Biometric identification device

• US 9,659,297 B2
• Filed: 08/07/2008
• Issued: 05/23/2017
• Est. Priority Date: 11/30/1999
• Status: Expired due to Term

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Russell, David C., Johnson, Barry W., Petka, David M.
• Primary Examiner(s): Araque, Jr., Gerardo
• Application Number:
  US12/187,808
• Publication Number:
  US 20080319906A1
• Time in Patent Office: 3,211 Days
• Field of Search: 705 1, 705 64, 705 65, 705 16, 705 17, 705 18, 705 20, 705 26, 705 30, 380277, 713186, 713182, 713189, 713192, 713193, 713190, 713150, 713155, 713168, 713164
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The invention is directed towards methods, systems and apparatuses, see FIG. 1, (100) for providing secure and private interactions. The invention provides capability for verifying the identity of a party initiating an electronic interaction with another party through data input module (140) which is verified by the identity verification module (150), which further includes a self-destruct mechanism (153). Embodiments of the invention include secure methods for conducting transactions and for limiting the transfer and distribution of personal data to only those data that are absolutely necessary for the completion of the transactions. The invention facilitates the transfer of additional personal data contingent upon an agreement that appropriately compensates the provider of the personal data.

Claims

1. An apparatus comprising:

a housing;

an identity verification module carried by the housing and comprising

a biometric sensor configured to receive a biometric input from a user,

a memory configured to store a control designation and a biometric template associated with the user, and

a first processor comprising a comparator configured to authenticate the user based upon matching of the biometric input with the biometric template;

a user input device; and

a second processor carried by the housing and cooperating with the first processor to

initiate a financial transaction based upon authentication of the user and having a user non-negotiable constraint associated with the financial transaction, the user non-negotiable constraint relating to a number of personal data fields to be provided for participating in the transaction and a minimum discount set by the user prior to initiating the transaction to be received in exchange for providing the personal data fields;

receive a first public key associated with an information processor from a certification repository database responsive to initiating the financial transaction,

encrypt the control designation along with date and time information using the first public key and send the encrypted control designation to the information processor,

receive a challenge message from the information processor encrypted using a second public key associated with the apparatus,

decrypt the encrypted challenge message using the a second private key associated with the apparatus, and

re-encrypt the challenge message using the first public key, send the re-encrypted challenge message to the information processor for verification to perform the transaction based upon the original challenge message and the re-encrypted challenge message, and send the user non-negotiable constraint to the information processor as a pre-condition for participation in the transaction.

2. The apparatus of claim 1 wherein the second processor is further configured to initiate a security access transaction.

3. The apparatus of claim 1 wherein the second processor is further configured to initiate an inventory system transaction.

4. The apparatus of claim 1 wherein the second processor is further configured to initiate a computer network access transaction.

5. The apparatus of claim 1 wherein said biometric sensor comprises a fingerprint sensor, and wherein the biometric template comprises a fingerprint template.

6. A method for using an apparatus comprising a housing, a user input device carried by the housing, and an identity verification module carried by the housing, the identity verification module comprising a biometric sensor configured to receive a biometric input from a user, a memory configured to store a control designation and a biometric template associated with the user, and a first processor comprising a comparator, and wherein the apparatus further comprises a second processor carried by the housing, the method comprising:

using the comparator to authenticate the user based upon matching of the biometric input with the biometric template; and

using the second processor to

initiate a financial transaction based upon authentication of the user and having a user non-negotiable constraint associated with the financial transaction, the user non-negotiable constraint relating to a number of personal data fields to be provided for participation in the transaction and a minimum discount set by the user prior to initiating the transaction to be received in exchange for providing the personal data field;

receive a first public key associated with an information processor from a certification repository database responsive to initiating the financial transaction;

encrypt the control designation along with date and time information using the first public key and sending the encrypted control designation to the information processor;

receive a challenge message from the information processor encrypted using a second public key associated with the apparatus;

decrypt the encrypted challenge message using a second private key associated with the apparatus;

re-encrypt the challenge message using the first public key; and

send the re-encrypted challenge message to the information processor for verification to perform the transaction based upon the original challenge message and the re-encrypted challenge message, and sending the user non-negotiable constraint to the information processor as a pre-condition for participation in the transaction.

7. The method of claim 6 further comprising using the second processor to initiate a security access transaction.

8. The method of claim 6 further comprising using the second processor to initiate an inventory system transaction.

9. The method of claim 6 further comprising using the second processor to initiate a computer network access transaction.

10. The method of claim 6 wherein the biometric sensor comprises a fingerprint sensor, and wherein the biometric template comprises a fingerprint template.

11. A non-transitory computer-readable medium for an apparatus comprising a housing, a user input device carried by the housing, and an identity verification module carried by the housing, the identity verification module comprising a biometric sensor configured to receive a biometric input from a user, a memory configured to store a control designation and a biometric template associated with the user, and a first processor comprising a comparator, and wherein the apparatus further comprises a second processor carried by the housing, the non-transitory computer-readable medium having computer-executable instructions for causing the apparatus to perform steps comprising:

using the comparator to authenticate the user based upon matching of the biometric input with the biometric template; and

using the second processor to

initiate a financial transaction based upon authentication of the user and having a user non-negotiable constraint associated with the financial transaction, the user non-negotiable constraint relating to a number of personal data fields to be provided for participation in the transaction and a minimum discount set by the user prior to initiating the transaction to be received in exchange for providing the personal data field;

receive a first public key associated with an information processor from a certification repository database responsive to initiating the financial transaction;

encrypt the control designation along with date and time information using the first public key and sending the encrypted control designation to the information processor;

receive a challenge message from the information processor encrypted using a second public key associated with the apparatus;

decrypt the encrypted challenge message using a second private key associated with the apparatus;

re-encrypt the challenge message using the first public key; and

send the re-encrypted challenge message to the information processor for verification to perform the transaction based upon the original challenge message and the re-encrypted challenge message, and sending the user non-negotiable constraint to the information processor as a pre-condition for participation in the transaction.

12. The non-transitory computer-readable medium of claim 11 further having computer-executable instructions for causing the second processor to initiate a security access transaction.

13. The non-transitory computer-readable medium of claim 11 further having computer-executable instructions for causing the second processor to initiate an inventory system transaction.

14. The non-transitory computer-readable medium of claim 11 further having computer-executable instructions for causing the second processor to initiate a computer network access transaction.

15. The non-transitory computer-readable medium of claim 11 wherein said biometric sensor comprises a fingerprint sensor, and wherein the biometric template comprises a fingerprint template.