Tokenless biometric ATM access system

• US 6,154,879 A
• Filed: 02/05/1999
• Issued: 11/28/2000
• Est. Priority Date: 11/28/1994
• Status: Expired due to Term

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Smarttouch Incorporated
• Inventors: Lee, Jonathan Alexander, Hoffman, Ned, Pare, Jr., David Ferrin
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Nguyen, Cuong H.
• Application Number:
  US09/245,501
• Time in Patent Office: 662 Days
• Field of Search: 705/26, 705/34, 705/39, 705/40, 705/35, 902/3, 902/4, 382/115, 380/4, 380/52, 380/49, 380/23-25, 235/492, 235/380, 235/487
• US Class Current: 705/35
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/08 Auctions
• CPC Class Codes: G06Q 40/00 : Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06V 40/1365 : Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/20 : Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity

Abstract

The present invention provides a method for tokenless biometric access to financial accounts at an institution using an automated teller machine. This method comprises a user registration step, wherein a user registers with an electronic identicator one or more registration biometric samples and one or more user financial accounts. During an initiation step, the user initiates an account access at an automated teller machine by submitting at least one bid biometric sample directly from the user'"'"'s person, wherein no portable man-made memory devices such as smartcards or swipe cards are used by the user. In at least one transmission step, an account access request message comprising the user'"'"'s bid biometric is forwarded from the automated teller machine to the electronic identicator. During a user identification step, the electronic identicator compares the bid biometric sample in the account access request message with a registration biometric sample, to produce either a successful or failed identification of the user. Upon successful identification of the user, at least one financial account of the user is retrieved, and in an access step, after successful identification of the user and successful financial account retrieval, the user is allowed to access the user financial account.

Claims

1. A computer implemented method for tokenless biometric access to financial accounts at an institution using an automated teller machine, the method comprising the steps of:

a. a user registration step, wherein a user registers with an electronic identicator one or more registration biometric samples and one or more user financial accounts;

b. an initiation step, wherein the user initiates an account access at an automated teller machine by submitting at least one bid biometric sample directly from the user'"'"'s person, wherein no portable man-made memory devices such as smartcards or swipe cards are used by the user;

c. at least one transmission step, wherein an account access request message comprising the user'"'"'s bid biometric is forwarded from the automated teller machine to the electronic identicator;

d. a user identification step, wherein the electronic identicator compares the bid biometric sample in the account access request message with a registration biometric sample, to produce either a successful or failed identification of the user;

e. an account retrieval step, wherein upon successful identification of the user, at least one financial account of the user is retrieved; and

f. an access step, wherein after successful identification of the user and successful financial account retrieval, the user is allowed to access the user financial account.

2. The method of claim 1 wherein the user registration step further comprises registering a user personal identification number with the electronic identicator, used by the electronic identicator to identify the user.

3. The method of claim 1 further comprising a financial operation step, wherein the user performs at least one action selected from the group comprising:

withdrawing cash, depositing funds, transferring funds between accounts, obtaining account balances, purchasing products, paying bills, and obtaining electronic cash.

4. The method of claim 1 further comprising an electronic identicator authentication step wherein a private code, distinct from a PIN and not used to gain access to the electronic identicator, is gathered from the user during the user registration step and is presented to only the user during a presentation step, whereby the user is assured that the authentic electronic identicator was used to process the account access because a false electronic identicator would not be able to present the user'"'"'s private code.

5. The method of claim 1 further comprising a user account retrieval step, wherein:

a. the user registration step further comprises assigning an account index code to a user financial account;

b. an account specification step, wherein the user enters an account index code;

c. the transmission step further comprises including the account index code in the account access request message; and

d. an account retrieval step further comprises the electronic identicator retrieving the user financial account number using the account index code from the account access request message.

6. The method of claim 5 wherein the account index code comprises an alphanumeric code.

7. The method of claim 5 further comprising an account name display step, wherein a list of accounts with their account index codes is retrieved and displayed to the user after a successful identification.

8. The method of claim 5 wherein during the user registration step, the user registers an emergency account index code, which if entered by the user during the initiation step in place of the account index code, triggers a silent alarm, whereby authorities are notified of a coerced account access.

9. The method of claim 8 wherein during the registration step, the user specifies any combination of actions taken upon the triggering of the silent alarm, comprising artificial financial resource limits, presentation of a false private code, rejection of the account access, dispensing marked bills, notifying the authorities, or the sending of the silent alarm to the institution.

10. The method of claim 1 wherein the user registers an emergency index during the registration step which, if entered by the user during the initiation step, triggers a silent alarm.

11. The method of claim 1 wherein the automated teller machine is remote from the institution and communicates with the institution using a computer network.

12. The method of claim 11 wherein the computer network is one or more of the group comprising an automated teller machine network, the Internet, a private intranet, a telephone network, or a cable TV network.

13. The method of claim 1 wherein the user registration step further comprises comparing the user'"'"'s registration biometric samples to previously designated biometric samples of certain users wherein if a match occurs, the user is determined to have re-registered, whereby users who have perpetrated fraud on the system can be automatically identified from their biometrics alone when they re-register.

14. The method of claim 13 wherein the registration step further comprises collecting the biometric samples from a specific finger, whereby the system can detect re-registrations of previously designated biometric samples of certain users.

15. The method of claim 1 wherein the biometric sample is selected from any of the set of:

a fingerprint, a retinal image, an iris image, a facial scan and a voice print.

16. The method of claim 1 further comprising a biometric theft resolution step, wherein a biometric sorting number of the user is changed to prevent unauthorized access by individuals who have obtained the user'"'"'s personal authentication information.

17. The method of claim 1 wherein the automated teller machine comprises an application executing on a personal computer.

18. A computer implemented method for tokenless biometric access to financial accounts in institutions using an automated teller machine, and selecting from among different financial accounts, the method comprising the steps of:

a. a user registration step, wherein a user registers with an electronic identicator one or more registration biometric samples, one or more user financial accounts, and assigns an account index code to a user financial account;

b. an initiation step, wherein the user initiates an account access at an automated teller machine by entering at least one bid biometric sample directly from the user'"'"'s person, wherein no portable man-made memory devices such as smartcards or swipe cards are used by the user;

c. an account specification step, wherein the user enters an account index code;

d. at least one transmission step, wherein an account access request message comprising the bid biometric data and the account index code is forwarded from the automated teller machine to the electronic identicator;

e. a user identification step, wherein the electronic identicator compares the bid biometric data in the account access request message with the registration biometric samples to produce either a successful or failed identification of the user;

f. an account retrieval step, wherein upon successful identification of the user, a financial account number of the user is retrieved using the account index code from the account access request message; and

g. an access step, wherein after successful identification of the user and successful financial account number retrieval, the user is allowed to access the user financial account.

19. The method of claim 18 wherein the user registration step further comprises registering a user personal identification number with the electronic identicator, used by the electronic identicator to identify the user.

20. The method of claim 18 further comprising an electronic identicator authentication step wherein a private code, distinct from a PIN and not used to gain access to the electronic identicator, is gathered from the user during the user registration step and is presented to only the user during a presentation step, whereby the user is assured that the authentic electronic identicator was used to process the account access because a false electronic identicator would not be able to present the user'"'"'s private code.

21. The method of claim 18 wherein the account index code comprises an alphanumeric code.

22. A computerized device for tokenless biometric access to financial accounts at an institution using an automated teller machine, the device comprising:

a. an electronic identicator for comparing the bid and registration biometric samples of a user, wherein the electronic identicator compares the bid biometric sample in an account access request message with a registration biometric sample, to produce either a successful or failed identification of the user;

b. a biometric input apparatus for submission of the user'"'"'s biometric samples to the electronic identicator;

c. at least one financial account;

d. an account retrieval module, wherein upon successful identification of the user, at least one financial account of the user is retrieved; and

e. an execution module for debiting and crediting the user'"'"'s financial account;

f. wherein after successful identification of the user and successful financial account retrieval, the user is allowed to access the user financial account;

g. wherein no man made tokens such as cards or smartcards are presented for submitting a bid biometric sample.

23. The device of claim 22 wherein the user registers a user personal identification number with the electronic identicator, which is used by the electronic identicator to identify the user.

24. The device of claim 22 further comprising an electronic identicator authentication module wherein a private code, distinct from a personal identification number and not used to gain access to the electronic identicator, is gathered from the user during the user registration step and is presented to only the user during a presentation step, whereby the user is assured that the authentic electronic identicator was used to process the account access.

25. The device of claim 22 further comprising a user account retrieval module, wherein the user assigns an account index code to a user financial account during registration.

26. The device of claim 25 further comprising a user account retrieval module, wherein the electronic identicator retrieves the user financial account number using an account index code contained in the account access request message.

27. The device of claim 22 wherein the user'"'"'s registration biometric samples are compared to previously designated biometric samples of certain users wherein if a match occurs, the user is determined to have re-registered.