Secure Financial Transaction Systems and Methods

• US 20110082802A1
• Filed: 03/31/2010
• Published: 04/07/2011
• Est. Priority Date: 10/06/2009
• Status: Abandoned Application

• Current Assignee: Synaptics Incorporated
• Original Assignee: Validity Sensors Incorporated (Synaptics Incorporated)
• Inventors: Baghdasaryan, Davit, Hattery, Larry, Chan, Philip Yiu Kwong, Kesanupalli, Ramesh, Schwab, Frank
• Application Number:
  US12/751,983
• Publication Number:
  US 20110082802A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

A user request to implement a secure financial transaction is received and communicated to a web server capable of implementing the transaction. Transaction details signed with a secret key are received from the web server and displayed to the user. The user is requested to confirm the secure financial transaction by providing biometric data. If the user'"'"'s biometric data is validated, an authentication token is received from a biometric device and the authentication token is communicated to the web server. The web server processes the secure financial transaction if the authentication token is confirmed as a valid authentication token.

Claims

1. A method comprising:

receiving a user request to implement a secure financial transaction;

communicating the secure financial transaction request to a web server capable of implementing the secure financial transaction;

receiving secure financial transaction details from the web server, wherein the secure financial transaction details are signed with a secret key;

displaying secure financial transaction details to the user;

requesting the user to confirm the secure financial transaction by providing biometric data;

receiving an authentication token from a biometric device if the user'"'"'s biometric data is validated; and

communicating the authentication token to the web server, wherein the web server is configured to process the secure financial transaction if the authentication token is confirmed as a valid authentication token.

2. The method of claim 1, wherein the secure financial transaction is a payment transaction.

3. The method of claim 1, wherein the secure financial transaction is a transfer of funds between two financial accounts.

4. The method of claim 1, wherein communicating the authentication token to the web server is performed by a biometric service.

5. The method of claim 1, wherein communicating the authentication token to the web server is performed by a web browser application.

6. The method of claim 1, wherein communicating the authentication token to the web server is performed by a biometric browser extension.

7. The method of claim 1, wherein the biometric data includes user fingerprint characteristics.

8. The method of claim 1, further comprising communicating a unique identifier associated with the biometric device to the web server.

9. The method of claim 1, further comprising receiving a random challenge from the web server.

10. The method of claim 1, wherein displaying secure financial transaction details to the user is performed by a biometric service.

11. The method of claim 1, further comprising monitoring the displayed secure financial transaction details to ensure that the secure financial transaction details are not modified.

12. The method of claim 1, wherein displaying secure financial transaction details to the user includes:

validating a digital signature associated with an agent application configured to display the secure financial transaction details; and

launching the agent application if the digital signature is validated.

13. The method of claim 12, wherein a biometric service validates the digital signature.

14. The method of claim 1, further comprising establishing a secure connection with the web server using an address received from the remote device.

15. The method of claim 1, wherein the authentication token is a one time password.

16. The method of claim 1, wherein the authentication token is a secret key.

17. The method of claim 1, wherein the authentication token is a response to a challenge received from the web server.

18. A computer comprising:

a processor; and

a memory coupled to the processor, the memory comprising computer-executable instructions that when executed by the processor perform operations including;

receiving a user request to implement a secure financial transaction;

communicating the secure financial transaction request to a web server capable of implementing the secure financial transaction;

receiving secure financial transaction details from the web server, wherein the secure financial transaction details are signed with a secret key;

displaying secure financial transaction details to the user;

requesting the user to confirm the secure financial transaction by providing biometric data;

receiving an authentication token from a biometric device if the user'"'"'s biometric data is validated; and

communicating the authentication token to the web server, wherein the web server is configured to process the secure financial transaction if the authentication token is confirmed as a valid authentication token.

19. The computer of claim 18, wherein the biometric data includes user fingerprint characteristics.

20. The computer of claim 18, wherein the secure financial transaction is a payment transaction.

21. The computer of claim 18, wherein the secure financial transaction is a transfer of funds between two financial accounts.

22. The computer of claim 18, wherein the processor further performs an operation that receives a random challenge from the web server.

23. The computer of claim 18, wherein the authentication token is a secret key.

24. The computer of claim 18, wherein the authentication token is a one time use password.