Method and system for proffering multiple biometrics for use with a FOB

• US 7,360,689 B2
• Filed: 03/26/2004
• Issued: 04/22/2008
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Saunders, Peter D, Montgomery, Joshua L, Larkin, Carl, Gray, William J, Fields, Seth W, Bonalle, David S, Beenau, Blayn W
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US10/708,837
• Publication Number:
  US 20040236701A1
• Time in Patent Office: 1,488 Days
• Field of Search: 235/487, 235/492, 235/380, 340/5.4, 340/5.6, 340/5.82, 340/5.1, 340/572.1
• US Class Current: 235/380
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07345 by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G07C 2009/00984 : fob
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Claims

1. A transponder-reader transaction system configured with a biometric security device, said system comprising:

a first transponder responsive to a first RF interrogation signal from a reader in communication with said system;

a second transponder physically in a same fob as, and associated with, said first transponder and responsive to a second RF interrogation signal, said first RF interrogation signal responding to distinct frequencies from said second RF interrogation signal;

a transponder system authentication circuit in communication with at least one of said first transponder and said second transponder, said transponder system authentication circuit configured to authenticate at least one of said first RF interrogation signal and said second RF interrogation signal;

a biometric sensor configured to detect a first proffered biometric sample and a second proffered biometric sample, wherein said first proffered biometric sample and said second proffered biometric sample are from the same person, and wherein said first proffered biometric sample is different than said second proffered biometric sample, said biometric sensor configured as a switch to communicate with said system to selectively facilitate control of an order of operation of said first transponder and said second transponder;

a verification device configured to verify said first proffered biometric sample and said second proffered biometric sample to facilitate a payment transaction; and

, said reader configured to provide a first radio frequency (RF) interrogation signal for powering a transponder system, to receive a transponder system RF signal, and to communicate transponder system account data related to said transponder system RF signal to a merchant system, said reader including, a first interrogator for providing said first RF interrogation signal;

said transponder system authentication circuit comprising a reader authentication circuit in communication with said first interrogator for authenticating said transponder system RF signal;

an RFID reader database for storing RFID reader data, said reader database in communication with said reader authentication circuit;

an RFID reader protocol/sequence controller in communication with at least one of said first interrogator, said reader authentication circuit, and said reader database, said reader protocol/sequence controller configured to facilitate control of an order of operation of said first interrogator, said reader authentication circuit, and said reader database; and

an RFID reader communications interface configured to communicate with said merchant system, said reader communications interface configured to provide said transponder system account data, wherein said transponder system is configured to receive said first RF interrogation signal, to authenticate said first RF interrogation signal, and to transmit said transponder system account data, said transponder system further comprising;

a first transponder responsive to said first RF interrogation signal;

a transponder system authentication circuit in communication with said first transponder, said transponder system authentication circuit configured to authenticate said first RF interrogation signal;

a transponder system database for storing said transponder system account data, said transponder system database in communication with said transponder system authentication circuit; and

a transponder system protocol/sequence controller in communication with at least one of said first transponder, said transponder system authentication circuit, and said transponder system database, said transponder system protocol/sequence controller configured to control the order of operation of said first transponder, said transponder system authentication circuit, and said transponder system database, wherein said transponder system protocol/sequence controller is configured to activate said transponder system authentication circuit in response to said first RF interrogation signal having an RFID reader authentication code, said transponder system authentication circuit configured to encrypt said reader authentication code to provide an encrypted RFID reader authentication code, said transponder system authentication circuit configured to provide said encrypted RFID reader authentication code to said first transponder for providing to said reader, wherein said reader is configured to receive said encrypted RFID reader authentication code, and wherein said reader protocol/sequence controller is configured to activate said reader authentication circuit in response to said encrypted RFID reader authentication code, wherein said reader database is configured to provide a transponder system decryption security key to said reader authentication circuit in response to said encrypted RFID reader authentication code, said transponder system decryption security key for use in decrypting said encrypted RFID reader authentication code to form a decrypted RFID reader authentication code, said transponder system decryption security key provided to said reader based on an unique transponder identification code, wherein said reader authentication circuit is configured to compare said decrypted RFID reader authentication code and said reader authentication code to determine whether a match exists, and wherein said reader protocol/sequence controller is configured to activate said reader communications interface where said reader authentication circuit matches said decrypted RFID reader authentication code and said reader authentication code.

2. The transponder-reader transaction system of claim 1, wherein said biometric sensor configured as a switch provides a different authentication code to said first and second transponders.

3. The transponder-reader transaction system of claim 2, wherein said biometric sensor configured as a switch is configured to place said first and second transponders in at least one of a selectivity mode and an inclusivity mode, wherein said selectivity mode includes enabling purchase of an item using a selected account number and inclusivity mode includes said first and second transponders in an operational mode permitting said first and second transponders to be responsive to RF interrogation and interrogation via USB connector.

4. The transponder-reader transaction system of claim 3, further including a database contained in at least one of the transponder, transponder reader, sensor, remote server, merchant server and transponder-reader system, wherein said database is configured to store a data packet, wherein said data packet includes at least one of proffered and registered biometric samples, proffered and registered user information, terrorist information, and criminal information.

5. The transponder-reader transaction system of claim 4, wherein said first proffered biometric sample and said second proffered biometric sample from the same person are associated with a different one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

6. The transponder-reader transaction system of claim 5, wherein said first proffered biometric sample primarily accesses first account information, wherein said first account information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, and wherein said first proffered biometric sample secondarily accesses second account information, wherein said second account information comprises personal information, credit card information, debit card information, savings account information, and loyalty point information, where second user information is different than first user information.

7. The transponder-reader transaction system of claim 6, wherein said biometric sensor is configured to detect said second proffered biometric sample from said second transponder upon rejection of said first proffered biometric sample from said first transponder, wherein said second proffered biometric sample is different than said first proffered biometric sample.

8. The transponder-reader transaction system of claim 7, wherein said device configured to verify is configured to facilitate at least one of access, activation of a device, a financial transaction, and a non-financial transaction.

9. The transponder-reader transaction system of claim 8, wherein said device configured to verify is configured to facilitate the use of at least one secondary security procedure which includes sending a signal to notify that the proposed transaction would violate at least one of said preset transaction limitation and an established rule for said activated transponder, wherein said preset transaction limitation comprises at least one of a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

10. The transponder-reader transaction system according to claim 1, wherein said transponder system protocol/sequence controller activates said transponder system authentication circuit in response to said first RF interrogation signal, wherein said transponder system authentication circuit is configured to provide a transponder authentication code to said first transponder for providing to said reader.

11. The transponder-reader transaction system according to claim 10, wherein said reader authentication circuit is configured to receive said transponder authentication code, said reader protocol/sequence controller activating said reader authentication circuit in response to said transponder authentication code, said reader authentication circuit configured to encrypt said transponder authentication code to form an encrypted transponder authentication code, wherein said reader is configured to provide said encrypted transponder authentication code to said transponder system.

12. The transponder-reader transaction system according to claim 11, wherein said transponder system database is configured to store at least one of a transponder system identification data and an RFID reader decryption security key, and wherein said transponder system database is configured to provide said reader decryption security key to said transponder system authentication circuit in response to said encrypted transponder authentication code, said reader decryption security key for use in decrypting said encrypted transponder authentication code to form a decrypted transponder authentication code.

13. The transponder-reader transaction system according to claim 12, wherein said transponder system authentication circuit is configured to compare said decrypted transponder authentication code and said transponder authentication code to determine whether a match exists.

14. The transponder-reader transaction system according to claim 13, wherein said transponder system account data is in magnetic stripe format.

15. The transponder-reader transaction system according to claim 14, wherein said transponder system account data is encrypted as a pre-encrypted transponder system account data, wherein said transponder system database is configured to provide said pre-encrypted transponder system account data to said reader when said transponder system authentication circuit matches said decrypted transponder authentication code and said transponder authentication code.

16. The transponder-reader transaction system according to claim 15, wherein said reader communications interface is configured to provide a transponder system PIN and said pre-encrypted transponder system account data when said transponder authentication code matches said decrypted transponder authentication code, and said decrypted RFID reader authentication code matches said reader authentication code.

17. The transponder-reader transaction system of claim 1, further comprising said system configured to determine whether a user requested transaction exceeds a preloaded value defined by a preloaded value data file associated with a transponder;

determine whether said transaction exceeds a combination of said preloaded value and a reload value defined by a reload protocol data file associated with said transponder, wherein said preloaded value data file and said reload protocol data file define predetermined values for use in satisfying a user transaction request;

notify a user to proffer a biometric sample to authorize use of said combination of said preloaded value and said reload value to complete said transaction;

detect a proffered biometric sample at a sensor communicating with said system;

verify said proffered biometric sample; and

authorize said transaction to proceed by applying said preloaded value from a first funding source associated with said transponder and applying a portion of said reload value from one of said first funding source and a second funding source according to said reload protocol data file.

18. The transponder-reader transaction system of claim 17, wherein said system is further configured to update said preloaded value data file according to said reload protocol data file.

19. The transponder-reader transaction system of claim 17, wherein said system is further configured to provide a transponder system identifier and update reload indicia to a user interface to obtain user authorization prior to reloading said preloaded value.

20. The transponder-reader transaction system of claim 17, wherein said system is further configured to provide incentives to a transponder user based on said reloading of said preloaded value.

21. The transponder-reader transaction system of claim 17, wherein said system is further configured to provide a transponder system identifier to an issuer system server and providing in real-time an update reload protocol to said issuer system server for reloading the preloaded value in real-time according to said reload protocol.