METHOD AND SYSTEM FOR HAND GEOMETRY RECOGNITION BIOMETRICS ON A FOB

• US 20100030693A1
• Filed: 09/06/2007
• Published: 02/04/2010
• Est. Priority Date: 07/10/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Bonalle, David S., Saunders, Peter D., Beenau, Blayn W., Gray, William J., Larkin, Carl, Fields, Seth W., Montgomery, Joshua L.
• Granted Patent: US 7,814,332 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/107 Static hand or arm
• CPC Class Codes: G06V 40/11 Hand-related biometrics; Hand pose recognition
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using hand geometry recognition biometrics in a transponder-reader system. The biometric security system also includes a hand geometry scan sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a hand geometry scan sensor. In another embodiment, the system includes a reader configured with a hand geometry scan sensor. In yet another embodiment, the present invention discloses methods for proffering and processing hand geometry scan samples to facilitate authorization of transactions.

Claims

1-20. -20. (canceled)

21. A Radio Frequency (RF) payment device comprising:

an RF transponder configured to receive a device authentication code from an RF Identification (RFID) reader;

a unique device encryption key corresponding to a device identification code associated with the RF payment device;

a voiceprint sensor configured to detect a proffered voiceprint sample to create proffered voiceprint sample data; and

a device authentication circuit configured to use the unique device encryption key to encrypt the device authentication code and a device account code associated with the RF payment device to create an encrypted device authentication code and an encrypted device account code;

wherein the RF transponder is configured to transmit at least one of the encrypted device authentication code and the encrypted device account code to the RFID reader.

22. The RF payment device of claim 21, further comprising a verification device configured to enable the device authentication circuit if the proffered voiceprint sample data matches authenticated voiceprint sample data.

23. The RF payment device of claim 22, further comprising a second RF transponder, wherein at least one of the RF transponder or the second RF transponder is configured to transmit an RFID reader authentication code to the RFID reader and receive an encrypted RFID reader authentication code from the RFID reader if the proffered voiceprint sample data matches the authenticated voiceprint sample data.

24. The RF payment device of claim 23, further comprising an RFID reader decryption key, wherein the device authentication circuit is configured to use the RFID reader decryption key to decrypt the encrypted RFID reader authentication code received from the RFID reader in order to authenticate the RFID reader.

25. The RF payment device of claim 21, wherein the voiceprint sensor comprises an at least one of an audio capture device, a microphone, a telephone, a cellular phone, or a voice recorder, wherein the voiceprint sensor is configured to detect and verify voiceprint characteristics comprising at least one of voice print waveforms in the time domain, energy content in the voice prints across the frequency domain, stochastic models of the voice print, or template models of the voice print.

26. The RF payment device of claim 23, wherein the voiceprint sensor comprises a switch configured to place the first and second RF transponders in at least one of a selectivity mode or an inclusivity mode, wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the first and second RF transponders in an operational mode permitting the first and second RF transponders to be responsive to RF interrogation and interrogation via a USB connector.

27. The RF payment device of claim 23, wherein the voiceprint sensor is configured to store log data within the RF payment device, the log data comprising at least one of detected voiceprint sample data, processed voiceprint sample data or stored voiceprint sample data, and wherein the voiceprint sensor is further configured to employ a security procedure if the proffered voiceprint sample data differs from the log data.

28. A method for registering and using proffered voiceprint sample data for facilitating a Radio Frequency (RF) transaction, the method comprising:

detecting a proffered voiceprint sample at a voiceprint sensor to create the proffered voiceprint sample data;

associating the proffered voiceprint sample data with at least one of an RF device, a user identifier, or a transaction account;

verifying the proffered voiceprint sample data to activate the RF device and to confirm the proffered voiceprint sample data to create registered voiceprint sample data;

receiving a transaction request from the RF device, wherein the transaction request comprises transaction voiceprint sample data; and

authorizing the transaction request if the transaction voiceprint sample data matches the registered voiceprint sample data.

29. The method of claim 28, further comprising associating the registered voiceprint sample data with at least one of personal information, credit card information, debit card information, savings account information, or loyalty point information.

30. The method of claim 29, further comprising associating the registered voiceprint sample data with second user information comprising at least one of personal information, credit card information, debit card information, savings account information, or loyalty point information.

31. The method of claim 28, further comprising facilitating at least one of authorized access, activation of a second device, a financial transaction, or a non-financial transaction if the transaction voiceprint sample data matches the registered voiceprint sample data.

32. The method of claim 28, further comprising:

transmitting a device authentication code from a sample receiver to the RF device;

receiving an encrypted device authentication code, second proffered voiceprint sample data, and a device identification code from the RF device;

decrypting the encrypted device authentication code using a unique device decryption key corresponding to the device identification code to create a decrypted device authentication code; and

authenticating the RF device if the second proffered voiceprint sample data matches the registered voiceprint sample data and if the decrypted device authentication code matches the device authentication code.

33. The method of claim 32, further comprising:

receiving a reader authentication code from the RF device;

encrypting the reader authentication code using a reader encryption key to create an encrypted reader authentication code;

transmitting the encrypted reader authentication code to the RF device for authentication of the sample receiver;

receiving an encrypted device account code from the RF device upon the authentication of the sample receiver;

decrypting the encrypted device account code using the unique device decryption key to create a decrypted device account code; and

transmitting the decrypted device account code for processing of the transaction.

34. The method of claim 28, further comprising:

receiving an RF device update request comprising at least one of a preloaded value update request or a reload protocol update request;

updating, in response to the RF device update request, at least one of a preloaded value data file or a reload protocol data file, wherein the preloaded value data file comprises a stored value;

requesting a funding source value from a first funding source and the preloaded value data file, wherein the requesting of the funding source value is in response to an instruction from the reload protocol data file;

updating the stored value with the funding source value; and

if the stored value is greater than the transaction value, authorizing the merchant transaction request to facilitate the RF transaction.

35. The method of claim 34, wherein the reload protocol update request comprises at least one of a minimum depletion value update request, a time period update request, a number of occurrences update request, or a maximum value update request.

36. The method of claim 35, further comprising determining if the RF transaction complies with a preset transaction limitation comprising at least one of a maximum transaction amount, a minimum transaction amount, a maximum number of transactions within a time period value, a maximum number of transactions value, a use by certain merchants criterion, a temporal limitation, or a use of non-monetary funds criterion.

37. The method of claim 36, further comprising requiring second proffered voiceprint sample data to override the preset transaction limitation.

38. An authorized sample receiver (ASR) configured to register voiceprint sample data and facilitate a Radio Frequency (RF) transaction, the ASR comprising:

a biometric sensor configured to receive a first proffered voiceprint sample to create first proffered voiceprint sample data;

means for creating registered voiceprint sample data from the first proffered voiceprint sample data if second proffered voiceprint sample data associated with an RF device matches the first proffered voiceprint sample data;

an RF Identification (RFID) reader configured to receive a transaction request from the RF device, wherein the transaction request comprises transaction voiceprint sample data, an encrypted device account code, and a device identification code; and

an authentication circuit configured to decrypt the encrypted device account code using a unique RF device decryption key selected from a plurality of device-specific decryption keys, wherein the authentication circuit is further configured to authenticate the RF device if the transaction voiceprint sample data matches the registered voiceprint sample data.

39. The ASR of claim 38, further configured to transmit a device authentication code to the RF device, receive an encrypted device authentication code from the RF device, and decrypt the encrypted device authentication code using the unique RF device decryption key to authenticate the RF device.

40. The ASR of claim 39, further configured to receive an ASR authentication code from the RF device, encrypt the ASR authentication code, and transmit the encrypted ASR authentication code to the RF device to facilitate authentication of the ASR.