Tokenless biometric electronic financial transactions via a third party identicator

• US 7,536,352 B2
• Filed: 04/18/2005
• Issued: 05/19/2009
• Est. Priority Date: 11/28/1994
• Status: Expired due to Fees

• Current Assignee: YT Acquisition Corp.
• Original Assignee: YT Acquisition Corp.
• Inventors: Lee, Jonathan Alexander, Lapsley, Philip D., Hoffman, Ned, Pare, Jr., David Ferrin
• Primary Examiner(s): Dass, Harish T
• Assistant Examiner(s): LIVERSEDGE, JENNIFER L
• Application Number:
  US11/109,096
• Publication Number:
  US 20050187843A1
• Time in Patent Office: 1,492 Days
• Field of Search: None
• US Class Current: 705/44
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G06Q 20/4097 : using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 40/00 : Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06V 10/772 : Determining representative reference patterns, e.g. averaging or distorting patterns; Generating dictionaries
• CPC Class Codes: G06V 40/1365 : Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 9/002 : Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity

Abstract

A method and device enables tokenless authorization of an electronic payment between a payor and a payee using an electronic identicator and a one payor bid biometric sample. The payor registers with a registration biometric sample, and a payor financial account identifier. The payee registers a payee identification data with the electronic identicator. A payee bid identification data and a payor bid biometric sample are electronically forwarded to the identicator. The bid biometric sample is compared with registered biometric samples and the payee'"'"'s bid identification data is compared with a payee'"'"'s registered identification data for a successful or failed identifications of the payor and payee. If the identicator successfully identifies the payor and payee, the identicator electronically forwards a payor financial account identifier to the payee. An electronic financial transaction is then formed comprising a transaction amount and a payor financial account identifier.

Claims

1. An authorization device for transferring funds from a payor financial account to a payee financial account, said device comprising:

A data processing center comprising one or more databases wherein the payor registers a registration biometric sample associated with at least one payor financial account identifier and a payee registers payee identification data, the data at least including a payee place of business;

A party identification apparatus configured for receiving and verifying payee digital certificate data and having a biometric sensor for input of a biometric sample;

Communication lines for transmission of payee digital certificate data between a payee place of business and a party identification apparatus;

Communication lines for transmission of a payor biometric sample and payee digital certificate data between a party identification apparatus and the data processing center;

Communication lines for transmission of a payor financial account identifier between the data processing center and a payee;

A comparator engine for comparing a bid biometric sample to at least one registration biometric sample, and

The system being arranged so that the biometric sample is sent to the comparator engine only if the payee digital certificate data is verified and a message containing the payor'"'"'s financial account identifier is sent from the data processing center to the payee only if the bid and registration payor biometric data match and the bid and registration payee digital certificate data match.

2. The authorization device of claim 1, including:

means coupled to the party identification apparatus for receiving a message including one or more payor financial account identifiers from the data processing center;

means coupled to the party identification apparatus for selecting one or more preferred financial account identifiers to use in processing the transaction; and

means for transmitting the one or more selected payor financial account identifiers to the data processing center.

3. The authorization device of claim 1, wherein no credit/debit card, smartcard or a paper check is used by the payor to conduct the financial transaction.

4. The authorization device of claim 1, wherein the payee identification data further comprises any one of the following:

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

5. The authorization device of claim 1, wherein the payor registration biometric sample is associated with a PIN, the PIN used by the authorization device for identification the payor.

6. The authorization device of claim 1, including means for the payee to receive the message and transmit the payor financial account identifier and a transaction amount to a financial transaction processor via the payee to authorize a payment from the payor'"'"'s financial account to the payee.

7. The authorization device of claim 1, wherein a subset of the payor registration biometric samples are stored in a payor re-registration database to which the comparator engine compares a payor'"'"'s registration biometric samples and if a match occurs, alerts the authorization system to the fact that the payor has re-registered with the payment authorization system.

8. The authorization device of claim 1, wherein the computer data processing center and the comparator engine are included in an electronic third party identicator.

9. The authorization device of claim 1, wherein the message containing the payor'"'"'s financial account identifier(s) is sent to the PIA from the computer data processing center.

10. The authorization device of claim 1, wherein the transaction amount includes a new transaction amount, the new transaction amount being the sum of a cash back amount and a transaction amount.

11. A method for authorization of an electronic payment between a payor and a payee using an electronic third party identicator, said method comprising the steps of:

a payee transmission step, wherein payee digital certificate data and transaction data are electronically forwarded to a payor personal identification apparatus;

a payee verification step, wherein the payee digital certificate data is verified authentic at the payor party identification apparatus;

a payor biometric sample collection step, wherein at least one payor bid biometric sample is obtained from the payor'"'"'s person;

at least one transmission step, wherein the payor bid biometric sample and payee digital certificate data are electronically forwarded from the party identification apparatus to the third-party electronic identicator;

a payor identification step, wherein the electronic third party identicator compares the payor bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor;

a payee identification step, wherein the electronic third party identicator compares the payee'"'"'s digital certificate data with registered payee digital certificate data for producing either a successful or failed identification of the payee;

an identification response step, wherein upon successful identification of the payor and payee, the electronic third-party identicator electronically forwards at least one payor financial account identifier to the payee;

a transaction execution step, wherein an electronic financial transaction is formed between the payor and the payee, comprising a transaction amount and a payor financial account identifier, and the financial transaction is electronically forwarded by the payee to a financial transaction processor for authorization;

wherein upon successful identification of the payor and authorization of the financial transaction by the financial transaction processor, a biometric-based authorization of an electronic payment is given to transfer funds from the payor'"'"'s financial account to a payee'"'"'s financial account.

12. The method of claim 11, further comprising a payor registration step, wherein the payor registers with an electronic third party identicator at least one registration biometric sample and at least one payor financial account identifier.

13. The method of claim 12, wherein the payor registration step further comprises registering a payor personal identification number with the electronic third party identicator, which is used by the electronic third party identicator to assist in identification of the payor.

14. The method of claim 12, further comprising a payor re-registration step, wherein the user'"'"'s registration biometric samples are compared against previously designated biometric samples wherein if a match occurs, the electronic third-party identicator is alerted to the fact that the payor has re-registered.

15. The method of claim 11, further comprising selecting by the payor the type of financial account to be debited.

16. The method of claim 15, wherein the type of financial account is selected from a list comprising one or more of:

credit, debit, checking, and stored value.

17. The method of claim 11, further comprising an approval step wherein the transaction amount is displayed to the payor, and the payor indicates acceptance of the transaction before the transaction is forwarded to the financial transaction processor.

18. The method of claim 11, further comprising a transaction payment step, wherein the transaction amount is debited from a payor'"'"'s financial account.

19. The method of claim 18, wherein the transaction amount is credited to the payee'"'"'s financial account.

20. The method of claim 11, wherein the biometric sample comprises of one of the following:

a fingerprint, a facial scan, a retinal image, an iris scan, and a voice print.

21. A method according to claim 11, further comprising a payee registration step, wherein the payee registers a payee identification data at least including digital certificate data with the electronic third party identicator.

22. The method of claim 21, wherein the payee identification data further comprises any one of the following:

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

23. The method of claim 11, wherein the transaction amount further includes a new transaction amount, the new transaction amount being the sum of a cash back amount and a transaction amount.