Systems and methods for tokenless authentication of consumers during payment transactions

• US 9,904,921 B2
• Filed: 10/29/2013
• Issued: 02/27/2018
• Est. Priority Date: 10/29/2013
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Ghosh, Debashis, Shuken, Randy, Lesbirel, Mary Elizabeth
• Primary Examiner(s): Norman, Samica L
• Application Number:
  US14/066,246
• Publication Number:
  US 20150120547A1
• Time in Patent Office: 1,582 Days
• Field of Search: 705 39, 705348, 705 736
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

A computer-implemented method for tokenless authentication of a paying consumer during a payment transaction uses a computing device having a processor and a memory. The method includes receiving a plurality of biometric data sets for a plurality of consumers. Each biometric data set includes at least a biometric image of a consumer and an associated payment account identifier. The method also includes receiving, from a first biometric input device communicatively coupled to the processor, a first biometric image of the paying consumer including an iris image. The method further includes determining a payment account associated with the paying consumer based on at least the first biometric image and the plurality of biometric data sets. The method also includes authenticating use of the payment account by the paying consumer for a payment transaction at the retail location by comparing the first biometric image to the plurality of biometric data sets.

Claims

1. A computer-implemented method for tokenless authentication of a paying consumer during a payment transaction at a retail location, said method using a computing device having a processor and a memory, said method comprising:

receiving, in the memory, a plurality of biometric data sets for a plurality of consumers, each biometric data set including at least a first biometric image of one of the plurality of consumers and a payment account identifier associated with the one of the plurality of consumers, the plurality of consumers including the paying consumer;

receiving, from an iris recognition device proximate an entrance to the retail location and in communication with the processor, an iris image of each consumer physically entering the retail location;

creating a list of each consumer physically present at the retail location based at least in part on the received iris image for each consumer physically entering the retail location, the list including at least the paying consumer;

transmitting the list to at least one of the paying consumer and a salesperson of the retail location for display prior to completion of the payment transaction;

verifying, using the list, that the paying consumer is at the retail location during the payment transaction;

determining a payment account associated with the paying consumer by comparing the received iris image to the plurality of biometric data sets; and

authenticating use of the payment account by the paying consumer for a payment transaction at a point of sale computing device within the retail location.

2. The method of claim 1 further comprising:

receiving, from the paying consumer, a tokenless passcode, wherein each biometric data set of the plurality of biometric data sets further includes an authoritative tokenless passcode; and

authenticating use of the payment account by comparing the tokenless passcode to the authoritative tokenless passcode associated with the payment account.

3. The method of claim 1, wherein authenticating use of the payment account comprises authenticating the paying consumer without use of any physical identification token.

4. The method of claim 1 further comprising:

receiving, from a biometric input device different from the iris recognition device, a second biometric image of the paying consumer proximate to the point of sale computing device used for processing the payment transaction; and

authenticating use of the payment account by the paying consumer using at least the second biometric image.

5. A computing system for authenticating a paying consumer at a retail location, said computing system comprising:

a memory comprising a plurality of biometric data sets for a plurality of consumers, each biometric data set including at least a first biometric image of one of the plurality of consumers and a payment account identifier associated with the one of the plurality of consumers, the plurality of consumers including the paying consumer; and

a processor communicatively coupled to the memory and the first biometric input device, said processor programmed to;

receive, from an iris recognition device proximate an entrance to the retail location, an iris image of each consumer physically entering the retail location;

create a list of each consumer physically present at the retail location based at least in part on the received iris image for each consumer physically entering the retail location, the list including at least the paying consumer;

transmit the list to at least one of the paying consumer and a salesperson of the retail location for display prior to completion of the payment transaction;

verify, using the list, that the paying consumer is at the retail location during the payment transaction;

determine a payment account associated with the paying consumer by comparing the received iris image to the plurality of biometric data sets; and

authenticate use of the payment account by the paying consumer for a payment transaction at a point of sale computing device within the retail location based on the payment account determination.

6. The computing system of claim 5, wherein said processor is further configured to:

receive, from the paying consumer, a tokenless passcode, wherein each biometric data set of the plurality of biometric data sets further includes an associated tokenless passcode; and

authenticate use of the payment account by comparing the tokenless passcode to the authoritative tokenless passcode associated with the payment account.

7. The computing system of claim 6, wherein said processor is further programmed to authenticate use of the payment account by the paying consumer without use of any physical identification token.

8. The computing system of claim 5, wherein said processor is further programmed to:

receive, from a second biometric input device proximate to the point of sale computing device, a second biometric image of the paying consumer, the second biometric input device being different from the iris recognition device; and

authenticating use of the payment account by the paying consumer using at least the second biometric image.

9. The computing system of claim 5, wherein said processor is further programmed to receive the first biometric image while the paying consumer is near a point of entry of the retail location.

10. A computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by at least one processor, the computer-executable instructions cause the processor to:

receive a plurality of biometric data sets for a plurality of consumers, each biometric data set including at least a biometric image of a consumer and an associated payment account identifier;

receive an iris image of the paying consumer upon the paying consumer entering a retail location;

create a list including the plurality of consumers, the list representing consumers physically present at the retail location and based at least in part on the received first biometric image and the different plurality of biometric images; and

transmit the list to at least one of the paying consumer and a salesperson prior to completion of the payment transaction;

verify, using the list, that the paying consumer is at the retail location during the payment transaction;

associate the paying consumer with a payment account using at least the received iris image of the paying consumer; and

authenticate use of the payment account by the paying consumer for a payment transaction at a point of sale computing device within the retail location by comparing the received iris image to the plurality of biometric data sets.

11. The computer-readable storage media of claim 10, wherein the computer-executable instructions further cause the processor to:

receive, from the paying consumer, a tokenless passcode, wherein each biometric data set of the plurality of biometric data sets further includes an authoritative tokenless passcode; and

authenticate use of the payment account by comparing the tokenless passcode to the authoritative tokenless passcode associated with the payment account.

12. The computer-readable storage media of claim 11, wherein the computer-executable instructions further cause the processor to authenticate the paying consumer without use of any physical identification token.

13. The computer-readable storage media of claim 10, wherein the computer-executable instructions further cause the processor to:

receive a second biometric image of the paying consumer proximate to a point of sale of the payment transaction; and

authenticate use of the payment account by the paying consumer using at least the second biometric image.