System and method of a smartcard transaction with biometric scan recognition

• US 9,922,320 B2
• Filed: 12/27/2012
• Issued: 03/20/2018
• Est. Priority Date: 07/01/2004
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: III Holdings 1, LLC (Intellectual Ventures LLC)
• Inventors: Bonalle, David S., Salow, Glen
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US13/728,131
• Publication Number:
  US 20140081857A1
• Time in Patent Office: 1,909 Days
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method for facilitating biometric security in a smartcard-reader transaction system is provided. The method includes determining if a transaction violates an established rule, such as a preset spending limit. The method also includes notifying a user to proffer a biometric sample in order to verify the identity of said user, and detecting a proffered biometric at a sensor to obtain a proffered biometric sample. The method additionally comprises verifying the proffered biometric sample and authorizing a transaction to continue upon verification of the proffered biometric sample.

Claims

1. A system comprising:

a smartcard comprising an integrated circuit device, the integrated circuit device having encoded therein information associated with a plurality of account users, wherein the smartcard further comprises an interface for communication with point of sale terminals, wherein the smartcard further comprises a biometric scan sensor configured to detect biometric scan samples, and wherein the smartcard is configured to;

store biometric sample information for the plurality of account users;

store encrypted account data associated with the plurality of account users;

in response to a requested transaction by a particular one of the plurality of account users, request a biometric sample from the particular account user;

detect a proffered biometric scan sample from the particular account user;

identify the particular account user by comparing the detected biometric scan sample to the stored biometric sample information for the particular account user;

use the detected biometric scan sample as a cryptographic key to decrypt the encrypted account data associated with the particular account user; and

perform, according to information contained in the decrypted account data, operations associated with the requested transaction.

2. The system of claim 1, further comprising:

a first enterprise data collection unit associated with a first enterprise, the first enterprise data collection unit configured to store update transactions and pending transactions associated with the smartcard and the first enterprise;

a second enterprise data collection unit associated with a second enterprise, the second enterprise data collection unit configured to store update transactions and pending transactions associated with the smartcard and the second enterprise;

a card object database system coupled to the first enterprise data collection unit and the second enterprise data collection unit and the card object database system configured to store smartcard information in accordance with the update transactions and the pending transactions, wherein the smartcard information comprises a card object having an application; and

an update logic system configured to effect synchronization of the smartcard information associated with the smartcard and the card object database system, wherein the update logic system is activated upon identification of the particular account user.

3. The system of claim 2, further comprising an access point configured to interface with the smartcard and the first enterprise data collection unit and the second enterprise data collection unit, and a secure support client server configured to communicate with the access point, the secure support client server further configured to adaptively provide communication functionality in accordance with the communication functionality available at the access point.

4. The system of claim 2, wherein the update logic system is coupled to at least one enterprise data synchronization interface, the update logic system configured to securely route the smartcard information between the at least one enterprise data synchronization interface and the first and second enterprise data collection units, the at least one enterprise data synchronization interface coupled to an enterprise network configured to communicate with an access point.

5. The system of claim 1, wherein the stored biometric sample information is associated with at least one of:

personal information, credit card information, debit card information, savings account information, membership information, electronic bill payment information, automatic bill payment information and loyalty point information.

6. The system of claim 1, wherein the proffered biometric scan sample is associated with first user information, wherein the first user information comprises at least one of:

personal information, credit card information, debit card information, savings account information, membership information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein the proffered biometric scan sample is also associated with second user information, wherein the second user information comprises at least one of personal information, credit card information, debit card information, savings account information, membership information, electronic bill payment information, automatic bill payment information and loyalty point information, and wherein the second user information is different from the first user information.

7. The system of claim 1, wherein the integrated circuit device further comprises a common file structure, wherein the common file structure provides write access for a first partnering organization and a second partnering organization to a field in the common file structure.

8. The system of claim 1, wherein the smartcard is further configured to:

notify a second account user of the requested transaction when the detected biometric scan sample and the requested transaction meet at least one criterion.

9. The system of claim 8, wherein the information contained in the decrypted account data specifies the at least one criterion for notifying the second account user.

10. The system of claim 8, wherein notifying the second account user includes transmitting information contained in the decrypted account data.

11. The system of claim 1, wherein the information contained in the decrypted account data specifies a secondary user, and wherein the operations associated with the requested transaction include initiating a notification of the requested transaction to the secondary user.

12. The system of claim 1, wherein the information contained in the decrypted account data specifies an access point accessible to the smartcard, and wherein the operations associated with the requested transaction include communicating with the specified access point to facilitate authentication of the requested transaction.

13. A method comprising:

receiving, via an interface for communication with point of sale terminals, by a smartcard that includes an integrated circuit device having encoded therein information associated with a plurality of account users, a request for a transaction based on a smartcard that is associated with a plurality of account users;

storing, by the smartcard, biometric sample information for the plurality of account users;

storing, by the smartcard, encrypted account data associated with the plurality of account users;

requesting, by the smartcard, a biometric sample from a particular one of the plurality of account users;

detecting, via a biometric scan sensor of the smartcard, a proffered biometric scan sample from the particular account user;

identifying, by the smartcard, the particular account user by comparing the detected biometric scan sample to the stored biometric sample information for the particular account user;

using, by the smartcard, the detected biometric scan sample as a cryptographic key to decrypt the encrypted account data associated with the particular account user; and

performing, by the smartcard, according to information contained in the decrypted account data, operations associated with the requested transaction.

14. The method of claim 13, wherein the smartcard includes a card object database system coupled to a first enterprise data collection unit associated with a first enterprise and a second enterprise data collection unit associated with a second enterprise.

15. The method of claim 13, further comprising effecting, in response to identification of the particular account user, synchronization of smartcard information associated with the smartcard and a card object database system having an application, wherein the smartcard information is stored in accordance with update transactions and pending transactions associated with the smartcard, a first enterprise and a second enterprise.

16. The method of claim 13, further comprising:

enabling, by the integrated circuit device, write access for a first partnering organization and a second partnering organization to a field in a common file structure, in response to identification of the particular account user; and

transferring, by the smartcard, information related to the common file structure to facilitate the transaction.

17. The method of claim 13, further comprising:

notifying a second account user of the requested transaction when the detected biometric scan sample and the requested transaction meet at least one criterion.

18. The method of claim 17, wherein the information contained in the decrypted account data specifies the at least one criterion for notifying the second account user.

19. The method of claim 17, wherein notifying the second account user includes transmitting information contained in the decrypted account data.

20. An article of manufacture including a non-transitory, computer readable medium having instructions stored thereon that, in response to execution by an integrated circuit of a smartcard, cause the integrated circuit of the smartcard to perform operations comprising:

receiving, via an interface for communication with point of sale terminals, a request for a transaction involving the smartcard, wherein the smartcard includes information associated with a plurality of account users, and wherein the transaction is requested by a particular one of the plurality of account users;

storing biometric sample information for the plurality of account users;

storing encrypted account data associated with the plurality of account users;

requesting a biometric sample from the particular account user;

detecting, via a biometric scan sensor of the smartcard, a proffered biometric scan sample from the particular account user;

identifying the particular account user by comparing the detected biometric scan sample to the stored biometric sample information for the particular account user;

using the detected biometric scan sample as a cryptographic key to decrypt the encrypted account data associated with the particular account user; and

performing, according to information contained in the decrypted account data, operations associated with the requested transaction.