System, method and apparatus for enabling transactions using a user enabled programmable magnetic stripe

• US 8,082,575 B2
• Filed: 02/21/2006
• Issued: 12/20/2011
• Est. Priority Date: 03/28/2002
• Status: Active Grant

• Current Assignee: Rampart-Id Systems Incorporated
• Original Assignee: Rampart-Id Systems Incorporated
• Inventors: Doughty, Ralph O., Antaki, Patrick R., Weiss, Kenneth P.
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US11/359,015
• Publication Number:
  US 20060161789A1
• Time in Patent Office: 2,128 Days
• Field of Search: None
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/253 visually
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

The present invention provides a system, method and apparatus that includes a user device having a magnetic field generator disposed within a substrate that is normally inactive, an initiator mounted on the substrate, a memory disposed within the substrate and a processor disposed within the substrate that is communicably coupled to the magnetic field generator, the initiator and the memory. The processor is operable to process information received from the initiator, generate a time varying code in response to the received information and activate the magnetic field generator. A power source is also disposed within the substrate. The magnetic field generator can create a spatial magnetic signal using a magnetic stripe and one or more induction coils, or create a time-varying magnetic signal for emulating data obtained from swiping a traditional magnetic stripe card through a magnetic card reader.

Claims

1. An apparatus comprising:

a substrate;

a magnetic field generator disposed within the substrate, wherein the magnetic field generator is normally inactive and comprises a magnetic stripe either mounted on the substrate or disposed within the substrate, one or more induction coils disposed within the substrate underneath a length of the magnetic stripe and a control circuit disposed within the substrate that is connected to the one or more induction coils, and generates a time-varying magnetic signal containing information stored in the apparatus and a time varying code by pulsing the one or more induction coils underneath the magnetic stripe when activated by a processor, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader;

an initiator mounted on the substrate;

a memory disposed within the substrate;

the processor disposed within the substrate and communicably coupled to the magnetic field generator, the initiator and the memory, wherein the processor processes information received from the initiator, and whenever the user is successfully verified based on the received information;

(a) accesses the information stored in the apparatus, (b) generates the time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activates the magnetic field generator to transmit the information stored in the apparatus and the time varying code; and

a power source disposed within the substrate and electrically connected to the magnetic field generator, the initiator and the processor.

2. The apparatus as recited in claim 1, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

3. The apparatus as recited in claim 2, wherein the processor uses the biometric information to verify that a user is authorized to use the apparatus and activates the magnetic field generator when the user is verified.

4. The apparatus as recited in claim 2, wherein the biometric information is transmitted to a system processor via the magnetic field generator where the system processor uses the biometric information to verify that a user is authorized to use the apparatus.

5. The apparatus as recited in claim 2, wherein the processor deactivates the magnetic field generator after the magnetic field generator has been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

6. The apparatus as recited in claim 1, wherein:

the one or more static variables comprise a biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more time-based dynamic variables comprise a date and time, a time interval, or a combination thereof.

7. The apparatus as recited in claim 6, wherein the time varying code is encrypted, modified by access information associated with the user or a combination thereof.

8. The apparatus as recited in claim 7, wherein the access information associated with the user comprises the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof

9. The apparatus as recited in claim 1, wherein the power source is selected from the group consisting of a battery, a piezoelectric generator, a solar panel, an electromagnetic energy converter, a kinetic energy converter and combinations thereof.

10. The apparatus as recited in claim 1, wherein the power source comprises:

a battery;

a power generator;

a converter electrically connected to the power generator and operable to convert power received from the power generator into power usable by the apparatus or to charge the battery;

a battery management unit connected to the battery; and

a power multiplexer connected to the battery management unit and the converter and operable to determine whether to draw power from the battery management unit, from the converter, or from both.

11. The apparatus as recited in claim 1, further comprising an output interface mounted on the substrate that is communicably coupled to the processor and electrically connected to the power source, wherein the output interface is selected from the group consisting of an antenna for wireless communication, an optical transmitter, a sonic transmitter, or a transmitter in the electromagnetic spectrum.

12. The apparatus as recited in claim 1, further comprising a smart card interface mounted on the substrate that is communicably coupled to the processor and electrically connected to the power source.

13. The apparatus as recited in claim 1, further comprising a contactless interface disposed within the substrate that is communicably coupled to the processor and electrically connected to the power source, wherein the contactless interface is selected from the group consisting of an antenna for wireless communication, an optical transceiver, a sonic transceiver, or a transceiver in the electromagnetic spectrum.

14. The apparatus as recited in claim 1, wherein the substrate is integrated into:

a card selected from the group consisting of an access card, a credit card, a debit card, an identification card, a drivers license, a firearm license, a physical access security card, a mini-card, a security card, a stored value card and a vendor-specific card;

a travel credential selected from the group consisting of a passport, an immigration card and a visa;

a personal communication device selected from a group consisting of a personal data assistant, a telecommunications device, a pager, a computer and an electronic mail transceiver;

or

a personal device/belonging selected from a group consisting of a watch, a jewelry, a key ring, a tag and eye glasses.

15. A method for enabling a transaction using an apparatus containing information associated with one or more users, an initiator, and a magnetic field generator that is normally inactive and comprises a magnetic stripe either mounted on a substrate or disposed within the substrate, one or more induction coils disposed within the substrate underneath a length of the magnetic stripe and a control circuit disposed within the substrate that is connected to the one or more induction coils, the method comprising the steps of:

receiving information from the initiator;

determining whether the received information is valid for one of the users; and

whenever the received information is valid;

(a) accessing the information stored in the apparatus, (b) generating a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activating the magnetic field generator and generating a time-varying magnetic signal containing the information associated with the one or more users and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader.

16. The method as recited in claim 15, wherein:

the information associated with the one or more users enables approval of the transaction; and

the transaction comprises an access transaction, a control transaction, a financial transaction, a commercial transaction, an identification transaction or a combination thereof.

17. The method as recited in claim 15, further comprising the step of activating the magnetic field generator and generating a magnetic signal that enables denial of the transaction whenever the authentication data is not valid.

18. The method as recited in claim 15, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

19. The method as recited in claim 18, further comprising the steps of:

transmitting the biometric information a system processor via the magnetic field generator; and

using the biometric information to verify that a user is authorized to use the apparatus.

20. The method as recited in claim 15, further comprising the steps of deactivating the magnetic field generator after the magnetic field generator has been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

21. The method as recited in claim 15, wherein:

the one or more static variables comprise a biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more time-based dynamic variables comprise a date and time, a time interval, or a combination thereof.

22. The method as recited in claim 21, further comprising the step of encrypting the time varying code is encrypted, modifying the time varying code by access information associated with the user or a combination thereof.

23. The method as recited in claim 15, further comprising the step of receiving one or more activation parameters, wherein the one or more activation parameters includes detecting data from a biometric sensor, detecting an external signal or receiving data from a user interface.

24. The method as recited in claim 15, further comprising the steps of:

receiving power from an external power source in a contactless manner; and

converting the power received from the external power source into power compatible with the apparatus.

25. A computer program embodied in a non-transitory computer readable medium executed by a processor for enabling a transaction using an apparatus containing information associated with one or more users, an initiator, and a magnetic field generator that is normally inactive and comprises a magnetic stripe either mounted on a substrate or disposed within the substrate, one or more induction coils disposed within the substrate underneath a length of the magnetic stripe and a control circuit disposed within the substrate that is connected to the one or more induction coils, the computer program comprising:

a code segment for receiving information from the initiator;

a code segment for determining whether the received information is valid for one of the users; and

a code segment for whenever the received information is valid;

(a) accessing the information stored in the apparatus, (b) generating a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activating the magnetic field generator and generating a time-varying magnetic signal containing the information associated with the one or more users and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader.

26. A system comprising:

one or more user devices, each user device comprising

a substrate,

a magnetic field generator disposed within the substrate, wherein the magnetic field generator is normally inactive and comprises a magnetic stripe either mounted on the substrate or disposed within the substrate, one or more induction coils disposed within the substrate underneath a length of the magnetic stripe and a control circuit disposed within the substrate that is connected to the one or more induction coils, and generates a time-varying magnetic signal containing information stored in the apparatus and a time varying code by pulsing the one or more induction coils underneath the magnetic stripe when activated by a processor, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader,

an initiator mounted on the substrate,

a memory disposed within the substrate,

a device processor disposed within the substrate and communicably coupled to the magnetic field generator, the initiator and the memory, wherein the device processor processes information received from the initiator, and whenever the user is successfully verified based on the received information;

(a) accesses the information stored in the apparatus, (b) generates the time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activates the magnetic field generator to transmit the information stored in the apparatus and the time varying code, and

a power source disposed within the substrate and electrically connected to the magnetic field generator, the initiator and the device processor;

one or more system interfaces operable to communicate with the user device; and

a system processor communicably coupled to the one or more system interfaces.

27. The system as recited in claim 26, wherein the one or more system interfaces includes an optical interface, a smart card interface, a wireless communication interface, a magnetic reader, an initialization interface or a recharger.

28. The system as recited in claim 26, further comprising a database communicably coupled to the system processor.

29. The system as recited in claim 26, further comprising one or more remote computers communicably coupled to the system processor via a network.

30. The system as recited in claim 26, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

31. The system as recited in claim 30, wherein the device processor uses the biometric information to verify that a user is authorized to use the apparatus and activates the magnetic field generator when the user is verified.

32. The system as recited in claim 30, wherein the biometric information is transmitted to the system processor via the magnetic field generator and one of the system interfaces where the system processor uses the biometric information to verify that a user is authorized to use the apparatus.

33. The system as recited in claim 30, wherein the device processor deactivates the magnetic field generator after the magnetic field generator has been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

34. The system as recited in claim 26, wherein:

the one or more static variables comprise a biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more time-based dynamic variables comprise a date and time, a time interval, or a combination thereof.

35. The system as recited in claim 34, wherein the time varying code is encrypted, modified by access information associated with the user or a combination thereof

36. The system as recited in claim 35, wherein the access information associated with the user comprises the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof.

37. The system as recited in claim 26, wherein the power source is selected from the group consisting of a battery, a piezoelectric generator, a solar panel, an electromagnetic energy converter, a kinetic energy converter and combinations thereof.

38. The system as recited in claim 26, wherein the power source comprises:

a battery;

a power generator;

a converter electrically connected to the power generator and operable to convert power received from the power generator into power usable by the apparatus or to charge the battery;

a battery management unit connected to the battery; and

a power multiplexer connected to the battery management unit and the converter and operable to determine whether to draw power from the battery management unit, from the converter, or from both.

39. The system as recited in claim 26, further comprising a contactless interface disposed within the substrate that is communicably coupled to the device processor and electrically connected to the power source, wherein the contactless interface is selected from the group consisting of an antenna for wireless communication, an optical transceiver, a sonic transceiver, or a transceiver in the electromagnetic spectrum.