Hand geometry biometrics on a payment device

• US 9,336,634 B2
• Filed: 09/21/2012
• Issued: 05/10/2016
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Chartoleaux KG LLC (Intellectual Ventures LLC)
• Inventors: Bonalle, David S., Saunders, Peter D., Beenau, Blayn W., Gray, William J., Larkin, Carl, Fields, Seth W., Montgomery, Joshua L.
• Primary Examiner(s): Khan, Omer S
• Application Number:
  US13/623,998
• Publication Number:
  US 20130024384A1
• Time in Patent Office: 1,327 Days
• Field of Search: 340/5.83
• US Class Current: 1/1
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07345 by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G07C 2009/00984 : fob
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Claims

1. A Radio Frequency (RF) payment device comprising:

a RF transponder configured to receive a device authentication code from an RFID Reader communicatively coupled to a network;

a unique device encryption key corresponding to a device identification code associated with the RF payment device;

a biometric sensor configured to detect a biometric sample to create biometric sample data,

wherein the biometric sensor is configured to detect an inauthentic biometric sample based on biometric scan characteristics, and

wherein the biometric sensor is operable as a switch to place the RF transponder in more than one mode; and

a device authentication circuit configured to use the unique device encryption key to encrypt the device authentication code and a device account code associated with the RF payment device to create an encrypted device authentication code and an encrypted device account code;

wherein the RF transponder is configured to transmit at least one of the encrypted device authentication code and the encrypted device account code to the RFID Reader; and

wherein the RF transponder is configured to be operable in the more than one mode including a selectivity mode and an inclusivity mode, wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the RF transponder in an operational mode permitting the RF transponder to be responsive to interrogation.

2. The RF payment device of claim 1, further comprising a verification device configured to enable the device authentication circuit in response to a proffered biometric sample data matching authenticated biometric sample data.

3. The RF payment device of claim 2, further comprising an other RF transponder, wherein at least one of the RF transponder and the other RF transponder is configured to transmit the device authentication code to the RFID Reader and receive an encrypted authentication code from the RFID Reader in response to the proffered biometric sample data matching the authenticated biometric sample data.

4. The RF payment device of claim 3, further comprising a decryption key, wherein the device authentication circuit is configured to use the decryption key to decrypt the encrypted authentication code received from the RFID Reader in order to authenticate the RFID Reader.

5. The RF payment device of claim 3, wherein the biometric sensor is further configured to store log data within the RF payment device, the log data comprising at least one of detected biometric sample data, processed biometric sample data and stored biometric sample data, and wherein the biometric sensor is further configured to employ a security procedure in response to the proffered biometric sample data differing from the log data.

6. A method for registering and using proffered biometric sample data for facilitating a transaction, comprising:

detecting a proffered biometric sample at a biometric sensor to create the proffered biometric sample data, wherein the biometric sensor is operable as a switch to place a Radio Frequency (RF) transponder in more than one mode;

determining whether the proffered biometric sample is an inauthentic biometric sample based on biometric scan characteristics;

associating the proffered biometric sample data with at least one of an RFID device, a user identifier, and a transaction account;

verifying the proffered biometric sample data to activate the RFID device and to confirm the proffered biometric sample data to create registered biometric sample data;

receiving a transaction request from the RFID device at an RFID Reader communicatively coupled to a network, wherein the transaction request comprises transaction biometric sample data;

authorizing the transaction request in response to the transaction biometric sample data matching the registered biometric sample data; and

placing the RF transponder in a mode, wherein the RF transponder is operable in the more than one mode including a selectivity mode and an inclusivity mode, wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the RF transponder in an operational mode permitting the RF transponder to be responsive to interrogation.

7. The method of claim 6, further comprising associating the registered biometric sample data with at least one of personal information, credit card information, debit card information, savings account information, and loyalty point information.

8. The method of claim 7, further comprising associating the registered biometric sample data with second user information comprising at least one of personal information, credit card information, debit card information, savings account information, and loyalty point information.

9. The method of claim 6, further comprising facilitating at least one of authorized access, activation of a second RFID device, a financial transaction, and a non-financial transaction in response to the transaction biometric sample data matching the registered biometric sample data.

10. The method of claim 6, further comprising:

transmitting a device authentication code from a sample receiver to the RFID device;

receiving an encrypted device authentication code, second proffered biometric sample data, and a device identification code from the RFID device;

decrypting the encrypted device authentication code using a unique device decryption key corresponding to the device identification code to create a decrypted device authentication code; and

authenticating the RFID device in response to the second proffered biometric sample data matching the registered biometric sample data and in response to the decrypted device authentication code matching the device authentication code.

11. The method of claim 10, further comprising:

receiving a reader authentication code from the RFID device;

encrypting the reader authentication code using a reader encryption key to create an encrypted reader authentication code;

transmitting the encrypted reader authentication code to the RFID device for authentication of the sample receiver;

receiving an encrypted device account code from the RFID device upon the authentication of the sample receiver;

decrypting the encrypted device account code using the unique device decryption key to create a decrypted device account code; and

transmitting the decrypted device account code for processing of the transaction.

12. The method of claim 6, further comprising:

receiving a device update request comprising at least one of a preloaded value update request or a reload protocol update request;

updating, in response to the device update request, at least one of a preloaded value data file and a reload protocol data file, wherein the preloaded value data file comprises a stored value;

requesting a funding source value from a first funding source and the preloaded value data file, wherein the requesting of the funding source value is in response to an instruction from the reload protocol data file;

updating the stored value with the funding source value; and

in response to the stored value being greater than the transaction value, authorizing the merchant transaction request to facilitate the transaction.

13. The method of claim 12, wherein the reload protocol update request comprises at least one of a minimum depletion value update request, a time period update request, a number of occurrences update request, and a maximum value update request.

14. The method of claim 13, further comprising determining a compliance of the transaction with a preset transaction limitation comprising at least one of a maximum transaction amount, a minimum transaction amount, a maximum number of transactions within a time period value, a maximum number of transactions value, a use by certain merchants criterion, a temporal limitation, and a use of non-monetary funds criterion.

15. The method of claim 14, further comprising requiring second proffered biometric sample data to override the preset transaction limitation.

16. A system, comprising:

a biometric sensor configured to receive a first proffered biometric sample to create a first proffered biometric sample data,

wherein the biometric sensor is configured to detect an inauthentic proffered biometric sample based on biometric scan characteristics, and

wherein the biometric sensor is operable as a switch to place an RF transponder in more than one mode including a selectivity mode and an inclusivity mode, wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the RF transponder in an operational mode permitting the RF transponder to be responsive to interrogation;

a biometric processor configured to create registered biometric sample data from the first proffered biometric sample data in response to a second proffered biometric sample data associated with an RFID device matching the first proffered biometric sample data;

an RFID Reader communicatively coupled to a network, the RFID Reader configured to receive a transaction request from the RFID device, wherein the transaction request comprises transaction biometric sample data, an encrypted device account code, and a device identification code; and

an authentication circuit configured to;

decrypt the encrypted device account code using a unique device decryption key selected from a plurality of device-specific decryption keys, and

wherein the authentication circuit is further configured to authenticate the RFID device in response to the transaction biometric sample data matching the registered biometric sample data.

17. The system of claim 16, further comprising an RF transponder configured to transmit a device authentication code to the RFID device, and receive an encrypted device authentication code from the RFID device, and wherein the authentication circuit is further configured to decrypt the encrypted device authentication code using the unique device decryption key to authenticate the RFID device.

18. The system of claim 17, wherein the RF transponder is further configured to receive an ASR authentication code from the RFID device, wherein the authentication circuit is further configured to encrypt the ASR authentication code, and wherein the RF transponder is further configured to transmit the encrypted ASR authentication code to the RFID device to facilitate authentication of the ASR.