Single step transaction authentication using proximity and biometric input

• US 9,542,542 B2
• Filed: 05/07/2007
• Issued: 01/10/2017
• Est. Priority Date: 11/30/2005
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Giobbi, John J., Brown, David L., Hirt, Fred S.
• Primary Examiner(s): OBEID, MAMON A
• Application Number:
  US11/745,249
• Publication Number:
  US 20070245158A1
• Time in Patent Office: 3,536 Days
• Field of Search: 382115-118, 382/124, 340/5.53, 340/5.83, 705/64, 705/67
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 2209/12 Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A system and method provide efficient, secure and highly reliable authentication for transaction processing and/or access control applications in which only biometric input is required from the user. A Personal Digital Key stores a biometric profile that comprises a representation of physical or behavioral characteristics that are uniquely associated with an individual that owns and carries the PDK. The PDK wirelessly transmits the biometric profile over a secure wireless transaction to a Reader for use in a biometric authentication process. The Reader compares the received biometric profile to a biometric input acquired at the point of transaction in order to determine if the transaction should be authorized.

Claims

1. A method for electronic transaction processing comprising:

automatically and wirelessly receiving, using one or more processors, a first biometric sample from a first personal digital key device after the first personal digital key device has entered a proximity zone within a readable coverage area, wherein the first personal digital key device includes the first biometric sample and a first biometric profile associated with a valid user of the first personal digital key device, wherein the first biometric sample is a subset of the first biometric profile;

automatically and wirelessly receiving, using the one or more processors, a second biometric sample from a second personal digital key device after the second personal digital key device has entered the proximity zone within the readable coverage area, wherein the second personal digital key device includes the second biometric sample and a second biometric profile associated with a valid user of the second personal digital key device, wherein the second biometric sample is a subset of the second biometric profile;

receiving, using the one or more processors, a biometric input from a user;

comparing, using the one or more processors, the biometric input to a collection of biometric samples received from and associated with personal digital key devices within the proximity zone for a match, the collection of biometric samples including the first biometric sample and the second biometric sample when the first personal digital key device and the second personal digital key device are within the proximity zone within the readable coverage area;

determining, using the one or more processors, that the biometric input from the user matches the first biometric sample from the first personal digital key device;

based on the biometric input matching the first biometric sample from the first personal digital key device in the collection of biometric samples received from and associated with personal digital key devices within the proximity zone, determining, using the one or more processors, that the first personal digital key device from personal digital key devices within the proximity zone is to be associated with a transaction;

after determining that the first personal digital key device is associated with the transaction, determining, using the one or more processors, whether the biometric input of the user matches the first biometric profile associated with the valid user of the first personal digital key device;

authenticating, using the one or more processors, without user intervention, the first personal digital key device after the first personal digital key device has entered the readable coverage area; and

authorizing, using the one or more processors, the transaction responsive to the authentication of the first personal digital key device and determining that the biometric input matches the first biometric profile associated with the valid user of the first personal digital key device.

2. The method of claim 1, wherein receiving the biometric input includes performing at least one of a fingerprint scan, a retinal scan, an iris scan, a facial scan, a palm scan, a DNA analysis, a signature analysis, and a voice analysis.

3. The method of claim 1, wherein the user provides the biometric input and the transaction is authorized without further action by the user.

4. The method of claim 1, wherein the first personal digital key device includes a personal digital key identification number and one or more of financial information, credit card information and personal identification information.

5. The method of claim 1, wherein authenticating the first personal digital key device begins before comparing the biometric input.

6. The method of claim 1, wherein comparing the biometric input is received before authenticating the first personal digital key device.

7. The method of claim 1, wherein authenticating the first personal digital key device includes receiving data from the first personal digital key device and comparing it against an external system.

8. The method of claim 1, wherein the first personal digital key device determines that the biometric input of the user matches the biometric profile associated with the valid user of the first personal digital key device.

9. The method of claim 1, further comprising the steps of:

obtaining, responsive to the biometric input matching the first biometric sample from the first personal digital key device and determining that the first personal digital key device is associated with the transaction, the biometric profile associated with the valid user of the first personal digital key device from the first personal digital key device.

10. The method of claim 1, wherein the proximity zone and the readable coverage area are associated with a reader device and wherein receiving the biometric input, authenticating the first personal digital key device, and comparing the biometric input to the first biometric profile are performed by the reader device.

11. The method of claim 1, wherein the biometric input received is a calculated representation of one or more of a physical and a behavioral characteristic based on input received by a biometric sensor.

12. The method of claim 1, wherein authorizing the transaction comprises:

communicating with another system to authorize and approve the transaction; and

presenting a status for the transaction.

13. The method of claim 1, further comprising the steps of:

receiving a first picture profile from the first personal digital key device, the first picture profile including a picture associated with the valid user of the first personal digital key device; and

displaying the picture profile associated with the valid user of the first personal digital key device to an administrator.

14. The method of claim 1, further comprising:

using at least one of financial information, credit card information and personal identification information received from the first personal digital key to complete the transaction, wherein the transaction is a financial transaction, the first personal digital key device including the at least one of the financial information, the credit card information and the personal identification information.

15. A system comprising:

one or more processors; and

a memory including instructions that when executed by the one or more processors cause the one or more processors to;

automatically and wirelessly receive a first biometric sample from a first personal digital key device after the first personal digital key device has entered a proximity zone within a readable coverage area, the first personal digital key device including the first biometric sample and a first biometric profile associated with a valid user of the first personal digital key device, wherein the first biometric sample is a subset of the first biometric profile;

automatically and wirelessly receive a second biometric sample from a second personal digital key device after the second personal digital key device has entered the proximity zone within the readable coverage area, the second personal digital key device including the second biometric sample and a second biometric profile associated with a valid user of the second personal digital key device, wherein the second biometric sample is a subset of the second biometric profile;

receive a biometric input from a user;

compare the biometric input to a collection of biometric samples received from and associated with personal digital key devices within the proximity zone for a match, the collection of biometric samples including the first biometric sample and the second biometric sample when the first personal digital key device and the second personal digital key device are within the proximity zone within the readable coverage area;

determine that the biometric input from the user matches the first biometric sample from the first personal digital key device;

based on the biometric input matching the first biometric sample from the first personal digital key device in the collection of biometric samples received from and associated with personal digital key devices within the proximity zone, determine that the first personal digital key device is associated with a transaction;

after determining that the first personal digital key device is associated with the transaction, determine whether the biometric input of the user matches the biometric profile associated with the valid user of the first personal digital key device;

authenticate, without user intervention, the first personal digital key device after the first personal digital key device has entered the readable coverage area; and

authorize the transaction responsive to the authentication of the first personal digital key device and determining that the biometric input matches the first biometric profile associated with the valid user of the first personal digital key device.

16. The system of claim 15, wherein the user provides the biometric input and the transaction is authorized without further action by the user.

17. The system of claim 15, the instructions when executed further causing the system to use at least one of financial information, credit card information and personal identification information received from the first personal digital key to complete the transaction, wherein the transaction is a financial transaction, the first personal digital key device including the at least one of the financial information, the credit card information and the personal identification information.

18. The system of claim 15, wherein the authentication of the first personal digital key device includes comparing a personal digital key device identifier associated with the first personal digital key device against an external system, the external system including one or more of a central registry, a validation database and a private registry.

19. The system of claim 15, wherein authorizing the transaction comprises:

communicating with another system to authorize and approve the transaction; and

presenting a status for the transaction.

20. The system of claim 15, wherein the biometric input received is a calculated representation of one or more of a physical and a behavioral characteristic based on input received by a biometric sensor.