Method and system for providing biometric authentication at a point-of-sale via a mobile device

• US 8,880,434 B2
• Filed: 01/27/2009
• Issued: 11/04/2014
• Est. Priority Date: 06/29/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Open Invention Network LLC
• Inventors: Bemmel, Vincent, Mian, Shaoib
• Primary Examiner(s): Agwumezie, Charles C
• Application Number:
  US12/360,649
• Publication Number:
  US 20090138366A1
• Time in Patent Office: 2,107 Days
• Field of Search: 705/76
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system and method is provided for authorizing a payment for a point of sale transaction by authenticating the user of a mobile device, such as a mobile phone. The present invention authenticates the consumer and verifies that he is authorized to conduct a transaction at the point of sale by means of the consumer'"'"'s mobile device.

Claims

1. An identity provider server for providing the capability to authenticate a consumer through a mobile device, the server comprising:

a processor;

memory communicably coupled to the processor;

a mobile gateway component for communicating with a mobile device;

an automatic speech recognition component for converting a voice sample of a consumer received through the mobile gateway component from the mobile device into a text sequence;

a consumer knowledge-based verification component for comparing the text sequence converted from the voice sample with registered consumer verification information associated with the consumer;

a biometric authentication component for comparing the voice sample received through the mobile gateway component with a registered voice sample associated with the consumer;

an electronic wallet database for storing consumer information associated with the consumer in an electronic wallet, wherein the electronic wallet includes financial account data;

a transaction module for generating an authorization identifier, wherein the authorization identifier enables the merchant to obtain payment information for payment processing from the electronic wallet of the consumer whose voice sample has been successfully matched with the registered voice sample by the biometric authentication component and whose converted text sequence has been successfully matched with the registered consumer verification information associated with the consumer, and wherein the transaction module accesses the electronic wallet upon receipt of the authorization identifier from a merchant point-of-sale system;

a staging database for storing the authorization identifier to enable the merchant to access the electronic wallet for retrieval of payment information for payment processing; and

a merchant gateway component for receiving from the merchant point-of-sale system a request to access payment information for payment processing, the request including the authorization identifier, and for transmitting the payment information included in the electronic wallet to the merchant point-of-sale system.

2. The identity provider server of claim 1, wherein the consumer information comprises one or more of demographic information, loyalty account information, healthcare information, and verification information.

3. The identity provider server of claim 1, wherein registered consumer verification information comprises one or more of a password and challenge question and answer data.

4. The identity provider server of claim 1, further comprising a mobile device database for confirming that a device identifier of the mobile device communicating with the server through the mobile gateway component is registered with the server.

5. The identity provider server of claim 1, further comprising a merchant point-of-sale authorization component enabling the merchant to obtain payment information for payment processing from the electronic wallet via a merchant point-of-sale terminals that has been identified to the server by the consumer through the mobile gateway component.

6. The identity provider server of claim 1, wherein the mobile gateway component enables telephony communication with the mobile device.

7. The identity provider server of claim 1, wherein the mobile gateway component enables text messaging communication with the mobile device.