Tokenless biometric electronic financial transactions via a third party identicator

• US 20010000535A1
• Filed: 12/06/2000
• Published: 04/26/2001
• Est. Priority Date: 11/28/1994
• Status: Active Grant

• Current Assignee: YT Acquisition Corp.
• Original Assignee: Indivos Corporation A Wholly Owned Subsidiary of Solidus Networks Incorporated
• Inventors: Hoffman, Ned, Lapsley, Philip D., Lee, Jonathan Alexander, Pare, David Ferrin Jr.
• Granted Patent: US 6,950,810 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G01F 19/005 for semi-liquid, e.g. fat
• CPC Class Codes: G06F 18/28 Determining representative reference patterns, e.g. by averaging or distorting; Generating dictionaries
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G06Q 20/4097 : using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 : Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 40/00 : Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06V 10/772 : Determining representative reference patterns, e.g. averaging or distorting patterns; Generating dictionaries
• CPC Class Codes: G06V 40/1365 : Matching; Classification
• CPC Class Codes: G07C 9/32 : in combination with an identity check
• CPC Class Codes: G07C 9/37 : using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07F 19/201 : Accessories of ATMs
• CPC Class Codes: G07F 19/207 : Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 9/002 : Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity

Abstract

The invention provides a method and device for tokenless authorization of an electronic payment between a payor and a payee using an electronic third party identicator and at least one payor bid biometric sample. In a payor registration step, the payor registers with an electronic third party identicator at least one registration biometric sample, and at least one payor financial account identifier. The payee registers a payee identification data with the electronic third party identicator. A payee bid identification data and a payor bid biometric sample collected from the payor'"'"'s person are electronically forwarded to the third party electronic identicator. A comparator engine compares the bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor. The comparator engine also compares the payee'"'"'s bid identification data with a payee'"'"'s registered identification data for producing either a successful or failed identification of the payee. Once the electronic third-party identicator successfully identifies the payor and payee, the identicator electronically forwards at least one payor financial account identifier to the payee. An electronic financial transaction is then formed between the payor and payee, comprising a transaction amount and a payor financial account identifier. This transaction is then electronically forwarded to a financial transaction processor for authorization.

Claims

1. A method for tokenless authorization of an electronic payment between a payor and a payee using an electronic third party identicator and at least one payor bid biometric sample, said method comprising the steps of:

a payor registration step, wherein the payor registers with an electronic third party identicator at least one registration biometric sample, and at least one payor financial account identifier;

a payee registration step, wherein the payee registers a payee identification data with the electronic third party identicator;

a payor biometric sample collection step, wherein at least one payor bid biometric sample is obtained from the payor'"'"'s person;

at least one transmission step, wherein the payor bid biometric sample and bid payee identification data are electronically forwarded to the third-party electronic identicator;

a payor identification step, wherein the electronic third party identicator compares the payor bid biometric sample with at least one registered biometric sample for producing either a successful or failed identification of the payor;

a payee identification step, wherein the electronic third party identicator compares the payee'"'"'s bid identification data with registered payee identification data for producing either a successful or failed identification of the payee;

an identification response step, wherein upon successful identification of the payor and payee, the electronic third-party identicator electronically forwards at least one payor financial account identifier to the payee;

a transaction execution step, wherein an electronic financial transaction is formed between the payor and the payee, comprising a transaction amount and a payor financial account identifier, and the financial transaction is electronically forwarded to a financial transaction processor for authorization;

wherein upon successful identification of the payor and payee and authorization of the financial transaction by the financial transaction processor, a biometric-based authorization of an electronic payment is given to transfer funds from the payor'"'"'s financial account to a payee'"'"'s financial account.

2. The method of

claim 1

, wherein the electronic forwarding of at least one payor financial account identifier to the payee comprises the electronic forwarding of at least one payor financial account identifier to payee point of sale equipment.

3. The method of

claim 1

, wherein the electronic forwarding of at least one payor financial account identifier to the payee comprises the electronic forwarding of at least one payor financial account identifier to payee party identification apparatus.

4. The method of

claim 1

, further comprising selecting by the payor the type of financial account to be debited.

5. The method of

claim 4

, wherein the type of financial account is selected from a list comprising:

credit, debit, stored value.

6. The method of

claim 1

wherein the transaction execution step further comprises an intermediate forwarding step, wherein the financial transaction is forwarded to intermediate point-of-sale equipment before being forwarded to the financial transaction processor for execution.

7. The method of

claim 1

further comprising an approval step wherein the transaction amount is displayed to the payor, and the payor indicates acceptance of the transaction before the transaction is forwarded to the financial transaction processor.

8. The method of

claim 1

wherein the payee identification data comprises any one of the following:

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

9. The method of

claim 1

wherein the payor registration step further comprises registering a non-unique payor personal identification number with the electronic third party identicator, which is used by the electronic third party identicator to assist in identification of the payor.

10. The method of

claim 1

further comprising a payor account selection step, wherein after the payor has been successfully identified in the payor identification step and at least one payor financial account identifier has been forwarded to the payee in the identification response step, the payor selects one of the financial accounts for debiting.

11. The method of

claim 1

further comprising a transaction payment step, wherein the transaction amount is debited from a payor'"'"'s financial account.

12. The method of

claim 11

, wherein the transaction amount is credited to the payee'"'"'s financial account.

13. The method of

claim 1

further comprising a payor re-registration step, wherein the user'"'"'s registration biometric samples are compared against previously designated biometric samples wherein if a match occurs, the electronic third-party identicator is alerted to the fact that the payor has re-registered.

14. The method of

claim 1

wherein the biometric sample comprises of one of the following:

a fingerprint, a facial scan, a retinal image, an iris scan, and a voice print.

15. The method of

claim 9

further comprising a biometric theft resolution step, wherein the payor'"'"'s personal identification number is changed whenever the payor'"'"'s biometric sample is determined to have been fraudulently duplicated.

16. A tokenless electronic payment authorization device for transferring funds from a payor financial account to a payee financial account, said device comprising:

a computer data processing center further comprising one or more data bases wherein the payor registers a registration biometric sample associated with at least one payor financial account identifier and the payee registers a payee identification data;

a party identification apparatus (PIA) having a biometric sensor for input of a biometric sample;

communication lines for transmission of a registration and bid biometric sample obtained by the party identification apparatus from the payor'"'"'s person to the data processing center; and

a comparator engine for comparing a bid biometric sample to at least one registration biometric sample, and comparing a bid payee identification data with at least one registration payee identification data;

the system being arranged so that the biometric sample is sent together with payee identification data to the comparator engine and a message containing the payor'"'"'s financial account identifier(s) is sent to the PIA if the bid and registration payee data match and if the bid and registration payor biometric samples match.

17. The authorization device of

claim 16

, wherein no man-made memory device such as a credit/debit card, smartcard or a paper check is used by the payor to conduct the financial transaction.

18. The authorization device of

claim 16

wherein the payee identification data comprises any one of the following:

a payee hardware ID code, a payee telephone number, a payee email address, a payee digital certificate code, a payee account index, a payee financial account number, a payee biometric, and a payee biometric and PIN combination.

19. The authorization device of

claim 16

wherein the payor registration biometric sample is associated with a PIN, the PIN used by the authorization device for identification the payor.

20. The authorization device of

claim 16

, including means coupled to the party identification apparatus for receiving the message and transmitting the payor financial account identifier and a transaction amount to a financial transaction processor to authorize a payment from the payor'"'"'s financial account to the payee.

21. The authorization device of

claim 16

further comprising an account selector module, wherein after the payor has been successfully identified, the authorization device presents at least one financial account which was registered by the payor with the authorization device for selection of one of the financial accounts by the payor for debiting.

22. The authorization device of

claim 16

including an execution module which debits the transaction amount from a payor'"'"'s selected financial account.

23. The authorization device of

claim 22

, wherein the execution module credits the transaction amount to the payee'"'"'s financial account.

24. The authorization device of

claim 16

further comprising a transaction processor wherein the payor registers a private code with the authorization device, which is distinct from a personal identification number and not used to identify the payor, wherein the private code is displayed to the payor to validate that the authentic authorization device has processed the financial transaction.

25. The authorization device of

claim 16

wherein a subset of the payor registration biometric samples are stored in a payor re-registration database to which the comparator engine compares a payor'"'"'s registration biometric samples and if a match occurs, alerts the authorization system to the fact that the payor has re-registered with the tokenless payment authorization system.