System for biometric security using a smartcard

• US 7,445,149 B2
• Filed: 09/25/2007
• Issued: 11/04/2008
• Est. Priority Date: 07/01/2004
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Salow, Glen, Bonalle, David S.
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/860,726
• Publication Number:
  US 20080013796A1
• Time in Patent Office: 406 Days
• Field of Search: 235/379, 235/380, 235/487, 235/492, 235/493, 340/572.1, 340/10.1, 340/5.52, 340/5.82
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The present invention discloses a method for facilitating biometric security in a smartcard-reader transaction system by proffering a biometric. The biometric may be proffered to a biometric sensor communicating with the smartcard-reader system. Proffering the biometric initiates verification of the biometric sample and facilitates authorization of a transaction.

Claims

1. A smartcard transaction system configured with a DNA security system, said system comprising:

a smartcard configured to communicate with a smartcard reader;

said smartcard reader configured to communicate with said system;

a DNA scan sensor configured to detect a proffered DNA scan sample and a second proffered biometric sample, said DNA scan sensor configured to communicate with said system;

a device configured to verify said proffered DNA scan sample to facilitate a transaction;

a first enterprise data collection unit associated with a first enterprise, said first enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said first enterprise;

a second enterprise data collection unit associated with a second enterprise, said second enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said second enterprise;

an access point configured to interface with said smartcard and said first and second enterprise data collection units;

a card object database system coupled to said first and second enterprise data collection units and configured to store said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information comprises a card object having an application;

an update logic system configured to route said smartcard information from said first and second enterprise data collection units to said access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system;

wherein said verification device activates said update logic system upon verification of said proffered DNA scan sample and said second proffered biometric sample; and

,

a personalization system comprising;

a security server;

at least one key system associated with said at least one application, said key system configured to communicate with said security server and to supply a key in response to a request from said security server;

a personalization utility configured to receive said card object and to communicate with said security server;

said personalization utility further configured to add said key to said card object, a card management system, said card management system configured to accept a card request and communicate said card request to said personalization utility; and

a gather application module configured to communicate with said card management system and gather application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.

2. The smartcard transaction system of claim 1, wherein said device is configured to verify said proffered DNA scan sample by comparing said proffered DNA scan sample with a stored DNA scan sample, wherein said stored DNA scan sample is associated with at least one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information.

3. The smartcard transaction system of claim 1, wherein said device is configured to verify said proffered DNA scan sample by comparing said proffered DNA scan sample with a stored DNA scan sample, wherein different stored DNA scan samples are associated with a different one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information.

4. The smartcard transaction system of claim 1, wherein said DNA scan sample is primarily associated with first user information, wherein said first information comprises at least one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein said DNA scan sample is secondarily associated with second user information, wherein said second information comprises at least one of personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein said second user information is different than said first user information.

5. The smartcard transaction system of claim 1, wherein said device configured to verify is configured to facilitate at least one of access, activation of a device, a financial transaction, a non-financial transaction, and use of a secondary security procedure.

6. The smartcard transaction system of claim 1, further comprising an update logic system coupled to at least one enterprise data synchronization interface, said update logic system configured to securely route card information between said enterprise data synchronization interface and said enterprise data collection units, said enterprise data synchronization interface coupled to an enterprise network configured to communicate with said access point.

7. The smartcard transaction system of claim 6, further comprising a secure support client server configured to communicate with said access point, said secure support client server further configured to adaptively provide communication functionality in accordance with the communication functionality available at said access point.

8. The smartcard transaction system of claim 1, further comprising:

an integrated circuit device disposed within said smartcard and configured to communicate with said reader, said integrated circuit device comprising a common application and a second application, said second application being configured to store travel-related information associated with a cardholder;

said second application comprising a common file structure and a partner file structure, wherein said partner file structure provides write access to a field within said partner file structure for a first partnering organization and denies write access to said field for a second partnering organization, and said common file structure provides write access for said first partnering organization and said second partnering organization to a field in said common file structure.

9. A method for facilitating biometric security using a proffered biometric scan sample in a smartcard transaction system comprising:

receiving a first proffered DNA sample and a second proffered biometric sample at a biometric sensor configured on a smartcard, wherein said first DNA biometric sample is a different type of biometric sample from said second proffered biometric sample, and wherein said first DNA biometric sample and said second proffered biometric sample are from the same user;

verifying said first proffered DNA sample and a second proffered biometric sample authorizing a transaction to proceed upon verification of said first proffered DNA sample and said second proffered biometric sample;

storing, by a first enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a first enterprise, wherein said first enterprise data collection unit is associated with a first enterprise;

storing, by a second enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a second enterprise, wherein said second enterprise data collection unit is associated with a second enterprise;

interfacing with said smartcard and said first and second enterprise data collection units, at an access point;

storing, by a card object database system coupled to said first and second enterprise data collection units, said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information comprises a card object having an application;

routing, by an update logic system, said smartcard information from said first and second enterprise data collection units to said access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system;

activating, by said verification device, said update logic system upon verification of said first proffered DNA sample and said second proffered biometric sample;

communicating, by a key system, with a security server and supplying a key in response to a request from said security server, wherein said key system is associated with said application;

receiving, by a personalization utility, said card object and communicating with said security server;

adding, by said personalization utility, said key to said card object;

accepting, by a card management system, a card request and communicating said card request to said personalization utility; and

communicating, by a gather application module, with said card management system and gathering application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.

10. The method of claim 9, wherein said step of verifying comprises comparing said first proffered DNA sample and said second proffered biometric sample with a stored biometric sample.

11. The method of claim 9, further comprising securely routing, by an update logic system, card information between said enterprise data synchronization interface and said enterprise data collection units, wherein said update logic system is coupled to an enterprise data synchronization interface, and communicating, by said enterprise network, with said access point, wherein said enterprise data synchronization interface is coupled to said enterprise network.

12. The method of claim 11, further comprising, by a secure support client server, communicating with said access point, and adaptively providing communication functionality in accordance with the communication functionality available at said access point.

13. The method of claim 9, further comprising:

enabling write access to a field within said partner file structure upon verification of said first proffered DNA sample and said second proffered biometric sample and upon request by a first partnering organization;

denying write access to said field upon request by a second partnering organization;

enabling write access for said first partnering organization and said second partnering organization to a field in said common file structure, upon verification of said proffered DNA sample;

transferring common data to facilitate authorization of said transaction; and

,

transferring said travel-related information, information related to said common file structure and information related to said partner file structure to facilitate said transaction.