System, method and apparatus for enabling transactions using a user enabled programmable magnetic stripe

• US 8,499,334 B2
• Filed: 11/18/2011
• Issued: 07/30/2013
• Est. Priority Date: 03/28/2002
• Status: Active Grant

• Current Assignee: Rampart-Id Systems Incorporated
• Original Assignee: Rampart-Id Systems Incorporated
• Inventors: Doughty, Ralph O., Antaki, Patrick R., Weiss, Kenneth P.
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US13/299,799
• Publication Number:
  US 20120066740A1
• Time in Patent Office: 620 Days
• Field of Search: None
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/253 visually
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

The present invention provides a system, method and apparatus that includes a user device having a magnetic field generator disposed within a substrate that is normally inactive, an initiator mounted on the substrate, a memory disposed within the substrate and a processor disposed within the substrate that is communicably coupled to the magnetic field generator, the initiator and the memory. The processor is operable to process information received from the initiator, generate a time varying code in response to the received information and activate the magnetic field generator. A power source is also disposed within the substrate. The magnetic field generator can create a spatial magnetic signal using a magnetic stripe and one or more induction coils, or create a time-varying magnetic signal for emulating data obtained from swiping a traditional magnetic stripe card through a magnetic card reader.

Claims

1. An apparatus comprising:

a substrate integrated into;

(a) a card selected from the group consisting essentially of an access card, a credit card, a debit card, an identification card, a drivers license, a firearm license, a mini-card, a physical access security card, a security card, a stored value card and a vendor-specific card, or (b) a travel credential selected from the group consisting essentially of a passport, an immigration card and a visa;

one or more induction coils disposed within the substrate underneath a length of the magnetic stripe;

a control circuit disposed within the substrate that is connected to the one or more induction coils;

an initiator mounted on the substrate;

a memory disposed within the substrate;

a processor disposed within the substrate and communicably coupled to the control circuit, the initiator and the memory, wherein the processor processes information received from the initiator, and whenever the user is successfully verified based on the received information;

(a) accesses information stored in the memory, (b) generates a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activates the control circuit to generate a time-varying magnetic signal containing the accessed information and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader; and

a power source disposed within the substrate and electrically connected to the control circuit, the initiator and the processor.

2. The apparatus as recited in claim 1, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

3. The apparatus as recited in claim 2, wherein the processor uses the biometric information to verify that a user is authorized to use the apparatus and activates the one or more induction coils when the user is verified.

4. The apparatus as recited in claim 2, wherein the biometric information is transmitted to a system processor via the time-varying magnetic signal where the system processor uses the biometric information to verify that a user is authorized to use the apparatus.

5. The apparatus as recited in claim 2, wherein the processor deactivates the one or more induction coils after the one or more induction coils have been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

6. The apparatus as recited in claim 1, wherein:

the one or more static variables comprise the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more time-based dynamic variables comprise a date and time, a time interval, or a combination thereof.

7. The apparatus as recited in claim 1, wherein the time varying code is encrypted, modified by access information associated with the user or a combination thereof.

8. The apparatus as recited in claim 7, wherein the access information associated with the user comprises the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof.

9. The apparatus as recited in claim 1, wherein the power source is selected from the group consisting of a battery, a piezoelectric generator, a solar panel, an electromagnetic energy converter, a kinetic energy converter and combinations thereof.

10. The apparatus as recited in claim 1, wherein the power source comprises:

a battery;

a power generator;

a converter electrically connected to the power generator and operable to convert power received from the power generator into power usable by the apparatus or to charge the battery;

a battery management unit connected to the battery; and

a power multiplexer connected to the battery management unit and the converter and operable to determine whether to draw power from the battery management unit, from the converter, or from both.

11. The apparatus as recited in claim 1, further comprising an output interface mounted on the substrate that is communicably coupled to the processor and electrically connected to the power source, wherein the output interface is selected from the group consisting of an antenna for wireless communication, an optical transmitter, a sonic transmitter, or a transmitter in the electromagnetic spectrum.

12. The apparatus as recited in claim 1, further comprising a smart card interface mounted on the substrate that is communicably coupled to the processor and electrically connected to the power source.

13. The apparatus as recited in claim 1, further comprising a contactless interface disposed within the substrate that is communicably coupled to the processor and electrically connected to the power source, wherein the contactless interface is selected from the group consisting of an antenna for wireless communication, an optical transceiver, a sonic transceiver, or a transceiver in the electromagnetic spectrum.

14. A method for enabling a transaction using an apparatus containing information associated with one or more users, wherein the apparatus comprises (1) a substrate integrated into (a) a card selected from the group consisting essentially of an access card, a credit card, a debit card, an identification card, a drivers license, a firearm license, a mini-card, a physical access security card, a security card, a stored value card and a vendor-specific card, or (b) a travel credential selected from the group consisting essentially of a passport, an immigration card and a visa, (2) a magnetic stripe either mounted on the substrate or disposed within the substrate, (3) one or more induction coils disposed within the substrate underneath a length of the magnetic stripe, (4) a control circuit disposed within the substrate that is connected to the one or more induction coils, (5) an initiator mounted on the substrate, (6) a memory disposed within the substrate, and (7) a processor disposed within the substrate and communicably coupled to the control circuit, the initiator and the memory, the method comprising the steps of:

receiving information from the initiator;

determining whether the received information is valid for one of the users; and

whenever the received information is valid;

(a) accessing information stored in the memory, (b) generating a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activating the control circuit to generate a time-varying magnetic signal containing the accessed information and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader.

15. The method as recited in claim 14, wherein:

the information stored in the memory enables approval of the transaction; and

the transaction comprises an access transaction, a control transaction, a financial transaction, a commercial transaction, an identification transaction or a combination thereof.

16. The method as recited in claim 14, further comprising the step of activating the control circuit to generating a magnetic signal using the one or more induction coils that enables denial of the transaction whenever the authentication data is not valid.

17. The method as recited in claim 14, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

18. The method as recited in claim 17, further comprising the steps of:

transmitting the biometric information a system processor via the time-varying magnetic signal; and

using the biometric information to verify that a user is authorized to use the apparatus.

19. The method as recited in claim 14, further comprising the steps of deactivating the one or more induction coils after the one or more induction coils have been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

20. The method as recited in claim 14, wherein:

the one or more static variables comprise the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more time-based dynamic variables comprise a date and time, a time interval, or a combination thereof.

21. The method as recited in claim 14, further comprising the step of encrypting the time varying code, modifying the time varying code by access information associated with the user or a combination thereof.

22. The method as recited in claim 14, further comprising the step of receiving one or more activation parameters, wherein the one or more activation parameters includes detecting data from a biometric sensor, detecting an external signal or receiving data from a user interface.

23. The method as recited in claim 14, further comprising the steps of:

receiving power from an external power source in a contactless manner; and

converting the power received from the external power source into power compatible with the apparatus.

24. A computer program embodied in a non-transitory computer readable medium executed by a processor for enabling a transaction using an apparatus containing information associated with one or more users, wherein the apparatus comprises (1) a substrate integrated into (a) a card selected from the group consisting essentially of an access card, a credit card, a debit card, an identification card, a drivers license, a firearm license, a mini-card, a physical access security card, a security card, a stored value card and a vendor-specific card, or (b) a travel credential selected from the group consisting essentially of a passport, an immigration card and a visa, (2) a magnetic stripe either mounted on the substrate or disposed within the substrate, (3) one or more induction coils disposed within the substrate underneath a length of the magnetic stripe, (4) a control circuit disposed within the substrate that is connected to the one or more induction coils, (5) an initiator mounted on the substrate, (6) a memory disposed within the substrate, and (7) a processor disposed within the substrate and communicably coupled to the control circuit, the initiator and the memory, the computer program comprising instructions for performing the functions of:

receiving information from the initiator;

determining whether the received information is valid for one of the users; and

whenever the received information is valid;

(a) accessing information stored in the memory, (b) generating a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activating the control circuit to generate a time-varying magnetic signal containing the accessed information and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader.

25. A system comprising:

one or more user devices, each user device comprising;

a substrate integrated into;

(a) a card selected from the group consisting essentially of an access card, a credit card, a debit card, an identification card, a drivers license, a firearm license, a mini-card, a physical access security card, a security card, a stored value card and a vendor-specific card, or (b) a travel credential selected from the group consisting essentially of a passport, an immigration card and a visa,

a magnetic stripe either mounted on the substrate or disposed within the substrate,

one or more induction coils disposed within the substrate underneath a length of the magnetic stripe,

a control circuit disposed within the substrate that is connected to the one or more induction coils,

an initiator mounted on the substrate,

a memory disposed within the substrate,

a processor disposed within the substrate and communicably coupled to the control circuit, the initiator and the memory, wherein the processor processes information received from the initiator, and whenever the user is successfully verified based on the received information;

(a) accesses information stored in the memory, (b) generates a time varying code using an algorithm, one or more static variables and one or more time-based dynamic variables, and (c) activates the control circuit to generate a time-varying magnetic signal containing the accessed information and the time varying code by pulsing the one or more induction coils underneath the magnetic stripe, wherein the time-varying magnetic signal is transmitted to a magnetic stripe reader and emulates a data stream generated by swiping a static magnetic stripe card through the magnetic stripe reader but is not created by swiping the magnetic stripe of the apparatus through the magnetic stripe reader or using an adapter to interface with the magnetic stripe reader, and

a power source disposed within the substrate and electrically connected to the control circuit, the initiator and the processor;

one or more system interfaces operable to communicate with the user device; and

a system processor communicably coupled to the one or more system interfaces.

26. The system as recited in claim 25, wherein the one or more system interfaces includes an optical interface, a smart card interface, a wireless communication interface, a magnetic reader, an initialization interface or a recharger.

27. The system as recited in claim 25, further comprising a database communicably coupled to the system processor.

28. The system as recited in claim 25, further comprising one or more remote computers communicably coupled to the system processor via a network.

29. The system as recited in claim 25, wherein:

the initiator comprises a biometric sensor that provides biometric information, a user interface that provides user information and/or one or more commands, or a combination thereof;

the biometric sensor is selected from the group consisting of a fingerprint sensor, retina sensor, iris sensor, signature, DNA sensor or voice sensor; and

the user interface is selected from the group consisting of a touch pad, one or more buttons, a display and a voice sensor.

30. The system as recited in claim 25, wherein the device processor uses the biometric information to verify that a user is authorized to use the apparatus and activates the one or more induction coils when the user is verified.

31. The system as recited in claim 25, wherein the biometric information is transmitted to the system processor via the time-varying magnetic signal and one of the system interfaces where the system processor uses the biometric information to verify that a user is authorized to use the apparatus.

32. The system as recited in claim 25, wherein the device processor deactivates the one or more induction coils after the one or more induction coils have been active for a specified period of time, when the biometric sensor no longer detects the authorized user or both.

33. The system as recited in claim 25, wherein:

the one or more static variables comprise the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof; and

the one or more dynamic variables comprise a date and time, a time interval, or a combination thereof.

34. The system as recited in claim 33, wherein the time varying code is encrypted, modified by access information associated with the user or a combination thereof.

35. The system as recited in claim 34, wherein the access information associated with the user comprises the biometric information, a reproducible artifact from the biometric information, a cardholder'"'"'s name, an account number, an expiration date, a issuer, a validation code, a secret code associated with the apparatus, a personal identification number, or a combination thereof.

36. The system as recited in claim 25, wherein the power source is selected from the group consisting of a battery, a piezoelectric generator, a solar panel, an electromagnetic energy converter, a kinetic energy converter and combinations thereof.

37. The system as recited in claim 25, wherein the power source comprises:

a battery;

a power generator;

a converter electrically connected to the power generator and operable to convert power received from the power generator into power usable by the apparatus or to charge the battery;

a battery management unit connected to the battery; and

a power multiplexer connected to the battery management unit and the converter and operable to determine whether to draw power from the battery management unit, from the converter, or from both.

38. The system as recited in claim 25, further comprising a contactless interface disposed within the substrate that is communicably coupled to the device processor and electrically connected to the power source, wherein the contactless interface is selected from the group consisting of an antenna for wireless communication, an optical transceiver, a sonic transceiver, or a transceiver in the electromagnetic spectrum.