Authenticating fingerprints for radio frequency payment transactions

• US 7,500,616 B2
• Filed: 09/07/2007
• Issued: 03/10/2009
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Fields, Seth W, Beenau, Blayn W, Saunders, Peter D, Larkin, Carl, Bonalle, David S, Gray, William J, Montgomery, Joshua L
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/851,556
• Publication Number:
  US 20070299782A1
• Time in Patent Office: 550 Days
• Field of Search: 235/487, 235/492, 235/380, 235/382, 340/572.1, 340/5.52, 340/5.6
• US Class Current: 235/487
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07345 by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G07C 2009/00984 : fob
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Claims

1. A Radio Frequency (RF) payment device configured to communicate with an RF Identification (RFID) reader, the RF payment device comprising:

an RF transponder configured to receive a customer payment device authentication code from the RFID reader;

a unique customer payment device identification code;

a unique customer payment device encryption key corresponding to the unique customer payment device identification code;

a customer payment device account code;

a fingerprint sensor configured to detect a proffered fingerprint sample to create fingerprint sample data; and

a customer payment device authentication circuit configured to use the unique customer payment device encryption key to encrypt the customer payment device authentication code, wherein the customer payment device authentication circuit is further configured to use the unique customer payment device encryption key to encrypt the customer payment device account code;

wherein the RF transponder is configured to transmit at least one of the encrypted customer payment device authentication code or the encrypted customer payment device account code to the RFID reader, and wherein the customer payment device authentication circuit is configured to be enabled in response to the fingerprint sample data matching authenticated fingerprint sample data.

2. The RF customer payment device of claim 1, wherein the RF transponder comprises a first antenna, and wherein the RF payment device further comprises a second RF transponder comprising a second RF antenna.

3. The RF customer payment device of claim 2, wherein at least one of the first RF antenna or the second RF antenna is configured to transmit an RFID reader authentication code to the RFID reader, and wherein at least one of the first RF antenna or the second RF antenna is configured to receive an encrypted RFID reader authentication code from the RFID reader.

4. The RF customer payment device of claim 3, further comprising an RFID reader decryption key, wherein the customer payment device authentication circuit is configured to use the RFID reader decryption key to decrypt the encrypted RFID reader authentication code received from the RFID reader to authenticate the RFID reader.

5. The RF customer payment device of claim 4, wherein the unique device identification code comprises a personalized unique customer payment device identification code, wherein the unique customer payment device encryption key comprises a personalized unique customer payment device encryption key, wherein the customer payment device account code comprises a personalized customer payment device account code, and wherein the RFID reader decryption key comprises a personalized RFID reader decryption key.

6. The RF customer payment device of claim 2, further comprising a protocol/sequence controller configured to communicate with the RF transponder and the device authentication circuit, wherein the protocol/sequence controller is configured to communicate with at least one of the first RF antenna or the second RF antenna via a modulator/demodulator.

7. The RF customer payment device of claim 1, further comprising a Universal Serial Bus (USB) interface configured to communicate at least one of the encrypted customer payment device account code or the encrypted customer payment device authentication code to the RFID reader.

8. The RF customer payment device of claim 7, wherein the USB interface is further configured to personalize the RF customer payment device in association with a personalization system.

9. The RF customer payment device of claim 1, wherein the customer payment device account code comprises a unique account number in a magnetic stripe format.

10. The RF customer payment device of claim 2, further comprising an enable/disable switch configured to enable/disable at least one of the first RF antenna or the second RF antenna.

11. The RF customer payment device of claim 1, wherein the fingerprint sensor is configured with at least one of an optical scanner or a capacitance scanner.

12. The RF customer payment device of claim 1, wherein the fingerprint sensor is configured to detect and verify fingerprint characteristics including at least one of:

blood flow, correctly aligned ridges, pressure, motion, body heat, ridge endings, bifurcation, lakes, enclosures, short ridges, dots, spurs, crossovers, pore size, pore location, loops, whorls, or arches.

13. The RF customer payment device of claim 1, wherein the RF customer payment device is an RF payment fob.

14. An RFID reader configured to communicate with an RF customer payment device, the RFID reader comprising:

an RF transponder configured to receive an RFID reader authentication code from the RF customer payment device, wherein the RF transponder is further configured to transmit a customer payment device authentication code to the RF customer payment device, and wherein the RF transponder is further configured to receive an encrypted customer payment device authentication code, a unique customer payment device identification code, a fingerprint sample data, and an encrypted customer payment device account code from the RF customer payment device;

an RFID reader encryption key;

authenticated fingerprint sample data;

a plurality of device-specific decryption keys;

an RFID authentication circuit configured to use the RFID reader encryption key to encrypt the RFID reader authentication code, and wherein the RF transponder is configured to transmit the encrypted RFID reader authentication code to the RF customer payment device;

wherein the RFID authentication circuit is further configured to select a unique customer payment device decryption key from the plurality of device-specific decryption keys by associating the unique customer payment device identification code with the unique customer payment device decryption key, wherein the RFID authentication circuit is further configured to use the unique customer payment device decryption key to decrypt the encrypted customer payment device authentication code, and wherein the RFID authentication circuit is further configured to compare the decrypted customer payment device authentication code to the customer payment device authentication code and to compare the fingerprint sample data to the authenticated fingerprint sample data, to authenticate the RF customer payment device;

wherein the RFID authentication circuit is further configured to use the unique customer payment device decryption key to decrypt the encrypted customer payment device account code; and

wherein the RFID reader is configured to transmit the decrypted customer payment device account code for payment processing.

15. The RFID reader of claim 14, further comprising a USB interface configured to communicate with the RF customer payment device.

16. The RFID reader of claim 15, wherein the USB interface is further configured to personalize at least one of the RF customer payment device or the RFID reader.

17. The RFID reader of claim 14, wherein the decrypted customer payment device account code comprises a customer payment device account number in a magnetic stripe format configured to be transmitted to a Point of Sale (POS) device and processed under a merchant'"'"'s business as usual standard.

18. The RFID reader of claim 17, wherein the customer payment device account number is in a ISO/IEC 7813 magnetic stripe format.

19. The RFID reader of claim 14, further comprising an RFID reader PIN interface configured to receive a secondary verification.

20. The RFID reader of claim 14, further comprising an RF antenna configured to operate at at least one of approximately a 13.56 MHz frequency or a 134 kHz frequency.

21. A method for utilizing an RF customer payment device comprising a transponder and a fingerprint security device to facilitate an RF payment transaction, the method comprising:

receiving an RF interrogation signal from an RFID reader, wherein the RF interrogation signal comprises a customer payment device authentication code;

receiving a fingerprint sample at a fingerprint sensor to a create fingerprint sample data;

verifying the fingerprint sample data;

activating a transponder system authentication circuit in response to at least one of the RF interrogation signal or the verified fingerprint sample data;

encrypting, at the transponder system authentication circuit, the customer payment device authentication code with a unique encryption key;

transmitting an encrypted customer payment device authentication code and a unique customer payment device identification code to the RFID reader;

transmitting an RFID reader authentication code to the RFID reader;

receiving an encrypted RFID reader authentication code;

decrypting the encrypted RFID reader authentication code using a transponder decryption key;

authenticating the RFID reader in response to the decrypted RFID reader authentication code matching the RFID reader authentication code, and in response to the verified fingerprint sample data matching authenticated fingerprint sample data; and

transmitting the transponder system account data to the RFID reader in response to the decrypted RFID reader authentication code matching the RFID reader authentication code.

22. The method of claim 21, further comprising a second transponder receiving a second RF interrogation signal from the RFID reader, wherein the RF customer payment device includes the second transponder.

23. The method of claim 21, wherein the fingerprint sample comprises a fingerprint sample characteristic including at least one of:

blood flow, correctly aligned ridges, pressure, motion, body heat, ridge endings, bifurcation, lakes, enclosures, short ridges, dots, spurs, crossovers, pore size, pore location, loops, whorls, or arches.

24. A method for facilitating an RF payment transaction using an RFID reader, comprising:

transmitting a customer payment device authentication code to an RF customer payment device;

receiving an encrypted customer payment device authentication code, a fingerprint sample data, and a unique customer payment device identification code from the RF payment device;

decrypting the encrypted customer payment device authentication code using a unique customer payment device decryption key corresponding to the unique payment device authentication code;

comparing the decrypted customer payment device authentication code to the customer payment device authentication code; and

authenticating the RF customer payment device in response to be fingerprint sample data matching authenticated fingerprint sample data and in response to the decrypted customer payment device authentication code matching the customer payment device authentication code;

receiving an encrypted customer payment device account from the RF customer payment device;

decrypting the encrypted customer payment device account code using the unique customer payment device decryption key; and

transmitting the decrypted customer payment device account code for payment processing.

25. The method of claim 24, further comprising:

receiving an RFID reader authentication code from the RF customer payment device;

encrypting the RFID reader authentication code using an RFID reader encryption key; and

transmitting the encrypted RFID reader authentication code to the RF customer payment device for authentication of the RFID reader.