Biometric Image in Online Commerce

• US 20150294382A1
• Filed: 06/25/2015
• Published: 10/15/2015
• Est. Priority Date: 09/09/2013
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Alsina, Thomas, De Atley, Dallas B., Farrugia, Augustin J., Han, Byron B., Kelly, Sean B., Marciniak, Craig A., Khutornenko, Maxim, Walsh, Raymond N.
• Application Number:
  US14/751,097
• Publication Number:
  US 20150294382A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An online store can transmit an online account token to an electronic device or to a biometric sensing device after a user successfully enters his or her account password. The electronic device or the biometric sensing device can countersign the online account token when the one or more biometric images match reference biometric images and the account password matches user identifier data stored in the electronic device or in the biometric sensing device. The countersigned online account token can then be transmitted to the online store. The user can then make one or more purchases after the online store receives the countersigned online account token.

Claims

1-17. -17. (canceled)

18. A method for operating an electronic device that includes a fingerprint sensor, the method comprising:

receiving an online account token associated with an account on an online store;

storing the online account token and data associated with the fingerprint sensor in a memory;

determining, by a processing device, if the fingerprint sensor is to be used for a purchase on the online store;

receiving, from the fingerprint sensor, a fingerprint image when the fingerprint sensor is to be used for the purchase on the online store;

countersigning, by the processing device, the online account token with the data associated with the fingerprint sensor when the received fingerprint image matches a reference fingerprint image; and

transmitting the countersigned account token to the online store.

19. The method as in claim 18, further comprising:

receiving an account password associated with the online store when the fingerprint sensor will not be used for the purchase on the online store; and

transmitting the account password to the online store.

20. The method as in claim 18, further comprising prior to the processing device countersigning the online account token, the processing device determining if the fingerprint image matches the reference fingerprint image.

21. The method as in claim 20, further comprising prior to determining if a fingerprint image matches a reference fingerprint image, performing an enrollment process, wherein the enrollment processing includes receiving a reference fingerprint image from a user and storing the reference fingerprint image in the memory.

22. The method as in claim 18, wherein the data associated with the fingerprint sensor comprises a passcode associated with the fingerprint sensor.

23. The method as in claim 18, wherein the data associated with the fingerprint sensor comprises a universally unique identifier associated with the fingerprint sensor.

24. The method as in claim 18, further comprising the processing device countersigning the online account token with a directory services identification associated with the account on the online store when the received fingerprint image matches the reference fingerprint image.

25. The method as in claim 18, wherein the processing device comprises a secure processing device and the memory comprises a secure memory.

26. A system, comprising:

a processing device;

a fingerprint sensor operatively connected to the processing device; and

a memory operatively connected to the processing device and to the fingerprint sensor, wherein an online account token associated with an account on an online store and a data associated with the account on the online store are stored in the memory,

the processing device configured to;

receive from the fingerprint sensor a fingerprint image when the fingerprint sensor is to be used for a purchase on an online store;

countersign the online account token with the data associated with the account on the online store when the received fingerprint image matches a reference fingerprint image; and

transmit the countersigned account token to the online store.

27. The system as in claim 26, further comprising a network communications interface, wherein the processing device is configured to transmit the countersigned online account token to the online store using the network communications interface.

28. The system as in claim 26, wherein the processing device is further configured to countersign the online account token with data associated with the fingerprint sensor when the received fingerprint image matches a reference fingerprint image.

29. The system as in claim 28, wherein the wherein the data associated with the fingerprint sensor comprises a passcode associated with the fingerprint sensor.

30. The system as in claim 28, data associated with the fingerprint sensor comprises a universally unique identifier associated with the fingerprint sensor.

31. The system as in claim 26, wherein the data associated with the account on the online store comprises a directory services identification associated with the account on the online store.

32. The system as in claim 26, wherein the processing device comprises a secure processing device.

33. The system as in claim 26, wherein the memory comprises a secure memory.

34. The system as in claim 33, wherein the secure memory comprises a first memory and a second memory, the first memory comprising a non-persistent memory that stores the online account token and the second memory comprising a persistent memory that stores the data associated with the fingerprint sensor.

35. A method for authenticating a user having an account on an online store, the method comprising:

the online store transmitting an online account token associated with the account to an electronic device;

the online store receiving a countersigned online account token from the electronic device, wherein the countersigned online account token is countersigned with data associated with a fingerprint sensor and indicates an identity of the user is authenticated based on a fingerprint image and indicates confirmation that the fingerprint image is associated with the account.

36. The method as in claim 35, further comprising the online store completing a purchase based on the receipt of the countersigned online account token.

37. The method as in claim 35, further comprising the online store granting access to the account on the online store based on the receipt of the countersigned online account token.