Tokenless biometric electronic financial transactions via a third party identicator

• US 6,950,810 B2
• Filed: 12/06/2000
• Issued: 09/27/2005
• Est. Priority Date: 11/28/1994
• Status: Expired due to Fees

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Indivos Corporation (Solidus Networks Incorporated)
• Inventors: Hoffman, Ned, Pare, Jr., David Ferrin, Lee, Jonathan Alexander, Lapsley, Philip D.
• Primary Examiner(s): Hayes, John W.
• Application Number:
  US09/731,536
• Publication Number:
  US 20010000535A1
• Time in Patent Office: 1,756 Days
• Field of Search: 705/64, 705/65, 705/67, 705/72, 705/76, 705/78, 705/79, 705/26, 705/39, 705/44, 902/35, 902/30, 902/24, 902/40, 382/115, 235/379, 235/380
• US Class Current: 705/78
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G06Q 20/4097 : using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 40/00 : Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06V 10/772 : Determining representative reference patterns, e.g. averaging or distorting patterns; Generating dictionaries
• CPC Class Codes: G06V 40/1365 : Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 9/002 : Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity

Abstract

The invention provides a method and device for tokenless authorization of an electronic payment between a payor and a payee using an electronic third party identicator and at least one payor bid biometric sample. In a payor registration step, the payor registers with an electronic third party identicator at least one registration biometric sample, and at least one payor financial account identifier. The payee registers a payee identification data with the electronic third party identicator. A payee bid identification data and a payor bid biometric sample collected from the payor'"'"'s person are electronically forwarded to the third party electronic identicator. A comparator engine compares the bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor. The comparator engine also compares the payee'"'"'s bid identification data with a payee'"'"'s registered identification data for producing either a successful or failed identification of the payee. Once the electronic third-party identicator successfully identifies the payor and payee, the identicator electronically forwards at least one payor financial account identifier to the payee. An electronic financial transaction is then formed between the payor and payee, comprising a transaction amount and a payor financial account identifier. This transaction is then electronically forwarded to a financial transaction processor for authorization.

Claims

1. A tokenless electronic payment authorization device for transferring funds from a payor financial account to a payee financial account, said device comprising:

a computer data processing center further comprising one or more data bases wherein the payor registers a registration biometric sample associated with at least one payor financial account identifier and the payee registers a payee identification data;

a party identification apparatus (PIA) having a biometric sensor for input of a biometric sample;

communication lines for transmission of a registration and bid biometric sample obtained by the party identification apparatus from the payor'"'"'s person to the data processing center;

a comparator engine for comparing a bid biometric sample to at least one registration biometric sample, and comparing a bid payee identification data with at least one registration payee identification data; and

means coupled to the party identification apparatus for receiving a message containing the payor'"'"'s financial account identifier(s) and transmitting an account index code identifying a payor financial account and a transaction amount from the PIA to a financial transaction processor to authorize a payment from the payor'"'"'s financial account to the payee;

the system being arranged so that the biometric sample is sent together with payee identification data to the comparator engine and the message containing the payor'"'"'s financial account identifier(s) is sent from the computer data processing center to the PIA only if the bid and registration payee data match and if the bid and registration payor biometric samples match.

2. The authorization device of claim 1, wherein no credit/debit card, smartcard or a paper check is used by the payor to conduct the financial transaction.

3. The authorization device of claim 1, wherein the payee identification data comprises any one of the following:

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

4. The authorization device of claim 1, wherein the payor registration biometric sample is associated with a PIN, the PIN used by the authorization device for identification the payor.

5. The authorization device of claim 1, including means coupled to the party identification apparatus for receiving the message and transmitting the payor financial account identifier and a transaction amount to a financial transaction processor via the payee to authorize a payment from the payor'"'"'s financial account to the payee.

6. The authorization device of claim 1 further comprising an account selector module, wherein after the payor has been successfully identified, the authorization device presents at least one financial account which was registered by the payor with the authorization device for selection of one of the financial accounts by the payor for debiting.

7. The authorization device of claim 1 including an execution module which debits the transaction amount from a payor'"'"'s selected financial account.

8. The authorization device of claim 7, wherein the execution module credits the transaction amount to the payee'"'"'s financial account.

9. The authorization device of claim 1 further comprising a transaction processor wherein the payor registers a private code with the authorization device, which is distinct from a personal identification number and not used to identify the payor, wherein the private code is displayed to the payor to validate that the authentic authorization device has processed the financial transaction.

10. The authorization device of claim 1 wherein a subset of the payor registration biometric samples are stored in a payor re-registration database to which the comparator engine compares a payor'"'"'s registration biometric samples and if a match occurs, alerts the authorization system to the fact that the payor has re-registered with the tokenless payment authorization system.

11. The authorization device of claim 1, wherein the computer data processing center and the comparator engine are included in an electronic third party identicator.

12. The authorization device of claim 1, wherein the message containing the payor'"'"'s financial account identifier(s) is sent to the PIA from the computer data processing center.

13. The authorization device of claim 1, including means coupled to the party identification apparatus for receiving the message and transmitting the payor financial account identifier and a new transaction amount from the PIA to a financial transaction processor to authorize a payment from the payor'"'"'s financial account to the payee, the new transaction amount being the sum of a cash back amount and a transaction amount.