Using biometrics to recover password in customer mobile device

• US 9,378,502 B2
• Filed: 09/23/2014
• Issued: 06/28/2016
• Est. Priority Date: 09/23/2014
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Candelore, Brant, Zustak, Frederick J., Richman, Steven Martin
• Primary Examiner(s): TRAIL, ALLYSON NEEL
• Application Number:
  US14/493,741
• Publication Number:
  US 20160086180A1
• Time in Patent Office: 644 Days
• Field of Search: 235/379, 705/44, 705/72, 705/75
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules

Abstract

A bank customer'"'"'s CE device is used to authorize transactions using the customer'"'"'s electronic debit or credit card (“e-card”). Biometric input is used to recover the password of the customer device if lost.

Claims

1. A device comprising:

at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to;

receive a first factor for authentication;

determine whether the first factor is correct;

responsive to a determination that the first factor is correct, request a second factor for authentication;

receive the second factor;

determine whether the second factor is correct;

responsive to a determination that the second factor is correct, return a first signal required to permit a transaction for a requested amount;

responsive to a determination that the second factor is incorrect, return a second signal causing the transaction to be permitted for an amount not exceeding a non-zero threshold amount, regardless of whether the requested amount is greater than the threshold amount; and

responsive to a determination that the first factor is incorrect, deny the transaction, or return the second signal.

2. The device of claim 1, wherein the instructions are executable to:

responsive to a determination that the first factor is incorrect, deny the transaction.

3. The device of claim 1, wherein the instructions are executable to:

responsive to a determination that the first factor is incorrect, return the second signal.

4. The device of claim 1, wherein the instructions are executable to:

responsive to returning the second signal, present a notification that the transaction is permitted for an amount not exceeding the threshold amount regardless of whether the requested amount is greater than the threshold amount.

5. The device of claim 1, wherein the first factor is a password.

6. The device of claim 1, wherein the first factor is a biometric signal.

7. The device of claim 1, wherein the instructions are executable to:

present on an output device a first user interface (UI) prompting a user to select a desired level of authentication protection for authenticating e-card transactions, the first UI including a “

none”

selector, selection of which permits future authentications using the device not to require a password, a “

password only”

selector, selection of which mandates that future authentications using the device must include entry of a correct password, and a “

password plus biometric”

selector, selection of which mandates that future authentications using the device must include entry of a correct password and entry of a correct biometric input.

8. The device of claim 1, wherein the device is implemented by a wireless telephone.

9. The device of claim 6, wherein the biometric input includes metadata including at least one of date and time of receiving the biometric input, location of the device when the biometric input is received.

10. A consumer electronics (CE) device comprising:

at least one processor; and

at least one computer readable storage medium including instructions which when executed by the processor configure the processor to;

receive a first factor input by a user;

determine whether the factor is correct;

responsive to a determination that the first factor is correct, permit the CE device to send an acceptance signal to allow a transaction;

responsive to a determination that the first factor is incorrect, determine whether a number of attempts to enter the first factor satisfies a threshold;

responsive to a determination that the number of attempts does not satisfy the threshold, present a prompt to retry password entry;

responsive to a determination that the number of attempts satisfies the threshold, present a prompt to enter a biometric input;

receive the biometric input;

determine whether the biometric input is correct;

responsive to a determination that the biometric input is correct, permit the CE device to send the acceptance signal;

responsive to a determination that the biometric input is incorrect, deny the transaction or limit the transaction to be no more than a maximum amount regardless of a requested amount of the transaction.

11. The CE device of claim 10, wherein the instructions when executed by the processor configure the processor to:

responsive to a determination that the biometric input is incorrect, deny the transaction.

12. The CE device of claim 10, wherein the instructions when executed by the processor configure the processor to:

responsive to a determination that the biometric input is incorrect, limit the transaction to be no more than a maximum non-zero amount regardless of a requested amount of the transaction.

13. The CE device of claim 10, wherein the first factor is a password.

14. The CE device of claim 10, wherein the biometric input is a second biometric input and the first factor is a first biometric input.

15. The CE device of claim 10, wherein the biometric input includes metadata including at least one of date and time of receiving the biometric input, location of the CE device when the biometric input is received.

16. A computer memory that is not a transitory signal and including instructions executable by a processor to:

receive a first factor for authentication;

determine whether the first factor is correct;

responsive to a determination that the first factor is correct, request a second factor for authentication;

receive the second factor;

determine whether the second factor is correct;

responsive to a determination that the second factor is correct, return a first signal required to permit a transaction for a requested amount;

responsive to a determination that the second factor is incorrect, return a second signal causing the transaction to be permitted for an amount not exceeding a non-zero threshold amount, regardless of whether the requested amount is greater than the threshold amount; and

responsive to a determination that the first factor is incorrect, deny the transaction, or return the second signal.

17. The computer memory of claim 16, wherein the instructions are executable to:

responsive to a determination that the first factor is incorrect, deny the transaction.

18. The computer memory of claim 16, wherein the instructions are executable to:

responsive to a determination that the first factor is incorrect, return the second signal.

19. The compute memory of claim 16, wherein the instructions are executable to:

responsive to returning the second signal, present a notification on the CE device that the transaction is permitted for an amount not exceeding the threshold amount regardless of whether the requested amount is greater than the threshold amount.

20. The computer memory of claim 16, wherein the first factor is a password or a biometric signal.