METHOD AND SYSTEM FOR PROVIDING BIOMETRIC AUTHENTICATION AT A POINT-OF-SALE VIA A MOBLE DEVICE

• US 20090138366A1
• Filed: 01/27/2009
• Published: 05/28/2009
• Est. Priority Date: 06/29/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: YT Acquisition Corp.
• Inventors: Mian, Shoaib, Bemmel, Vincent
• Granted Patent: US 8,880,434 B2
• Time in Patent Office: Days
• US Class Current: 705/17
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system and method is provided for authorizing a payment for a point of sale transaction by authenticating the user of a mobile device, such as a mobile phone. The present invention authenticates the consumer and verifies that he is authorized to conduct a transaction at the point of sale by means of the consumer'"'"'s mobile device.

Claims

1-22. -22. (canceled)

23. An identity provider server for providing the capability to authenticate a consumer through a mobile device, the server comprising:

a mobile gateway component for communicating with the mobile device;

an automatic speech recognition component for converting a voice sample of the consumer received through the mobile gateway component into a text sequence;

a consumer knowledge-based verification component for comparing at least a portion of the text sequence converted from the voice sample with registered consumer verification information associated with the consumer;

a biometric authentication component for comparing the voice sample received through the mobile gateway component with a registered voice sample associated with the consumer;

an electronic wallet database for storing consumer information associated with the consumer in an electronic wallet;

a staging database for storing an authentication identifier associated with the electronic wallet of the consumer upon;

(1) a matching of the voice sample by the biometric authentication component with the registered voice sample, and (2) a matching of at least a portion of the converted text sequence with the registered consumer verification information associated with the consumer; and

a merchant gateway component for transmitting at least a portion of the electronic wallet to a merchant point-of-sale system upon receipt of a proffered authentication identifier from the merchant point-of-sale system that matches the authentication identifier stored in the staging database.

24. The identity provider server of claim 23, wherein stored consumer information comprises one or more of demographic information, financial account information, loyalty account information, healthcare information, and verification information.

25. The identity provider server of claim 23, wherein registered consumer verification information comprises one or more of a password and challenge question and answer data.

26. The identity provider server of claim 23, further comprising a mobile device database for confirming that a device identifier of the mobile device communicating with the server through the mobile gateway component is registered with the server.

27. The identity provider server of claim 23, further comprising a merchant point-of-sale authorization component for associating the authorization identifier with one or more merchant point-of-sale terminals that have been identified to the server by the consumer through the mobile gateway component.

29. The identity provider server of claim 23, wherein the mobile gateway component enables telephony communication with the mobile device.

30. The identity provider server of claim 23, wherein the mobile gateway component enables text messaging communication with the mobile device.

28. (canceled)