Smartcard transaction method and system using smellprint recognition

• US 7,497,375 B2
• Filed: 09/26/2007
• Issued: 03/03/2009
• Est. Priority Date: 07/01/2004
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Bonalle, David S., Salow, Glen
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/861,354
• Publication Number:
  US 20080072065A1
• Time in Patent Office: 524 Days
• Field of Search: 235/487, 235/380, 235/382, 340/572.1, 340/5.52, 340/5.6
• US Class Current: 235/380
• CPC Class Codes: G06K 19/07 with integrated circuit chips
• CPC Class Codes: G06K 19/0717 the sensor being capable of sensing environmental conditions such as temperature history or pressure
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The present invention discloses a system and methods for biometric security using smellprint recognition biometrics in a smartcard-reader system. The biometric security system also includes a smellprint sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a smartcard configured with a smellprint sensor. In another embodiment, the system includes a reader configured with a smellprint sensor. In yet another embodiment, the present invention discloses methods for proffering and processing smellprint samples to facilitate authorization of transactions.

Claims

1. A smartcard transaction system configured with a smellprint security device, said system comprising:

a smartcard configured to communicate with a reader, wherein said reader and said smellprint security device are configured to communicate with a host;

an integrated circuit device disposed within said smartcard and configured to communicate with said reader, said integrated circuit device comprising a common application and a second application, said second application being configured to store travel-related information associated with a cardholder;

said second application comprising a common file structure and a partner file structure, wherein said partner file structure provides write access to a field within said partner file structure for a first partnering organization and denies write access to said field for a second partnering organization, and said common file structure provides write access for said first partnering organization and said second partnering organization to a field in said common file structure;

said smellprint security device comprising a smellprint sensor configured to communicate with said system and detect a proffered smellprint sample to create smellprint data, and wherein said smellprint data accesses said common file structure and said partner file structure, and said smellprint sensor communicates with a verification device which is configured to verify said smellprint data to facilitate access to said common file structure;

wherein after verification by said verification device, said common application is configured to transfer common data to facilitate said transaction, and said second application is configured to transfer said travel-related information, information related to said common file structure and information related to said partner file structure to facilitate said transaction;

a first enterprise data collection unit associated with a first enterprise, said first enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said first enterprise;

a second enterprise data collection unit associated with a second enterprise, said second enterprise data collection unit configured to store update transactions and pending transactions associated with said smartcard and said second enterprise;

an access point configured to interface with said smartcard and said first and second enterprise data collection units;

a card object database system coupled to said first and second enterprise data collection units and configured to store said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information includes a card object having an application;

said update logic system coupled to an enterprise data synchronization interface, said update logic system configured to securely route said smartcard information between said enterprise data synchronization interface and said enterprise data collection units, said enterprise data synchronization interface coupled to an enterprise network configured to communicate with said access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system;

wherein said verification device activates said update logic system in response to verification of said smellprint data;

a secure support client server configured to communicate with said access point, said secure support client server further configured to adaptively provide communication functionality in accordance with the communication functionality available at said access point; and

,

a personalization system comprising;

a security server;

a key system associated with an application, said key system configured to communicate with said security server and to supply a key in response to a request from said security server;

a personalization utility configured to receive said card object and to communicate with said security server;

said personalization utility further configured to add said key to said card object, a card management system, said card management system configured to accept a card request and communicate said card request to said personalization utility; and

a gather application module configured to communicate with said card management system and gather application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.

2. The smartcard transaction system of claim 1, wherein said system is configured to use smellprint data as at least one of:

a private key and a public key to facilitate encryption security associated with said transaction.

3. The smartcard transaction system of claim 1, wherein said transaction includes providing access to a room using said information related to said partner file structure.

4. The smartcard transaction system of claim 1, further including a comparison device configured to compare said smellprint data with a stored smellprint data, wherein said stored smellprint data comprises a registered smellprint data and wherein said registered smellprint data is associated with at least one of:

personal information, credit card information, debit card information, savings account information, membership information, PayPal account information, Western Union Account information, electronic bill payment information, automatic bill payment information and loyalty point information.

5. The smartcard transaction system of claim 1, wherein said smellprint data is associated with a preset transaction limitation comprising at least one of a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

6. The smartcard transaction system of claim 1, wherein said system is further configured to use said smellprint data as at least one of:

a message authentication code, asymmetric encryption algorithm, a symmetric encryption algorithm, a private key and a public key to secure at least one of;

user data and transaction data.

7. A method for facilitating smellprint security in a smartcard transaction system, said method comprising:

receiving a proffered smellprint sample at a smellprint sensor, wherein a smart card comprises a common application and a second application, said second application storing travel-related information associated with a cardholder, said second application comprising a common file structure and a partner file structure;

generating data representing said proffered smellprint sample to create smellprint data, wherein said smellprint data accesses said common file structure and said partner file structure;

verifying said smellprint data;

enabling write access to a field within said partner file structure in response to verification of said smellprint data and in response to a request by a first partnering organization;

denying write access to said field in response to a request by a second partnering organization;

enabling write access for said first partnering organization and said second partnering organization to a field in said common file structure, in response to verification of said smellprint data;

transferring common data to facilitate authorization of said transaction;

transferring said travel-related information, information related to said common file structure and information related to said partner file structure to facilitate said transaction;

storing, by a first enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a first enterprise, wherein said first enterprise data collection unit is associated with said first enterprise;

storing, by a second enterprise data collection unit, update transactions and pending transactions associated with said smartcard and a second enterprise, wherein said second enterprise data collection unit is associated with said second enterprise;

interfacing with said smartcard and said first and second enterprise data collection units, at an access point;

storing, by a card object database system coupled to said first and second enterprise data collection units, said smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information includes a card object having an application;

routing, by an update logic system, said smartcard information from said first and second enterprise data collection units to said access point in order to effect synchronization of said smartcard information associated with said smartcard and said card object database system; and

,

activating, by said verification device, said update logic system, in response to verification of said smellprint data.

8. The method of claim 7, further comprising registering said proffered smellprint sample which includes at least one of:

contacting said authorized sample receiver, proffering said proffered smellprint sample to said authorized sample receiver, associating said smellprint data with user information, verifying said smellprint data, and storing said smellprint data in response to verification.

9. The method of claim 7, wherein said step of verifying said smellprint data further includes using a secondary security procedure, said secondary security procedure including sending a signal to notify that a requested transaction would violate an established rule for said smartcard.

10. The method of claim 7, further comprising verifying whether said transaction is in compliance with a preset transaction limitation associated with at least one from the group of a:

charge card account, credit card account, debit card account, savings account, private label account and loyalty point account.

11. The method of claim 7, further comprising verifying whether said transaction is in compliance with a preset transaction limitation comprising at least one from the group of:

a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

12. The method of claim 7, further comprising using a second smellprint data to override a preset transaction limitation.

13. The method of claim 7, further comprising using said smellprint data as at least one from the group of:

a private key, a public key, and a message authentication code to facilitate transaction security measures.

14. The method of claim 7, further comprising writing to at least one of said partner file structure and said common file structure to program said smartcard as a room key.

15. The method of claim 7, further comprising securely routing, by an update logic system, card information between said enterprise data synchronization interface and said enterprise data collection units, wherein said update logic system is coupled to an enterprise data synchronization interface, and communicating, by said enterprise network, with said access point, wherein said enterprise data synchronization interface is coupled to said enterprise network.

16. The method of claim 7, further comprising, by a secure support client server, communicating with said access point, and adaptively providing communication functionality in accordance with the communication functionality available at said access point.

17. The method of claim 7, further comprising:

communicating, by a key system, with a security server and supplying a key in response to a request from said security server, wherein said key system is associated with said application;

receiving, by a personalization utility, said card object and communicating with said security server;

adding, by said personalization utility, said key to said card object;

accepting, by a card management system, a card request and communicating said card request to said personalization utility; and

communicating, by a gather application module, with said card management system and gathering application information from a first database and a second database in accordance with said card request, wherein said first database is associated with said first enterprise, and said second database is associated with said second enterprise.

18. The method of claim 7, further comprising displaying a first plurality of financial accounts in response to verification of said smellprint data, and displaying a second plurality of financial accounts in response to verification of a second smellprint sample, wherein said first plurality of financial accounts include different financial accounts than said second plurality of financial accounts.

19. The method of claim 7, wherein said smellprint data comprises a first smellprint data and a second smellprint data, and further comprising associating a first set of rules with said smellprint data and displaying a first plurality of financial accounts in response to verification of said first smellprint data and said first set of rules, and associating a second set of rules with a second smellprint data and displaying a second plurality of financial accounts in response to verification of said second smellprint sample and said second set of rules, wherein said first plurality of financial accounts include different financial accounts than said second plurality of financial accounts.