Registering a biometric for radio frequency transactions

• US 7,690,577 B2
• Filed: 09/20/2007
• Issued: 04/06/2010
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Saunders, Peter D, Larkin, Carl, Fields, Seth W, Beenau, Blayn W, Gray, William J, Montgomery, Joshua L, Bonalle, David S
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/858,393
• Publication Number:
  US 20080010161A1
• Time in Patent Office: 929 Days
• Field of Search: 235/487, 235/492, 235/493, 235/451, 340/572.1, 340/5.52, 340/5.82, 340/5.6
• US Class Current: 235/487
• CPC Class Codes: G06F 18/00 Pattern recognition
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0225 : Avoiding frauds
• CPC Class Codes: G06V 40/10 : Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/14 : Vascular patterns
• CPC Class Codes: G06V 40/40 : Spoof detection, e.g. liveness detection
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07G 1/14 : Systems including one or more distant stations co-operating with a central processing unit data transmission in general H04L; telemetry systems for selectively calling a substation from a main station H04Q9/00
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method for registering biometric information for use in a transponder-reader system is disclosed. The method includes steps of detecting, verifying and storing a proffered biometric sample. During detecting, a sensor detects a proffered biometric to obtain a biometric sample. During the verifying step, the biometric sample is compared with other stored samples and/or other information. During the storing step, the biometric sample is stored on a database, for use by the transponder-reader system in authorizing transactions.

Claims

1. A method comprising:

transmitting a customer payment device authentication code to a Radio Frequency (RF) customer payment device, wherein the RF customer payment device is activated upon verification of proffered biometric sample data;

receiving, from the RF customer payment device, a customer payment device transaction request comprising transaction biometric sample data, an encrypted customer payment device authentication code, and a unique customer payment device identification code;

decrypting the encrypted customer payment device authentication code using a unique customer payment device decryption key associated with the unique customer payment device identification code to create a decrypted customer payment device authentication code; and

authenticating the RF customer payment device in response to the decrypted customer payment device authentication code matching the customer payment device authentication code and in response to the transaction biometric sample data matching registered biometric sample data, wherein the registered biometric sample data is associated with the RF customer payment device and is created in response to the verification of the proffered biometric sample data.

2. The method of claim 1, further comprising detecting the proffered biometric sample data at a biometric scan sensor, wherein the detecting the proffered biometric sample includes at least one of detecting, associating, or processing at least one additional proffered biometric sample.

3. The method of claim 1, wherein the verification of the proffered biometric sample data comprises comparing the proffered biometric sample with stored biometric sample data.

4. The method of claim 3, wherein the comparing the proffered biometric sample data with the stored biometric sample data includes comparing the proffered biometric sample data with at least one of authorized biometric sample data or unauthorized biometric sample data.

5. The method of claim 1, wherein the verification of the proffered biometric sample data includes verifying the proffered biometric sample data using at least one of a protocol/sequence controller or a third-party security vendor.

6. The method of claim 1, wherein the verification of the proffered biometric sample data comprises comparing the proffered biometric sample data with verification biometric sample data received from the RF customer payment device.

7. The method of claim 1, further comprising associating the proffered biometric sample data with at least one of the RF customer payment device, a user identifier, or a transaction account, wherein the user identifier comprises at least one of:

personal information, financial information, loyalty point information, employee information, employer information, medical information, or family information.

8. The method of claim 1, further comprising associating second biometric sample data with at least one of a second RF customer payment device, a user identifier, or a transaction account.

9. The method of claim 1, wherein the proffered biometric sample data comprises a biometric sample characteristic comprising at least one of:

blood flow, correctly aligned ridges, pressure, motion, body heat, ridge endings, bifurcation, lakes, enclosures, short ridges, dots, spurs, crossovers, pore size, pore location, loops, whorls, or arches.

10. The method of claim 1, further comprising, at an RF reader:

receiving a reader authentication code from the RF customer payment device;

encrypting the reader authentication code using a reader encryption key to create an encrypted reader authentication code; and

transmitting the encrypted reader authentication code to the RF customer payment device for authentication of the RF reader.

11. A radio frequency (RF) customer payment device configured to be activated upon verification of proffered biometric sample data, comprising:

means for detecting transaction biometric sample data;

means for receiving a customer payment device authentication code from a reader;

means for encrypting the customer payment device authentication code with a unique customer payment device encryption key to create an encrypted customer payment device authentication code, wherein the unique customer payment device encryption key is associated with a unique customer payment device identification code; and

means for transmitting a customer payment device transaction request to the reader, wherein the customer payment device transaction request comprises the encrypted customer payment device authentication code, the transaction biometric sample data, and the unique customer payment device identification code.

12. The RF customer payment device of claim 11, further comprising:

means for decrypting an encrypted reader authentication code received from the reader to create a decrypted reader authentication code; and

means for authenticating the reader in response to the decrypted reader authentication code matching a reader authentication code sent to the reader.

13. A computer-readable medium having stored thereon computer executable instructions that, if executed by a Radio Frequency (RF) customer payment device, cause the RF customer payment device to perform a method comprising:

detecting transaction biometric sample data at RF customer payment device, wherein the RF customer payment device is activated in response to verification of proffered biometric sample data;

receiving a customer payment device authentication code from a reader;

encrypting the customer payment device authentication code with a unique customer payment device encryption key to create an encrypted customer payment device authentication code, wherein the unique customer payment device encryption key is associated with a unique customer payment device identification code; and

transmitting a customer payment device transaction request to the reader, wherein the customer payment device transaction request comprises the encrypted customer payment device authentication code, the transaction biometric sample data, and the unique customer payment device identification code.