Tokenless biometric electronic stored value transactions

• US 6,192,142 B1
• Filed: 02/02/1999
• Issued: 02/20/2001
• Est. Priority Date: 11/28/1994
• Status: Expired due to Term

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Smarttouch Incorporated
• Inventors: Lee, Jonathan Alexander, Hoffman, Ned, Pare, Jr., David Ferrin
• Primary Examiner(s): Tadayon, Bijan
• Assistant Examiner(s): AZARIAN, SEYED H
• Application Number:
  US09/243,208
• Time in Patent Office: 749 Days
• Field of Search: 382/115, 382/116, 382/117, 382/118, 382/119, 364/408, 340/853.2, 340/853.8, 235/375, 235/376, 235/379, 235/380, 235/382.5, 235/382, 235/381, 902/12, 902/13, 902/22, 902/23, 902/24
• US Class Current: 382/115
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The invention provides a method and device for tokenless authorization of a stored value transaction between a payor and a payee using an electronic identicator and at least one payor bid biometric sample, said method comprising the steps of registering with the electronic identicator at least one payor registration biometric sample, and at least one payor stored value account. During a payee registration step, the payee registers a payee identification data with the electronic identicator. In a transaction formation step, an electronic financial transaction is formed between the payor and the payee, which includes payee bid identification data, a transaction amount, and at least one payor bid biometric sample. The bid biometric sample is obtained from the payor'"'"'s person. In at least one transmission step, the payee bid identification data, the transaction amount, and payor bid biometric sample are electronically forwarded to the electronic identicator. Payor identification occurs when the electronic identicator compares the bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor. Furthermore, the electronic identicator compares the payee'"'"'s bid identification data with a payee'"'"'s registered identification data for producing either a successful or failed identification of the payee. Upon successful identification of the payor and payee, a stored value transaction is authorized without the payor presenting any man-made tokens such as a stored value card, smartcards, or magnetic swipe cards to debit the payor stored value account.

Claims

1. A method for tokenless biometric authorization of a stored value transaction between a payor and a payee using an electronic identicator and at least one payor bid biometric sample, said method comprising the steps of:

a. a payor registration step, wherein the payor registers with the electronic identicator at least one registration biometric sample, and at least one payor stored value account;

b. a payee registration step, wherein the payee registers payee identification data with the electronic identicator;

c. a transaction formation step, wherein an electronic financial transaction is formed between the payor and the payee, comprising payee bid identification data, a transaction amount, and at least one payor bid biometric sample, wherein the bid biometric sample is obtained from the payor'"'"'s person;

d. at least one transmission step, wherein the payee bid identification data, the transaction amount, and payor bid biometric sample are electronically forwarded to the electronic identicator;

e. a payor identification step, wherein the electronic identicator compares the bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor;

f. a payee identification step, wherein the electronic identicator compares the payee'"'"'s bid identification data with a payee'"'"'s registered identification data for producing either a successful or failed identification of the payee;

g. wherein upon successful identification of the payor and payee, a stored value transaction is authorized without the payor presenting a stored value card, smartcard, or magnetic swipe card to debit the payor stored value account.

2. The method of claim 1 wherein the payee identification data comprises any one of the following;

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

3. The method of claim 1 further comprising a payor deposit step, wherein the payor deposits cash into the payor stored value account, and the payor stored value account is credited by the amount of the deposit.

4. The method of claim 1 wherein the payor registration step further comprises registering a payor personal identification number with the electronic identicator, which is used by the tokenless authorization system to identify the payor.

5. The method of claim 1 further comprising a payor resource determination step, wherein it is determined if the payor'"'"'s stored value account has sufficient resources to be debited for the transaction amount.

6. The method of claim 1 further comprising a transaction payment step, wherein the transaction amount is debited from a payor'"'"'s stored value account.

7. The method of claim 1 wherein the registration step further comprises registering a payor private code with the electronic identicator, which is distinct from a personal identification number and not used in the payor identification step, wherein the private code is displayed to the payor to validate that the authentic electronic identicator has processes the stored value transaction.

8. The method of claim 6 wherein both the payor resource determination step and the transaction payment step further comprise the tokenless authorization system communicating with one or more external computers.

9. The method of claim 1 wherein the transaction amount comprises price information, a list of goods and services, a payee name, a date or time, a location, or an invoice number.

10. The method of claim 1 wherein the transaction acceptance step further comprises the payor entering a new transaction amount, which is the sum of a cash back amount and the transaction amount, for the stored value transaction.

11. The method of claim 6 wherein the transaction payment step further comprises the payor designating a future date on which the transaction amount is to be deducted from the payor'"'"'s stored value account.

12. The method of claim 4 further comprising a biometric theft resolution step, wherein the payor'"'"'s personal identification number is changed whenever the payor'"'"'s biometric sample is determined to have been fraudulently duplicated.

13. A tokenless stored value transaction authorization device using biometrics for debiting funds from a payor stored value account, said device comprising:

a. a computer data processing center further comprising data bases wherein the payor registers a registration biometric sample and the payee registers a payee identification data;

b. a party identification apparatus having a biometric sensor for input of a biometric sample;

c. communication lines for transmission of a registration and bid biometric sample obtained by the party identification apparatus from the payor'"'"'s person to the data processing center;

d. a comparator engine for comparing a bid biometric sample to at least one registration biometric sample, and comparing a bid payee identification data with at least one registration payee identification data; and

e. an execution module for authorizing debit of a transaction amount from the payor stored value account upon successful identification of the payor, wherein no stored value card, smartcard, or magnetic swipe card is used by the payor to authorize the debit of the stored value account.

14. The authorization device of claim 13 wherein the payee identification data comprises any one of the following;

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index.

15. The authorization device of claim 13 wherein the payor registration biometric sample is associated with a PIN, the PIN used by the authorization device for identification the payor.

16. The authorization device of claim 13 wherein the execution module determines if the payor'"'"'s stored value account has sufficient resources to be debited for the transaction amount.

17. The authorization device of claim 13 wherein the execution module debits the transaction amount from the payor stored value account.

18. The authorization device of claim 13 further comprising transaction processors wherein the payor registers a private code with the authorization device, which is distinct from a personal identification number and not used to identify the payor, wherein the private code is displayed to the payor to validate that the authentic authorization device has processed the financial transaction.

19. The device of claim 13 further comprising a biometric theft resolution means, wherein the payor'"'"'s personal identification number is changed whenever the payor'"'"'s biometric sample is determined to have been fraudulently duplicated.