Method and system for keystroke scan recognition biometrics on a smartcard

• US 7,363,504 B2
• Filed: 07/01/2004
• Issued: 04/22/2008
• Est. Priority Date: 07/01/2004
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Salow, Glen, Bonalle, David S.
• Primary Examiner(s): Revak, Christopher
• Assistant Examiner(s): Chai, Longbit
• Application Number:
  US10/710,327
• Publication Number:
  US 20060016871A1
• Time in Patent Office: 1,391 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06K 19/07 with integrated circuit chips
• CPC Class Codes: G06K 19/0716 at least one of the integrated circuit chips comprising a sensor or an interface to a sensor
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The present invention discloses a system and methods for biometric security using keystroke scan biometrics in a smartcard-reader system. The biometric security system also includes a keystroke scan sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a smartcard configured with a keystroke scan sensor. In another embodiment, the system includes a reader configured with a keystroke scan sensor. In yet another embodiment, the present invention discloses methods for proffering and processing keystroke scan samples to facilitate authorization of transactions.

Claims

1. A smartcard transaction system configured with a biometric security system, said system comprising:

a smartcard configured to communicate with a reader;

a reader configured to communicate with said system;

a keystroke scan sensor configured to detect a proffered keystroke scan sample, said keystroke scan sensor configured to communicate with said system;

a device configured to verify said proffered keystroke scan sample to facilitate a transaction;

a first enterprise data collection unit associated with a first enterprise, said first enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said first enterprise;

a second enterprise data collection unit associated with a second enterprise, said second enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said second enterprise;

at least one access point configured to interface with said smartcard and said first and second enterprise data collection units;

a card object database system coupled to said first and second enterprise data collection units and configured to store said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information includes a card object having at least one application;

an update logic system configured to interrogate a pending database of said card object database system to determine whether a change has been made and configured to route said smartcard information from said first and second enterprise data collection units to said at least one access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system; and

, wherein said verification device activates said update logic system upon verification of said proffered keystroke scan sample.

2. The smartcard transaction system of claim 1, wherein said keystroke sensor is configured to communicate with said system via at least one of a smartcard, a reader, and a network.

3. The smartcard transaction system of claim 1, further including a database configured to store a data packet, wherein said data packet includes at least one of:

proffered and registered keystroke scan samples, proffered and registered user information, terrorist information, and criminal information.

4. The smartcard transaction system of claim 3, wherein said database is contained in at least one of the smartcard, smartcard reader, sensor, remote server, merchant server and smartcard system.

5. The smartcard transaction system of claim 3, wherein said remote database is configured to be operated by an authorized sample receiver.

6. The smartcard transaction system of claim 1, wherein said keystroke scan sensor is configured to detect and verify keystroke scan characteristics including at least one of behavioral, temporal and physical characteristics.

7. The smartcard transaction system of claim 1, wherein said keystroke scan sensor device is configured to detect false keystrokes and body heat.

8. The smartcard transaction system of claim 1, wherein said device configured to compare a keystroke scan sample is at least one of a third-party security vendor device and local CPU.

9. The smartcard transaction system of claim 1, wherein a stored keystroke scan sample comprises a registered keystroke scan sample.

10. The smartcard transaction system of claim 9, wherein said registered keystroke scan sample is associated with at least one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information.

11. The smartcard transaction system of claim 10, wherein different registered keystroke scan samples are associated with a different one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information.

12. The smartcard transaction system of claim 10, wherein a keystroke scan sample is primarily associated with first user information, wherein said first information comprises at least one of personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein a keystroke scan sample is secondarily associated with second user information, wherein said second information comprises at least one of personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein said second user information is different than said first user information.

13. The smartcard transaction system of claim 1, wherein said smartcard transaction system is configured to begin authentication upon verification of said proffered keystroke scan sample.

14. The smartcard transaction system of claim 1, wherein said smartcard is configured to deactivate upon rejection of said proffered keystroke scan sample.

15. The smartcard transaction system of claim 1, wherein said keystroke scan sensor is configured to provide a notification upon detection of a sample.

16. The smartcard transaction system of claim 1, wherein said device configured to verify is configured to facilitate at least one of access, activation of a device, a financial transaction, and a non-financial transaction.

17. The smartcard transaction system of claim 1, wherein said device configured to verify is configured to facilitate the use of at least one secondary security procedure.

18. The smartcard transaction system of claim 1, further comprising an update logic system coupled to at least one enterprise data synchronization interface, said update logic system configured to securely route card information between said enterprise data synchronization interface and said enterprise data collection units, said enterprise data synchronization interface coupled to an enterprise network configured to communicate with said access point.

19. The smartcard transaction system of claim 18, further comprising a secure support client server configured to communicate with said access point, said secure support client server further configured to adaptively provide communication functionality in accordance with the communication functionality available at said access point.

20. The smartcard transaction system of claim 19, further including a personalization system comprising:

a security server;

at least one key system associated with said at least one application, said key system configured to communicate with said security server and to supply a key in response to a request from said security server;

a personalization utility configured to receive said card object and to communicate with said security server;

said personalization utility further configured to add said key to said card object, a card management system, said card management system configured to accept a card request and communicate said card request to said personalization utility; and

a gather application module configured to communicate with said card management system and gather application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.

21. A method for facilitating biometric security in a smartcard transaction system comprising:

detecting a proffered keystroke scan at a sensor communicating with said system to obtain a proffered keystroke scan sample;

verifying said proffered keystroke scan sample;

authorizing a transaction to proceed upon verification of said proffered keystroke scan sample;

storing, by a first enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a first enterprise, wherein said first enterprise data collection unit is associated with a first enterprise;

storing, by a second enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a second enterprise, wherein said second enterprise data collection unit is associated with a second enterprise;

interfacing with said smartcard and said first and second enterprise data collection units, at an access point;

storing, by a card object database system coupled to said first and second enterprise data collection units, said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information includes a card object having an application;

interrogating, by an update logic system, a pending database of said card object database system to determine whether a change has been made;

routing, by said update logic system, said smartcard information from said first and second enterprise data collection units to said access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system; and

,

activating, by said verification device, said update logic system upon verification of said proffered keystroke scan sample.

22. The method of claim 21, wherein said step of detecting further includes detecting a proffered keystroke scan at a sensor configured to communicate with said system via at least one of a smartcard, reader, and network.

23. The method of claim 21, wherein said step of detecting a proffered keystroke scan includes detecting a proffered keystroke scan at least one of an electronic sensor, an optical sensor and a keyboard.

24. The method of claim 21, wherein said step of detecting includes at least one of:

detecting, storing, and processing a proffered keystroke scan sample.

25. The method of claim 21, wherein said step of detecting further includes using said keystroke scan sensor to detect at least one of false keystrokes and body heat.

26. The method of claim 21, wherein said step of verifying includes comparing a proffered keystroke scan sample with a stored keystroke scan sample.

27. The method of claim 26, wherein said step of comparing a proffered keystroke scan sample with a stored keystroke scan sample comprises storing, processing and comparing at least one of behavioral, temporal and physical characteristics.

28. The method of claim 26, wherein comparing a proffered keystroke scan sample with a stored keystroke scan sample includes comparing a proffered keystroke scan sample with a biometric sample of at least one of a criminal, a terrorist, and a cardmember.

29. The method of claim 21, wherein said step of verifying includes verifying a proffered keystroke scan sample using information contained on at least one of a local database, a remote database, and a third-party controlled database.

30. The method of claim 21, wherein said step of verifying includes verifying a proffered keystroke scan sample using at least one of a local CPU and a third-party security vendor.

31. The method of claim 21, further comprising securely routing, by an update logic system, card information between said enterprise data synchronization interface and said enterprise data collection units, wherein said update logic system is coupled to an enterprise data synchronization interface, and communicating, by said enterprise network, with said access point, wherein said enterprise data synchronization interface is coupled to said enterprise network.

32. The method of claim 31, further comprising, by a secure support client server, communicating with said access point, and adaptively providing communication functionality in accordance with the communication functionality available at said access point.

33. The method of claim 32, further comprising:

communicating, by a key system, with a security server and supplying a key in response to a request from said security server, wherein said key system is associated with said application;

receiving, by a personalization utility, said card object and communicating with said security server;

adding, by said personalization utility, said key to said card object;

accepting, by a card management system, a card request and communicating said card request to said personalization utility; and

communicating, by a gather application module, with said card management system and gathering application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.