Method, apparatus, and system for performing wireless transactions with biometric authentication

• US 11,403,630 B2
• Filed: 12/08/2014
• Issued: 08/02/2022
• Est. Priority Date: 01/21/2005
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Dua, Robin
• Primary Examiner(s): Nilforoush, Mohammad A.
• Assistant Examiner(s): Getachew, Wodajo
• Application Number:
  US14/564,034
• Publication Number:
  US 20150095235A1
• Time in Patent Office: 2,794 Days
• Field of Search: 705 76
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06K 7/10415 the interrogation device being fixed in its position, such as an access control device for reading wireless access cards, or a wireless ATM banking machines in general G07F19/00
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 : using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 : of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

An apparatus, system and methodology for conducting financial and other transactions using a wireless device are provided. A computing device includes a memory device that has stored therein a wallet application for completing transactions based on wireless data communications between the computing device and an external electronic device. The memory device further stores an electronic credential. The computing device includes a wireless transceiver configured to wirelessly communicate with the external electronic device. The computing device further includes a biometric characteristic reader for reading a biometric characteristic of a user. The computing device wirelessly transmits the electronic credential to the external electronic device based on comparing the biometric characteristic of the user with stored biometric information to initiate a transaction with the external electronic device.

Claims

1. A computing device comprising:

a display screen;

at least one wireless transceiver that wirelessly communicates with at least one external electronic device;

a biometric characteristic reader that reads a biometric characteristic of a user;

one or more processors; and

at least one memory device having stored therein;

a plurality of electronic credentials linking to personal information and account number of the user,

biometric information of the user, and

a plurality of applications that are executed by the one or more processors, the plurality of applications including at least one wallet application comprising a plurality of extensions, where the at least one wallet application, when executed by the one or more processors, causes the computing device to perform operations of;

receiving a reader key of an electronic credential from the at least one external electronic device,

receiving, from the biometric characteristic reader, the biometric characteristic of the user,

performing an authentication by comparing the biometric characteristic of the user to the stored biometric information of the user,

in response to the authentication being successful based on a result of the comparison, selecting the electronic credential from the stored plurality of electronic credentials using the reader key,

executing an extension, among the plurality of extensions, using an extension identifier associated with the selected electronic credential, and

wirelessly transmitting the electronic credential to the at least one external electronic device using the extension.

2. The computing device of claim 1, wherein the biometric characteristic reader reads a fingerprint of the user.

3. The computing device of claim 1, wherein the at least one memory device includes a secure storage that stores the plurality of electronic credentials.

4. The computing device of claim 1, wherein the computing device downloads the plurality of electronic credentials wirelessly from a credential issuing server via a data network and stores the plurality of electronic credentials in the at least one memory device.

5. The computing device of claim 1, wherein the plurality of electronic credentials link to one or more of data associated with a credit card account, a debit card account, a stored value card account, an automated teller machine card account, a bank account, a payment token card account, a membership card account, a loyalty card account, an access card account, an identification card account, a driver'"'"'s license, an e-ticket, a pass, a coupon, or a certificate.

6. The computing device of claim 1, wherein the one or more processors store the plurality of electronic credentials in the at least one memory device in a format that marks but links to a user'"'"'s payment account number and that includes a same number as a bank identification number (BIN) associated with at least one of a payment card issuer or a payment network.

7. The computing device of claim 1, wherein the biometric characteristic reader reads the biometric characteristic of the user based on a launching of the wallet application.

8. The computing device of claim 7,

wherein the computing device provides a prompt to the user to input data via the biometric characteristic reader based on the launching of the wallet application, and

wherein the biometric characteristic reader becomes operable to read the biometric characteristic of the user after providing the prompt.

9. The computing device of claim 1, wherein the computing device provides at least one of a tone or a visual message on the display screen to confirm performance of a transaction with the at least one external electronic device.

10. The computing device of claim 1, wherein the computing device wirelessly communicates with the at least one external electronic device by accessing a data network via the wireless transceiver.

11. The computing device of claim 10, wherein the computing device wirelessly communicates with the at least one external electronic device by accessing an Internet as a form of the data network.

12. The computing device of claim 1, wherein the computing device receives from a merchant system a response message indicating one of approval or rejection of a transaction.

13. The computing device of claim 1, wherein the at least one wallet application further causes the one or more processors to transmit to the at least one external electronic device a transaction authorization request message including one or more of billing information or shipping information in a format readable by the at least one external electronic device.

14. The computing device of claim 1, wherein the at least one wireless transceiver includes one or more of a network transceiver that communicates with a cellular communications network, a short-range radio frequency (RF) transceiver to communicate with an external RF device, a near-field communication (NFC) module, or an infra-red transceiver.

15. The computing device of claim 1,

wherein the at least one wireless transceiver includes a near-field communication (NFC) module including an NFC antenna, and

wherein the NFC module transmits the electronic credential to an NFC reader of the at least one external electronic device to initiate a transaction with a merchant system based on the NFC antenna of the computing device being within an RF range of the NFC reader.

16. A method comprising:

storing, by at least one processor of a computing device in at least one memory device of the computing device, a plurality of electronic credentials that link to personal information and an account number of a user, biometric information of the user, and a plurality of applications, the plurality of applications including a wallet application comprising a plurality of extensions;

storing, by the at least one processor of the computing device, biometric characteristics in the at least one memory device of the computing device;

communicating wirelessly, by at least one wireless transceiver of the computing device, with at least one external electronic device;

receiving, by the at least one wireless transceiver from the at least one external electronic device, a reader key of an electronic credential;

reading, by a biometric characteristic reader of the computing device, a biometric characteristic of the user;

performing an authentication by comparing, by the at least one processor of the computing device using the wallet application, the read biometric characteristic of the user with the stored biometric information;

in response to the authentication being successful based on a result of the comparison, selecting, by the at least one processor of the computing device using the wallet application, the electronic credential from the stored plurality of electronic credentials using the reader key;

executing, by the at least one processor of the computing device using the wallet application, an extension, among the plurality of extensions, using an extension identifier associated with the selected electronic credential; and

transmitting, by the at least one wireless transceiver of the computing device using the wallet application, the electronic credential to the at least one external electronic device using the extension.

17. The method of claim 16, wherein the biometric characteristic being read is a fingerprint of the user.

18. The method of claim 16, wherein the electronic credential is stored in a secure storage of the at least one memory device.

19. The method of claim 16, further comprising:

wirelessly downloading, by the at least one wireless transceiver of the computing device, the electronic credential from a credential issuing server via a data network; and

storing the electronic credential in the at least one memory device.

20. The method of claim 16, wherein the electronic credential is linked to one or more of data associated with a credit card account, a debit card account, a stored value card account, an automated teller machine card account, a bank account, a payment token card account, a membership card account, a loyalty card account, an access card account, an identification card account, a driver'"'"'s license, an e-ticket, a pass, a coupon, or a certificate.

21. The method of claim 16, wherein the electronic credential links to a user'"'"'s payment account and includes a same number as a bank identification number (BIN) associated with at least one of a payment card issuer or a payment network.

22. The method of claim 16, further comprising:

launching, by the at least one wireless transceiver of the computing device, the wallet application to initiate a transaction; and

reading, by the biometric characteristic reader of the computing device, the biometric characteristic of the user based on launching the wallet application.

23. The method of claim 22, further comprising:

generating, by the at least one wireless transceiver of the computing device, a prompt that requests the user to provide an input to the biometric characteristic reader based on launching the wallet application; and

reading, by the biometric characteristic reader of the computing device, the biometric characteristic of the user based on a detection of a response to the prompt.

24. The method of claim 16, further comprising providing, by the at least one wireless transceiver of the computing device, at least one of a tone or a visual message on a display screen to confirm performance of a transaction.

25. The method of claim 16, further comprising wirelessly communicating, by the at least one wireless transceiver of the computing device, with the at least one external electronic device by accessing a data network.

26. The method of claim 25, further comprising wirelessly communicating, by the at least one wireless transceiver of the computing device, with the at least one external electronic device by accessing an Internet as a form of the data network.

27. The method of claim 16, further comprising receiving, by the at least one processor of the computing device from a merchant system, a response message indicating one of approval or rejection of a transaction.

28. The method of claim 16, further comprising:

transmitting, by the wallet application from the computing device to a merchant system, a transaction authorization request message including billing information and shipping information in a format readable by the merchant system.

29. The method of claim 16, wherein the at least one wireless transceiver includes at least one of a network transceiver that communicates with a cellular communications network, a short-range radio frequency (RF) transceiver that communicates with an external short-range RF device, a near-field communication (NFC) module, or an infra-red transceiver.

30. The method of claim 16, further comprising:

transmitting, by a near-field communication (NFC) module via an NFC antenna, the electronic credential to an NFC reader of an external electronic device to initiate a transaction with a merchant system based on the NFC antenna of the computing device being within an RF range of the NFC reader.

31. The method of claim 16, further comprising:

displaying, by a display screen of the computing device, transaction information corresponding to a transaction between the computing device and the at least one external electronic device; and

reading, by the biometric characteristic reader of the computing device, the biometric information of the user based on the displaying of the transaction information.