System and method for processing tokenless biometric electronic transmissions using an electronic rule module clearinghouse

• US 8,260,716 B2
• Filed: 12/28/2005
• Issued: 09/04/2012
• Est. Priority Date: 11/28/1994
• Status: Expired due to Fees

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Lapsley, Philip Dean, Hoffman, Ned
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US11/321,138
• Publication Number:
  US 20060106734A1
• Time in Patent Office: 2,442 Days
• Field of Search: None
• US Class Current: 705/64
• CPC Class Codes: C07K 14/53 Colony-stimulating factor [CSF]
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0225 Avoiding frauds
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 7/025 by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]

Abstract

Herein is described a tokenless biometric method for processing electronic transmissions, using at least one user biometric sample, an electronic identicator and an electronic rule module clearinghouse. The steps for processing of the electronic transmissions comprise of a user registration step, wherein a user registers with an electronic identicator at least one registration biometric sample taken directly from the person of the user. A formation of a rule module customized to the user in a rule module clearinghouse, wherein at least one pattern data of a user is associated with at least one execution command of the user. A user identification step, wherein the electronic identicator compares a bid biometric sample taken directly from the person of the user with at least one previously registered biometric sample for producing either a successful or failed identification of the user. In a command execution step, upon successful identification of the user, at least one previously designated rule module of the user is invoked to execute at least one electronic transmission. The above-mentioned steps are conducted in a manner wherein a biometrically authorized electronic transmission is conducted without the user presenting any personalized man-made memory tokens such as smartcards, or magnetic swipe cards.

Claims

1. A method for providing approval of a rule module execution request, the method, comprising:

receiving at a terminal a rule module execution request and a biometric sample proffered by an individual via a biometric input apparatus, wherein the rule module execution request is an age-restricted access request;

transmitting the biometric sample and the rule module execution request to a data processing center, wherein the data processing center has access to pattern data, wherein the pattern data includes registered biometric data and registered age information for the individual;

making a first determination, at the data processing center, whether the transmitted biometric sample matches the registered biometric data;

upon a successful match, whereby the individual is identified, accessing a stored User ID code associated with said individual, wherein said User ID code indicates a plurality of rule modules associated with said pattern data associated with said individual;

making a second determination, at the data processing center, that the received rule module execution request is an age-restricted access request;

upon determining the received rule module execution request is an age-restricted access request, identifying a rule module associated with the User ID code and customized for determining user eligibility to satisfy the received rule module access request, wherein the identified rule module indicates an execution command that includes a determination whether the age information included in said pattern data is indicative of permission for age-restricted access for the individual;

executing at the data processing center said execution command indicated by the identified rule module; and

transmitting from the data processing center to the terminal a message granting or blocking the rule module execution request per the determination of the execution command.

2. The method of claim 1, wherein the biometric sample comprises at least one of a fingerprint scan, an iris scan, a facial scan, a voice scan, a retinal scan, a hand architecture scan, a vein pattern scan, a signature sample, and a DNA sample.

3. The method of claim 1, wherein the-biometric data comprises at least one digital representation of a fingerprint scan, an iris scan, a facial scan, a voice scan, a retinal scan, a hand architecture scan, a vein pattern scan, a signature sample, and a DNA sample.

4. The method of claim 1, wherein the steps of transmitting and receiving comprise sending and receiving encrypted data.

5. The method of claim 1, wherein transmitting the biometric sample to the data processing center further comprises transmitting at least one of terminal location information, a time of age-restricted access request, a request type, a reference code, and a detailed access record.

6. The method of claim 1, wherein pattern data is stored in a database.

7. The method of claim 1, wherein the terminal is one of a point of sale, a vending machine, a kiosk, a PC, a wireless device, a computing device, and a storage device.

8. The method of claim 1, wherein the age-restricted access request is associated with a financial transaction.

9. A method for providing approval of a rule module execution request, the method comprising:

receiving, at a terminal, a biometric sample and a personal identification code proffered by an individual;

receiving, at the terminal, a rule module execution request proffered by the individual, wherein the rule module execution request is an age-restricted access request;

transmitting the biometric sample, the identification code, and the rule module execution request to a data processing center, wherein the data processing center has access to a record including an age reference of an individual, registered biometric data, and a registered personal identification code;

locating, at the data processing center, a record associated with the received personal identification code;

making a first determination, at the data processing center, whether the received biometric sample matches the registered biometric data included in said record;

upon a successful match, whereby the individual is identified, accessing a stored User ID code associated with said individual, wherein said User ID code indicates a plurality of rule modules associated with pattern data associated with said individual;

making a second determination, at the data processing center, that the received rule module execution request is an age-restricted access request;

upon determining the received rule module execution request is an age-restricted access request, identifying a rule module associated with the User ID code and customized for determining user eligibility to satisfy the received rule module access request, wherein the identified rule module indicates an execution command that includes a determination whether the age information included in said pattern data is indicative of permission for age-restricted access for the individual;

executing at the data processing center said execution command indicated by the identified rule module; and

transmitting from the data processing center to the terminal a message granting or blocking the rule module execution access request per the determination of the execution command.

10. The method of claim 9, wherein pattern data further comprises one or more of demographic information, an email address, a biometric input device hardware identification code, a financial account, a date of birth, a secondary biometric, a non-financial data repository account, a telephone number, a mailing address, purchasing patterns, pre-paid account data, membership data, electronic data usage patterns, an Internet browsing pattern, an employee status, a job title, current activity pattern data, a digital certificate, a network credential, an Internet protocol address, a digital signature, an encryption key, an instant messaging address, a personal medical record, an electronic audio signature, an electronic visual signature, consumer loyalty data, and consumer rewards data.

11. The method of claim 9, wherein the pattern data is acquired via one or more of electronic input and hand-keying.