Biometric identification device and methods for secure transactions

• US 8,566,250 B2
• Filed: 08/07/2008
• Issued: 10/22/2013
• Est. Priority Date: 11/30/1999
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Privaris, Inc.
• Inventors: Russell, David C., Johnson, Barry W., Petka, David M.
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US12/187,806
• Publication Number:
  US 20080319915A1
• Time in Patent Office: 1,902 Days
• Field of Search: 705 64- 67, 340 552- 553, 340 58- 584, 902/3, 382/115
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The invention is directed towards methods, systems and apparatuses, see FIG. 1, (100) for providing secure and private interactions. The invention provides capability for verifying the identity of a party initiating an electronic interaction with another party through data input module (140) which is verified by the identity verification module (150), which further includes a self-destruct mechanism (153). Embodiments of the invention include secure methods for conducting transactions and for limiting the transfer and distribution of personal data to only those data that are absolutely necessary for the completion of the transactions. The invention facilitates the transfer of additional personal data contingent upon an agreement that appropriately compensates the provider of the personal data.

Claims

1. A method, comprising:

authenticating, at a personal identification device owned by a user, a biometric input of the user of the personal identification device based on a biometric template of the user stored at the personal identification device, the biometric input being stored at the personal identification device during the authenticating, the personal identification device being configured to prevent the biometric input and the biometric template from being output from the personal identification device, the personal identification device being portable and having financial data associated with funds of the user stored thereon; and

sending, from the personal identification device, the financial data associated with the funds of the user to a receiving party such that the receiving party receives funds based on the financial data associated with the funds when the biometric input of the user is authentic.

2. The method of claim 1, wherein:

the financial data associated with the user includes an identifier associated with the personal identification device; and

the sending, from the personal identification device, the financial data associated with the user to the receiving party is performed such that the receiving party confirms that the identifier associated with the personal identification device has been registered in association with the user and that the user is privileged to access an account of the user associated with the funds.

3. The method of claim 1, wherein:

the financial data associated with the user includes an identifier associated with the personal identification device; and

the sending, from the personal identification device, the financial data associated with the user to the receiving part is performed such that the receiving party consults a certificate repository database based on the identifier associated with the personal identification device.

4. The method of claim 1, wherein the receiving party is a vendor, the method further comprising:

selecting, at the personal identification device, an item for purchase;

determining, at the personal identification device, a payment amount based on the item before the sending, from the personal identification device, financial data associated with the user, the financial data associated with the user being configured to debit an account of the user by the payment amount; and

receiving, at the personal identification device, from the vendor an acknowledgement.

5. The method of claim 1, wherein the financial data associated with the user is configured such that a financial intermediary receives funds associated with a surcharge.

6. The method of claim 1, further comprising:

requiring the user to re-authenticate at the personal identification device; and

the sending, from the personal identification device, the financial data associated with the user being performed within a preset time period before the requiring.

7. The method of claim 1, wherein the financial data associated with the user is configured to authorize a payment for a deliverable;

and

the sending, from the personal identification device, the financial data associated with the user to the receiving party is performed such that the receiving party verifies that an account of the user specified by the financial data associated with the user has sufficient funds to make the payment for the deliverable.

8. The method of claim 1, wherein the financial data associated with the user is associated with the biometric template of the user.

9. The method of claim 1, wherein the personal identification device is configured to deny an alteration to the financial data associated with the user unless the alteration is performed by a verification authority.

10. A method, comprising:

authenticating, at a personal identification device owned by a user, a biometric input of the user of the personal identification device based on a biometric template of the user stored at the personal identification device, the biometric input being stored at the personal identification device during the authenticating, the personal identification device being configured to prevent the biometric input and the biometric template from being output from the personal identification device, the personal identification device being portable;

producing, at the personal identification device, a payment packet associated with the user, the payment packet including an account of the user and a payment amount; and

sending, from the personal identification device, the payment packet associated with the user to a receiving party such that the payment amount is transferred from the account of the user to an account of the receiving party.

11. The method of claim 10, wherein the payment packet includes an identifier associated with the personal identification device,

the sending, from the personal identification device, the payment packet to the receiving party is performed such that the receiving party confirms that the user is privileged to access the account of the user based on the identifier associated with the personal identification device.

12. The method of claim 10, wherein the payment packet includes an identifier associated with the personal identification device,

the sending, from the personal identification device, the payment packet to the receiving party is performed such that the receiving party confirms that the identifier associated with the personal identification device corresponds to a personal identification device that has been registered to the user.

13. The method of claim 10, wherein the receiving party is a vendor, the method further comprising:

selecting, at the personal identification device, an item for purchase;

determining, at the personal identification device, a payment amount based on the item before the sending the payment packet; and

receiving, at the personal identification device, from the vendor an acknowledgement when the payment amount has been successfully transferred from the account of the user to the account of the vendor.

14. The method of claim 10, wherein the payment packet is configured to permit transmission of funds associated with a surcharge from the account of the user to an account of a financial intermediary.

15. The method of claim 10, wherein the biometric template includes at least one of a digit-print, a handprint, a voice data, a retinal data, and a DNA data.

16. A method, comprising:

receiving, at a personal identification device owned by a user, a biometric input of the user;

authenticating, at the personal identification device, the biometric input of the user of the personal identification device based on a biometric template of the user stored at the personal identification device, the biometric template being associated with account data of the user, the biometric input being stored at the personal identification device during the authenticating, the personal identification device being configured to prevent output of the biometric input and the biometric template stored at the personal identification device, the personal identification device being portable; and

sending, from the personal identification device, the account data to a receiving party when the biometric input is authentic such that funds associated with the account data is received by an account of the receiving party.

17. The method of claim 16, further comprising:

sending, from the personal identification device, an identifier associated with the personal identification device to the receiving party such that the receiving party confirms that the identifier associated with the personal identification device has been registered to the user and that the user is privileged to access the account data.

18. The method of claim 16, wherein the account data is configured to permit transmission of funds associated with a plurality of surcharges from the account of the user to an account of each financial intermediary from a plurality of financial intermediaries, each surcharge from the plurality of surcharges being associated with a financial intermediary from the plurality of financial intermediaries.

19. The method of claim 16, further comprising:

requiring the user to re-authenticate a biometric input of the user at the personal identification device,

the sending, from the personal identification device, the account data to the receiving party being performed within a preset time period before the requiring.

20. The method of claim 16, wherein the personal identification device has a weight of less than two ounces and a volume of less than two cubic inches.