Registering a biometric for radio frequency transactions

• US 7,780,091 B2
• Filed: 02/18/2009
• Issued: 08/24/2010
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Saunders, Peter D., Montgomery, Joshua L., Larkin, Carl, Gray, William J., Fields, Seth W., Bonalle, David S., Beenau, Blayn W.
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US12/388,280
• Publication Number:
  US 20090171851A1
• Time in Patent Office: 552 Days
• Field of Search: 713/186, 713/182, 726/7, 726/19, 382/115, 902/3, 902/5, 340/572.1, 340/5.52, 340/5.82, 340/5.4, 340/5.41, 235/487, 235/435, 235/380, 235/382, 705/64, 705/65, 705/67, 705/44, 705/41, 705/75, 380/270, 380/277
• US Class Current: 235/487
• CPC Class Codes: G06F 18/00 Pattern recognition
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0225 : Avoiding frauds
• CPC Class Codes: G06V 40/10 : Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/14 : Vascular patterns
• CPC Class Codes: G06V 40/40 : Spoof detection, e.g. liveness detection
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07G 1/14 : Systems including one or more distant stations co-operating with a central processing unit data transmission in general H04L; telemetry systems for selectively calling a substation from a main station H04Q9/00
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

An authorized sample receiver configured to verify an RF device in response to proffered biometric sample data is disclosed. The authorized sample receiver may be configured to receive data from the RF device and decrypt an encrypted authentication code using a unique device identification code. The RF device is authenticated in response to verifying proffered biometric sample data and the authentication code.

Claims

1. An authorized sample receiver (ASR) comprising:

means for transmitting a customer payment device authentication code to a Radio Frequency (RF) customer payment device, wherein the RF customer payment device is activated in response to verification of proffered biometric sample data;

means for receiving, from the RF customer payment device, a transaction request comprising transaction biometric sample data, an encrypted customer payment device authentication code, and a unique customer payment device identification code;

means for decrypting the encrypted customer payment device authentication code using a unique customer payment device decryption key associated with the unique customer payment device identification code to create a decrypted customer payment device authentication code; and

means for authenticating the RF customer payment device in response to the decrypted customer payment device authentication code matching the customer payment device authentication code and in response to the transaction biometric sample data matching registered biometric sample data, wherein the registered biometric sample data is associated with the RF customer payment device and is created in response to the verification of the proffered biometric sample data.

2. The ASR of claim 1, further comprising a biometric sensor configured to detect a proffered biometric sample to create the proffered biometric sample data.

3. The ASR of claim 2, wherein the biometric sensor comprises at least one of:

a retinal scan sensor, an iris scan sensor, a fingerprint sensor, a hand print sensor, a hand geometry sensor, a voice print sensor, a vascular sensor, a facial sensor, an ear sensor, a signature sensor, a keystroke sensor, an olfactory sensor, an auditory emissions sensor, or a DNA sensor.

4. The ASR of claim 2, wherein the biometric sensor is associated with at least one of:

a local database, a remote database, a portable storage device, a host system, an issuer system, a merchant system, an RF customer payment device issuer system, an employer, a financial institution, a non-financial institution, a loyalty point provider, a company, the military, the government, a school, a travel entity, a transportation authority, or a security company.

5. The ASR of claim 1, further comprising means for verifying the proffered biometric sample data to activate the RF customer payment device and create the registered biometric sample data.

6. The ASR of claim 1, further comprising a USB interface configured to communicate with the RF customer payment device, wherein the USB interface is further configured to personalize the RF customer payment device.

7. The ASR of claim 1, further comprising an RFID reader PIN interface configured to receive a secondary verification.

8. The ASR of claim 1, wherein the means for decrypting is further configured to decrypt an encrypted customer payment device account code using the unique customer payment device decryption key.

9. The ASR of claim 8, wherein the decrypted customer payment device account code comprises a customer payment device account code in a magnetic stripe format configured to be transmitted to a Point of Sale (POS) device and processed under a business as usual standard of a merchant.

10. The ASR of claim 1, further comprising means for receiving an ASR authentication code from the RF customer payment device, means for encrypting the ASR authentication code to create an encrypted ASR authentication code, and means for transmitting the encrypted ASR authentication code to the RF customer payment device to facilitate authentication of the ASR.

11. The ASR of claim 1, further comprising a communications device configured to receive second proffered biometric sample data associated with the RF customer payment device, wherein the proffered biometric sample data is verified in response to matching the second proffered biometric sample data.

12. The ASR of claim 1, further comprising means for creating a data packet associated with the registered biometric sample data.

13. The ASR of claim 12, wherein the data packet further comprises at least one of a zip code or a PIN associated with the registered biometric sample data.

14. The ASR of claim 12, wherein the data packet further comprises at least one of RF customer payment device user information, RF customer payment device information, an RF customer payment device identifier, RF customer payment device vendor information, RF customer payment device operability information, or RF customer payment device manufacturing information.

15. The ASR of claim 12, wherein the data packet further comprises information related to a transaction account.

16. The ASR of claim 15, wherein the transaction account is at least one of a credit card account, a debit card account, a smart card account, a merchant-specific account, or a loyalty point account.

17. The ASR of claim 12, wherein the data packet further comprises personal information associated with the registered biometric sample data.

18. The ASR of claim 17, wherein the personal information comprises at least one of employment information, medical information, or family information.

19. The ASR of claim 12, wherein the data packet is configured to be stored in a database operated by at least one of a third party or the ASR.

20. The ASR of claim 1, wherein the registered biometric sample data is associated with multiple financial accounts.

21. The ASR of claim 20, wherein the multiple financial accounts comprise a primary account and a secondary account, and wherein the secondary account is used to facilitate completion an RF transaction in response to a primary account value being insufficient to complete the RF transaction.

22. The ASR of claim 20, wherein at least one of the multiple financial accounts is associated with conditions of use and comprises an account value, and wherein the account value is applied to the RF transaction in response to the RF transaction satisfying the conditions of use.

23. The ASR of claim 1, wherein the RF customer payment device is activated upon verification of the proffered biometric sample data during a registration process.

24. An authorized sample receiver (ASR) comprising:

a transmitter configured to transmit a customer payment device authentication code to a Radio Frequency (RF) customer payment device, wherein the RF customer payment device is activated in response to verification of proffered biometric sample data;

a receiver configured to receive, from the RF customer payment device, a transaction request comprising transaction biometric sample data, an encrypted customer payment device authentication code, and a unique customer payment device identification code;

encryption circuitry configured to decrypt the encrypted customer payment device authentication code using a unique customer payment device decryption key associated with the unique customer payment device identification code to create a decrypted customer payment device authentication code; and

authentication circuitry configured to authenticate the RF customer payment device in response to the decrypted customer payment device authentication code matching the customer payment device authentication code and in response to the transaction biometric sample data matching registered biometric sample data, wherein the registered biometric sample data is associated with the RF customer payment device and is created in response to the verification of the proffered biometric sample data.