a first funding source associated with said transponder and applying a portion of said reload value from one of said first funding source and a second funding source according to said reload protocol data file.

16. A method for facilitating biometric security using a hand geometry scan sensor in a transponder-reader transaction system comprising:

receiving a proffered hand geometry scan sample detected at said hand geometry scan sensor communicating with said system;

verifying said proffered hand geometry scan sample; and

facilitating authorizing a transaction to proceed upon said verification of said proffered hand geometry scan sample.

17. The method of claim 16, wherein said step of verifying further comprises using said hand geometry scan sensor to detect and verify hand geometry scan characteristics including at least one of:

blood flow, body heat, hand shape, finger length, finger thickness, and finger curvature.

18. The method of claim 16, wherein said step of verifying comprises verifying said proffered hand geometry scan sample using one of a protocol/sequence controller and a third-party security vendor.

19. The method of claim 16, further comprising determining when said transaction complies with a preset transaction limitation, wherein said preset transaction limitation comprises at least one of a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

20. The method of claim 16, further comprising requiring a second proffered hand geometry scan sample to override a preset transaction limitation.