Secure Transaction Systems and Methods

• US 20110083173A1
• Filed: 03/31/2010
• Published: 04/07/2011
• Est. Priority Date: 10/06/2009
• Status: Active Grant

• Current Assignee: Synaptics Incorporated
• Original Assignee: Validity Sensors Incorporated (Synaptics Incorporated)
• Inventors: Schwab, Frank, Baghdasaryan, Davit, Hattery, Larry, Chan, Philip Yiu Kwong, Kesanupalli, Ramesh
• Granted Patent: US 8,904,495 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

A user transaction request is received at a client device. A web browser plug-in communicates the user transaction request to a server that determines whether the user transaction request is a secure transaction. Transaction data is received from the server via the web browser plug-in. If the received transaction data indicates a secure transaction, the user is prompted to provide biometric data, which is received from the user. The web browser plug-in then communicates a transaction confirmation to the server.

Claims

1. A method of implementing a secure transaction, the method comprising:

receiving a user transaction request at a client device;

a web browser plug-in communicating the user transaction request to a server, wherein the server determines whether the user transaction request is a secure transaction;

receiving transaction data from the server via the web browser plug-in;

if the received transaction data from the server indicates a secure transaction;

prompting the user to provide biometric data;

receiving biometric data from the user; and

communicating a transaction confirmation to the server with the web browser plug-in.

2. The method of claim 1, wherein the transaction confirmation is communicated to the server using an authentication token.

3. The method of claim 1, wherein the biometric data includes fingerprint characteristics associated with the user'"'"'s finger.

4. The method of claim 1, wherein receiving biometric data from the user includes reading user fingerprint characteristics via a fingerprint sensor.

5. The method of claim 1, wherein communicating a transaction confirmation to the server includes monitoring transaction data to ensure that the transaction details are not modified.

6. The method of claim 1, further comprising displaying transaction details to the user via the web browser plug-in.

7. A method of implementing a secure transaction, the method comprising:

receiving a user transaction request at a client device;

a web browser extension communicating the user transaction request to a server, wherein the server determines whether the user transaction request is a secure transaction;

receiving transaction data from the server via the web browser extension;

if the received transaction data from the server indicates a secure transaction;

prompting the user to provide fingerprint data;

receiving fingerprint data from the user; and

communicating a transaction confirmation to the server with the web browser extension.

8. The method of claim 7, wherein the transaction confirmation is communicated to the server using an authentication token.

9. The method of claim 7, wherein the fingerprint data includes fingerprint characteristics associated with the user'"'"'s finger.

10. The method of claim 7, wherein receiving biometric data from the user includes reading user fingerprint characteristics via a fingerprint sensor.

11. The method of claim 7, wherein communicating a transaction confirmation to the server includes monitoring transaction data to identify any modification to the transaction details.

12. The method of claim 7, further comprising displaying transaction details to the user via the web browser extension.

13. A computer comprising:

a processor; and

a memory coupled to the processor, the memory comprising computer-executable instructions that when executed by the processor perform operations including;

receiving a user transaction request at a client device;

a web browser plug-in communicating the user transaction request to a server, wherein the server determines whether the user transaction request is a secure transaction;

receiving transaction data from the server via the web browser plug-in;

if the received transaction data from the server indicates a secure transaction;

prompting the user to provide biometric data;

receiving biometric data from the user; and

communicating a transaction confirmation to the server with the web browser plug-in.

14. The computer of claim 13, wherein the transaction confirmation is communicated to the server using an authentication token.

15. The computer of claim 13, wherein the biometric data includes fingerprint characteristics associated with the user'"'"'s finger.

16. The computer of claim 13, wherein receiving biometric data from the user includes reading user fingerprint characteristics via a fingerprint sensor.

17. The computer of claim 13, wherein communicating a transaction confirmation to the server includes monitoring transaction data to ensure that the transaction details are not modified.

18. The computer of claim 13, further comprising displaying transaction details to the user via the web browser plug-in.