Method and system for providing online authentication utilizing biometric data

• US 9,911,146 B2
• Filed: 01/23/2009
• Issued: 03/06/2018
• Est. Priority Date: 02/06/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Open Invention Network LLC
• Inventors: Siegal, Jon, Rowell, Simon, Hintz, Thomas
• Primary Examiner(s): Hayes, John
• Assistant Examiner(s): HALE, TIM B
• Application Number:
  US12/358,925
• Publication Number:
  US 20090177587A1
• Time in Patent Office: 3,329 Days
• Field of Search: 705 50- 79
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/08 Payment architectures
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/16 Payments settled via telecommunication systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A system and method for securely authenticating a user for the purpose of accessing information, such as private financial or personal information, in an online environment are disclosed. In addition, a system and method for allowing consumers to make secure payments from an electronic wallet with biometric authentication are disclosed.

Claims

1. A method, comprising:

receiving, at an authentication provider system computer including a processor and a memory communicatively coupled to one another, transaction data from an online merchant, the transaction data pertaining to a proposed e-commerce transaction negotiated between the online merchant and a user via a user online terminal and including an online merchant identifier and a transaction amount;

associating, at the authentication provider system computer, a transaction identifier with the transaction data;

transmitting to the online merchant, by the authentication provider system computer, the transaction identifier and a redirection request, the redirection request enabling a direct connection between the authentication provider system computer and the user online terminal;

establishing, via the redirection request, a connection with the user via the user online terminal;

conducting, by the authentication provider system computer, biometric authentication of the user through the user online terminal;

retrieving, by the authentication provider system computer, a user identifier based upon the user biometric authentication;

extracting, by the authentication provider system computer, electronic wallet information relating to the user identifier, the electronic wallet information at least including user contact data and user financial account data;

generating, by the authentication provider system computer, a federated identity associated only with the user identifier and the online merchant;

prompting, by the authentication provider system computer via transmission of the user contact data and federated identity, the merchant to establish a user account in a merchant database, the account at least including the user contact data and the federated identity;

transmitting, by the authentication provider system computer, at least the user financial account data and a portion of the transaction data to a payment processor, the payment processor authorizing payment for the e-commerce transaction or denying payment for the e-commerce transaction;

receiving, by the authentication provider system computer from the payment processor, an indication that the payment processor has authorized payment for the e-commerce transaction or that the payment processor has denied payment for the e-commerce transaction; and

transmitting, by the authentication provider system computer to the online merchant, an approval message indicating that the payment processor has authorized payment for the e-commerce transaction or that the payment processor has denied payment for the e-commerce transaction.

2. The method of claim 1, wherein the user contact data includes a name and a shipping address of the user.

3. The method of claim 1, further comprising:

transmitting the transaction identifier to the online merchant as part of the approval message.

4. The method of claim 1, wherein the approval message includes the federated identity.

5. The method of claim 1, further comprising:

presenting at least a portion of the payment transaction details to the user through the connection with the user online terminal for an approval by the user.

6. The method of claim 5, further comprising:

presenting to the user at least one financial account in the electronic wallet information through the connection with the user online terminal; and

receiving a selection of the at least one financial account from the user through the connection, wherein the selected financial account is included in the user financial account data transmitted to the payment processor by the authentication provider system computer.