Method and System Using Universal ID and Biometrics

• US 20120079581A1
• Filed: 09/23/2011
• Published: 03/29/2012
• Est. Priority Date: 09/24/2010
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Patterson, Barbara E.
• Granted Patent: US 8,682,798 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A universal ID and biometrics systems and methods are disclosed. A method includes receiving an authentication request message originating from a user. The authentication request message includes a first identifier and a second identifier, where the second identifier includes biometric data. The method further includes determining a third identifier based on the first identifier and sending the second and third identifiers to a first server computer to determine if the second and third identifiers have a predetermined correlation. The method further includes receiving confirmation of user authentication if the identification system determines that the second and third identifiers have the predetermined correlation.

Claims

1. A server computer comprising:

a processor and a computer-readable storage medium coupled to the processor, the computer readable storage medium comprising code executable by the processor for implementing a method comprising;

receiving an authorization request message originating from a user, wherein the authorization request message includes financial transaction data, and wherein the authorization request further includes an authentication request message encoded therein, the authentication request message including a first identifier and a second identifier, the second identifier being a biometric identifier;

determining a third identifier based on the first identifier;

sending the second and third identifiers to an identification (ID) server computer of an identification system to determine if the second and third identifiers have a predetermined correlation; and

receiving confirmation from the identification system that the user is authenticated if the identification system determines that the second and third identifiers have the predetermined correlation.

2. The server computer of claim 1 wherein the biometric data is one or more of finger print data or retinal scan data.

3. The server computer of claim 1 further comprising matching the third identifier with the first identifier in a database, wherein the third identifier is a Universal Identifier (“

UID”

).

4. The server computer of claim 1 wherein the authentication request message further includes one or more of demographic data or geographic data.

5. The server computer of claim 1 further comprising sending the financial transaction data to an issuer at substantially the same time that the second and third identifiers are sent to the ID server computer.

6. A method comprising:

receiving an authorization request message originating from a user, the authorization request message including financial data, wherein the authorization request message further includes an authentication request message encoded therein, the authentication request message including a first identifier and a second identifier, the second identifier being a biometric identifier;

determining a third identifier based on the first identifier;

sending the second and third identifiers to an identification (ID) server computer of an identification system to determine if the second and third identifiers have a predetermined correlation; and

receiving confirmation from the identification system that the user is authenticated if the identification system determines that the second and third identifiers have the predetermined correlation.

7. The server computer of claim 6 wherein the biometric data includes one or more of finger print data or retinal scan data.

8. The server computer of claim 6 further comprising matching the third identifier with the first identifier in a database, wherein the third identifier is a Universal Identification (“

UID”

).

9. The server computer of claim 6 wherein the authentication request message further includes one or more of demographic data or geographic data.

10. The server computer of claim 6 further comprising sending the authorization request message to an issuer if confirmation is received that the second and third identifiers have the predetermined correlation.

11. A server computer comprising:

a processor and a computer-readable storage medium coupled to the processor, the computer readable storage medium comprising code executable by the processor for implementing a method comprising;

storing a first identifier and a first set of biometric data in a database;

receiving an authorization request message, wherein an authentication request message is encoded within the authorization request message;

extracting the authentication request message from the authorization request message, the authentication request message including a second identifier and a second set of biometric data;

determining whether the second identifier and second set of biometric data matches the first identifier and the first set of biometric data according to a predetermined threshold; and

generating an authentication response message indicating whether the first and second identifiers and the first and second set of biometric data match according to the predetermined threshold.

12. The server computer of claim 11 wherein the first identifier and second identifier are UIDs.

13. The server computer of claim 11 wherein the first and second set of biometric data includes one or more of finger print data or retinal scan data.

14. The server computer of claim 11 wherein the authentication request message is received from one of a terminal, an acquirer, a payment processing network, or an issuer.

15. The server computer of claim 11 wherein the authentication request message further includes one or more of demographic data or geographic data.

16. A method comprising:

storing a first identifier and a first set of biometric data in a database;

receiving an authorization request message, wherein an authentication request message is encoded within the authorization request message;

extracting the authentication request message from the authorization request message, the authentication request message including a second identifier and a second set of biometric data;

determining whether the second identifier and second set of biometric data matches the first identifier and the first set of biometric data according to a predetermined threshold; and

generating an authentication response message indicating whether the first and second identifiers and the first and second set of biometric data match according to the predetermined threshold.

17. The server computer of claim 16 wherein the first identifier and second identifier are UIDs.

18. The server computer of claim 16 wherein the first and second set of biometric data includes one or more of finger print data or retinal scan data.

19. The server computer of claim 16 wherein the authentication request message is received from one of a terminal, an acquirer, a payment processing network, or an issuer.

20. The server computer of claim 16 wherein the authentication request message further includes one or more of demographic data or geographic data.