System for biometric security using a FOB

• US 7,303,120 B2
• Filed: 03/26/2004
• Issued: 12/04/2007
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Larkin, Carl, Gray, William J., Fields, Seth W., Bonalle, David S., Beenau, Blayn W., Saunders, Peter D., Montgomery, Joshua L.
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US10/708,822
• Publication Number:
  US 20040232220A1
• Time in Patent Office: 1,348 Days
• Field of Search: 235/380, 235/492, 235/487, 340/572.1, 340/5.4, 340/10.1, 340/5.6, 340/5.52, 340/5.82
• US Class Current: 235/380
• CPC Class Codes: G01D 21/00 Measuring or testing not otherwise provided for
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0215 : Including financial accounts
• CPC Class Codes: G07C 9/247 : electronically, e.g. by comparing signal of hand-writing with a reference signal from the pass
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 : with central registration
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 : for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

The present invention discloses a system and methods for biometric security using biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. The device for verifying samples compares the biometric samples with information stored on databases.

Claims

1. A transponder-reader transaction system configured with a biometric security device, said system comprising:

a first transponder responsive to a first RF interrogation signal from a reader;

a second transponder physically in a same fob as, and associated with, said first transponder and responsive to a second RF interrogation signal, said first RF interrogation signal responding to distinct frequencies from said second RF interrogation signal;

a transponder system authentication circuit in communication with at least one of said first transponder and said second transponder, said transponder system authentication circuit configured to authenticate at least one of said first RF interrogation signal and said second RF interrogation signal;

said biometric security device comprising a biometric sensor configured to detect a proffered biometric sample, said biometric sensor is configured to communicate with said system; and

, a verification device configured to verify said proffered biometric sample to selectively activate one of said first and second transponders to facilitate a payment transaction;

wherein said system is configured to determine whether a user requested transaction exceeds a preloaded value defined by a preloaded value data file associated with a transponder;

determine whether said transaction exceeds a combination of said preloaded value and a reload value defined by a reload protocol data file associated with said transponder, wherein said preloaded value data file and said reload protocol data file define predetermined values for use in satisfying a user transaction request;

notify a user to proffer a biometric sample to authorize use of said combination of said preloaded value and said reload value to complete said transaction;

detect a proffered biometric sample at a sensor communicating with said system;

verify said proffered biometric sample; and

authorize said transaction to proceed by applying said preloaded value from a first funding source associated with said transponder and applying a portion of said reload value from one of said first funding source and a second funding source according to said reload protocol data file.

2. The transponder-reader transaction system of claim 1, wherein said biometric sensor is configured to communicate with said transponder-reader transaction system via one of said first transponder, said second transponder, said reader, and a network.

3. The transponder-reader transaction system of claim 1, wherein said biometric sensor is configured as a switch configured to place said first and second transponders in at least one of a selectivity mode and an inclusivity mode, wherein said selectivity mode includes enabling purchase of an item using a selected account number and inclusivity mode includes said first and second transponders in an operational mode permitting said first and second transponders to be responsive to RF interrogation and interrogation via USB connector.

4. The transponder-reader transaction system of claim 1, wherein said biometric sensor is located on said fob and said biometric sensor is configured to store log data within said fob, said log data comprising one of a detected biometric sample, a processed biometric sample and a stored biometric sample, and wherein said biometric sensor is further configured to employ a security procedure when said proffered biometric sample differs from said log data.

5. The transponder-reader transaction system of claim 1, further including a database configured to store a data packet, wherein said data packet includes at least one of proffered and registered biometric samples, proffered and registered user information, terrorist information, and criminal information, wherein said database is contained in at least one of said first transponder, said second transponder, said reader, said biometric sensor, a remote server, a merchant server and said transponder-reader system.

6. The transponder-reader transaction system of claim 1, further including a comparison device configured to compare said proffered biometric sample with a stored biometric sample, wherein said stored biometric sample comprises a registered biometric sample, wherein said registered biometric sample is associated with personal information, credit card information, debit card information, savings account information, and loyalty point information.

7. The transponder-reader transaction system of claim 6, wherein each of said registered biometric samples from the same person is associated with a different one of:

personal information, credit card information, debit card information, savings account information, and loyalty point information.

8. The transponder-reader transaction system of claim 6, wherein said biometric sample includes a first biometric sample and a second biometric sample, wherein said first biometric sample and said second biometric sample is from the same person, said first biometric sample primarily accesses first account information, wherein said first account information comprises at least one of personal information, credit card information, debit card information, savings account information, and loyalty point information, and wherein said second biometric sample accesses second account information, wherein said second account information comprises at least one of personal information, credit card information, debit card information, savings account information, and loyalty point information.

9. The transponder-reader transaction system of claim 1, wherein said biometric sample includes a first biometric sample and a second biometric sample, wherein said first biometric sample and said second biometric sample is from the same person, said first transponder configured activate upon verification of said first biometric sample and said second transponder configured to activate upon verification of said second biometric sample.

10. The transponder-reader transaction system of claim 1, wherein said verification device is configured to facilitate the use of a secondary security procedure, which includes sending a signal to notify that the proposed transaction would violate at least one of said preset transaction limitation and an established rule for said activated transponder, wherein said preset transaction limitation comprises at least one of a maximum transaction amount, minimum transaction amount, maximum number of transactions within a time period, maximum number of transactions, use by certain merchants, temporal limitation, geographic limitation, and use of non-monetary funds.

11. The transponder-reader transaction system of claim 1, further comprising said reader configured to provide a first radio frequency (RF) interrogation signal for powering a transponder system, to receive a transponder system RF signal, and to communicate transponder system account data related to said transponder system RF signal to a merchant system, said reader including, a first interrogator for providing said first RF interrogation signal;

said transponder system authentication circuit comprising a reader authentication circuit in communication with said first interrogator for authenticating said transponder system RF signal;

an RFID reader database for storing RFID reader data, said reader database in communication with said reader authentication circuit;

an RFID reader protocol/sequence controller in communication with at least one of said first interrogator, said reader authentication circuit, and said reader database, said reader protocol/sequence controller configured to facilitate control of an order of operation of said first interrogator, said reader authentication circuit, and said reader database; and

an RFID reader communications interface configured to communicate with said merchant system, said reader communications interface configured to provide said transponder system account data, wherein said transponder system is configured to receive said first RF interrogation signal, to authenticate said first RF interrogation signal, and to transmit said transponder system account data, said transponder system further comprising;

a first transponder responsive to said first RF interrogation signal;

a transponder system authentication circuit in communication with said first transponder, said transponder system authentication circuit configured to authenticate said first RF interrogation signal;

a transponder system database for storing said transponder system account data, said transponder system database in communication with said transponder system authentication circuit; and

a transponder system protocol/sequence controller in communication with at least one of said first transponder, said transponder system authentication circuit, and said transponder system database, said transponder system protocol/sequence controller configured to control the order of operation of said first transponder, said transponder system authentication circuit, and said transponder system database, wherein said transponder system protocol/sequence controller is configured to activate said transponder system authentication circuit in response to said first RF interrogation signal having an RFID reader authentication code, said transponder system authentication circuit configured to encrypt said reader authentication code to provide an encrypted RFID reader authentication code, said transponder system authentication circuit configured to provide said encrypted RFID reader authentication code to said first transponder for providing to said reader, wherein said reader is configured to receive said encrypted RFID reader authentication code, and wherein said reader protocol/sequence controller is configured to activate said reader authentication circuit in response to said encrypted RFID reader authentication code, wherein said reader database is configured to provide a transponder system decryption security key to said reader authentication circuit in response to said encrypted RFID reader authentication code, said transponder system decryption security key for use in decrypting said encrypted RFID reader authentication code to form a decrypted RFID reader authentication code, said transponder system decryption security key provided to said reader based on an unique transponder identification code, wherein said reader authentication circuit is configured to compare said decrypted RFID reader authentication code and said reader authentication code to determine whether a match exists, and wherein said reader protocol/sequence controller is configured to activate said reader communications interface where said reader authentication circuit matches said decrypted RFID reader authentication code and said reader authentication code.

12. The transponder-reader transaction system according to claim 11, wherein said transponder system protocol/sequence controller activates said transponder system authentication circuit in response to said first RF interrogation signal, wherein said transponder system authentication circuit is configured to provide a transponder authentication code to said first transponder for providing to said reader.

13. The transponder-reader transaction system according to claim 12, wherein said reader authentication circuit is configured to receive said transponder authentication code, said reader protocol/sequence controller activating said reader authentication circuit in response to said transponder authentication code, said reader authentication circuit configured to encrypt said transponder authentication code to form an encrypted transponder authentication code, wherein said reader is configured to provide said encrypted transponder authentication code to said transponder system.

14. The transponder-reader transaction system according to claim 13, wherein said transponder system database is configured to store at least one of a transponder system identification data and an RFID reader decryption security key, and wherein said transponder system database is configured to provide said reader decryption security key to said transponder system authentication circuit in response to said encrypted transponder authentication code, said reader decryption security key for use in decrypting said encrypted transponder authentication code to form a decrypted transponder authentication code.

15. The transponder-reader transaction system according to claim 14, wherein said transponder system authentication circuit is configured to compare said decrypted transponder authentication code and said transponder authentication code to determine whether a match exists.

16. The transponder-reader transaction system according to claim 15, wherein said transponder system account data is in magnetic stripe format.

17. The transponder-reader transaction system according to claim 16, wherein said transponder system account data is encrypted as a pre-encrypted transponder system account data, wherein said transponder system database is configured to provide said pre-encrypted transponder system account data to said reader when said transponder system authentication circuit matches said decrypted transponder authentication code and said transponder authentication code.

18. The transponder-reader transaction system according to claim 17, wherein said reader communications interface is configured to provide a transponder system PIN and said pre-encrypted transponder system account data when said transponder authentication code matches said decrypted transponder authentication code, and said decrypted RFID reader authentication code matches said reader authentication code.

19. The transponder-reader transaction system of claim 1, wherein said system is further configured to update said preloaded value data file according to said reload protocol data file.

20. The transponder-reader transaction system of claim 1, wherein said system is further configured to provide a transponder system identifier and update reload indicia to a user interface to obtain user authorization prior to reloading said preloaded value.

21. The transponder-reader transaction system of claim 1, wherein said system is further configured to provide incentives to a transponder user based on said reloading of said preloaded value.

22. The transponder-reader transaction system of claim 1, wherein said system is further configured to provide a transponder system identifier to an issuer system server and providing in real-time an update reload protocol to said issuer system server for reloading the preloaded value in real-time according to said reload protocol.