Personal digital key initialization and registration for secure transactions

• US 10,764,044 B1
• Filed: 07/03/2019
• Issued: 09/01/2020
• Est. Priority Date: 05/05/2006
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Giobbi, John J, Brown, David L, Hirt, Fred S
• Primary Examiner(s): Arani, Taghi T
• Assistant Examiner(s): Champakesan, Badri Narayanan
• Application Number:
  US16/503,066
• Time in Patent Office: 426 Days
• Field of Search: 713186
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 2209/12 Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.

Claims

1. A method comprising:

determining, by a reader device, that a portable electronic device is located within a proximity zone of the reader device;

establishing, by the reader device, a wireless communication channel between the reader device and the portable electronic device responsive to determining that the portable electronic device is located within the proximity zone;

capturing, by the portable electronic device, a face image of a user requesting a financial transaction;

comparing, by the portable electronic device, the face image of the user and a profile stored in the portable electronic device;

determining, by the portable electronic device, that the face image of the user matches the profile stored in the portable electronic device based on the comparing;

responsive to determining that the face image of the user matches the profile stored in the portable electronic device, transmitting transaction information for the financial transaction from the portable electronic device to the reader device via the wireless communication channel;

requesting, by the reader device, validation information associated with the portable electronic device from a database using the transaction information, wherein the validation information is based on an amount limit associated with the user; and

performing, by the reader device, the financial transaction for the user using the transaction information transmitted from the portable electronic device responsive to receiving the validation information from the database.

2. The method of claim 1, wherein the reader device is associated with an Automated Teller Machine and the financial transaction includes a withdrawal from the Automated Teller Machine.

3. The method of claim 1, wherein the portable electronic device includes a biometric scanner and a biometric input of the user is received via the biometric scanner.

4. The method of claim 3, wherein the capturing of the face image of the user is performed by the biometric scanner of the portable electronic device.

5. The method of claim 3, wherein the biometric input is based on one or more features of a face of the user.

6. The method of claim 3, wherein the biometric scanner of the portable electronic device includes a camera.

7. The method of claim 1, wherein the portable electronic device comprises one or more of a watch and a cell phone.

8. The method of claim 1, wherein the transaction information is associated with a default payment option.

9. The method of claim 1, wherein the transaction information is associated with a payment option selected by the user from a plurality of payment options associated with the user.

10. The method of claim 1, further comprising:

determining that the portable electronic device is not reported as lost, stolen, expired or revoked.

21. The method of claim 1, wherein the amount limit is a spending limit associated with the user or a present fund associated with the user.

11. A system comprising:

one or more processors, and a memory storing instructions that when executed by the one or more processors, cause the system to;

determine, by a reader device, that a portable electronic device is located within a proximity zone of the reader device;

establish, by the reader device, a wireless communication channel between the reader device and the portable electronic device responsive to determining that the portable electronic device is located within the proximity zone;

capture, by the portable electronic device, a face image of a user requesting a financial transaction, compare, by the portable electronic device, the face image of the user and a profile stored in the portable electronic device;

determine, by the portable electronic device, that the face image of the user matches the profile stored in the portable electronic device based on the comparing;

responsive to determining that the face image of the user matches the profile stored in the portable electronic device, transmit transaction information for the financial transaction from the portable electronic device to the reader device via the wireless communication channel;

request, by the reader device, validation information associated with the portable electronic device from a database using the transaction information, wherein the validation information is based on an amount limit associated with the user; and

perform, by the reader device, the financial transaction for the user using the transaction information transmitted from the portable electronic device responsive to receiving the validation information from the database.

12. The system of claim 11, wherein the reader device is associated with an Automated Teller Machine and the financial transaction includes a withdrawal from the Automated Teller Machine.

13. The system of claim 11, wherein the portable electronic device includes a biometric scanner and a biometric input of the user is received via the biometric scanner.

14. The system of claim 13, wherein the capturing of the face image of the user is performed by the biometric scanner of the portable electronic device.

15. The system of claim 13, wherein the biometric input is based on one or more features of a face of the user.

16. The system of claim 13, wherein the biometric scanner of the portable electronic device includes a camera.

17. The system of claim 11, wherein the portable electronic device comprises one or more of a watch and a cell phone.

18. The system of claim 11, wherein the transaction information is associated with a default payment option.

19. The system of claim 11, wherein the transaction information is associated with a payment option selected by the user from a plurality of payment options associated with the user.

20. The system of claim 11, wherein the instructions, when executed by the one or more processors, cause the system to:

determine that the portable electronic device is not reported as lost, stolen, expired or revoked.

22. The system of claim 11, wherein the amount limit is a spending limit associated with the user or a present fund associated with the user.