Biometrics for radio frequency payment transactions

• US 7,506,818 B2
• Filed: 09/07/2007
• Issued: 03/24/2009
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Montgomery, Joshua L, Gray, William J, Bonalle, David S, Larkin, Carl, Beenau, Blayn W, Saunders, Peter D, Fields, Seth W
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/851,533
• Publication Number:
  US 20070299783A1
• Time in Patent Office: 564 Days
• Field of Search: 235/487, 235/492, 235/375, 235/380, 235/382, 340/572.1, 340/5.52, 340/5.6
• US Class Current: 235/487
• CPC Class Codes: G06F 16/381 using identifiers, e.g. barcodes, RFIDs for URLs G06F16/9554
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07345 by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 : Biometric identity checks
• CPC Class Codes: G07C 2009/00984 : fob
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/025 : by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

The present invention discloses a system and methods for biometric security using multiple biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. In yet another embodiment, the present invention discloses methods for proffering and processing multiple biometric samples to facilitate authorization of transactions.

Claims

1. A Radio Frequency (RF) customer payment device comprising:

an RF transponder configured to receive a customer payment device authentication code from an RF Identification (RFID) reader;

a database comprising a unique customer payment device identification code, a unique customer payment device encryption key corresponding to the unique customer payment device identification code, and a customer payment device account code;

a biometric sensor configured to detect a proffered biometric sample to create biometric sample data; and

a customer payment device authentication circuit to communicate with the database, wherein the customer payment device authentication circuit is configured to use the unique customer payment device encryption key to encrypt the customer payment device authentication code and is configured to use the unique customer payment device encryption key to encrypt the customer payment device account code;

wherein the RF transponder is configured to transmit at least one of the encrypted customer payment device authentication code or the encrypted customer payment device account code to the RFID reader, and wherein the customer payment device authentication circuit is configured to be enabled in response to the biometric sample data matching authenticated biometric sample data.

2. The RF customer payment device of claim 1, further comprising a second RF transponder.

3. The RF customer payment device of claim 2, wherein at least one of the RF transponder or the second RF transponder is configured to transmit an RFID reader authentication code to the RFID reader and receive an encrypted RFID reader authentication code from the RFID reader.

4. The RF customer payment device of claim 3, further comprising an RFID reader decryption key, wherein the customer payment device authentication circuit is configured to use the RFID reader decryption key to decrypt the encrypted RFID reader authentication code received from the RFID reader to authenticate the RFID reader.

5. The RF customer payment device of claim 4, wherein the unique customer payment device identification code comprises a personalized unique customer payment device identification code, wherein the unique customer device encryption key comprises a personalized unique customer payment device encryption key, wherein the customer payment device account code comprises a personalized customer payment device account code, and wherein the RFID reader decryption key comprises a personalized RFID reader decryption key.

6. The RF customer payment device of claim 2, further comprising a protocol/sequence controller configured to communicate with the customer payment device authentication circuit and at least one of the RF transponder or the second RF transponder via a modulator/demodulator.

7. The RF customer payment device of claim 1, further comprising a Universal Serial Bus (USB) interface configured to communicate at least one of the encrypted customer payment device account code or the encrypted customer payment device authentication code to the RFID reader.

8. The RF customer payment device of claim 7, wherein the USB interface is further configured to personalize the RF customer payment device in association with a personalization system.

9. The RF customer payment device of claim 1, wherein the customer payment device account code comprises a unique account number in a magnetic stripe format.

10. The RF customer payment device of claim 2, further comprising an enable/disable switch configured to enable/disable at least one of the RF transponder or the second RF transponder.

11. The RF customer payment device of claim 1, wherein the proffered biometric sample comprises a biometric sample characteristic including at least one of:

minutia, vascular patterns, prints, waveforms, odorants, nodal points, reference points, size, shape, thermal patterns, blood flow, or body heat.

12. The RF customer payment device of claim 1, wherein the biometric sensor includes at least one of:

a retinal scan sensor, an iris scan sensor, a fingerprint sensor, a hand print sensor, a hand geometry sensor, a voice print sensor, a vascular sensor, a facial sensor, an ear sensor, a signature sensor, a keystroke sensor, an olfactory sensor, an auditory emissions sensor, or a DNA sensor.

13. The RF customer payment device of claim 1, wherein the RF customer payment device is an RF payment fob.

14. A Radio Frequency Identification (RFID) reader comprising:

a Radio Frequency (RF) transponder configured to receive a unique customer payment device identification code, an encrypted customer payment device account code, and biometric sample data from an RF customer payment device;

a database comprising authenticated biometric sample data and a plurality of customer payment device-specific decryption keys; and

an RFID authentication circuit to communicate with the database, decrypt the encrypted customer payment device account code using a unique customer payment device decryption key selected from the plurality of customer payment device-specific decryption keys, and compare the biometric sample data to the authenticated biometric sample data to authenticate the RF customer payment device.

15. The RFID reader of claim 14, wherein the RF transponder is further configured to receive an encrypted customer payment device authentication code from the RF customer payment device and authenticate the RF customer payment device by decrypting the encrypted customer payment device authentication code using the unique customer payment device decryption key.

16. The RFID reader of claim 15, further comprising a USB interface to communicate with the RF customer payment device and personalize at least one of the RF customer payment device or the RFID reader.

17. The RFID reader of claim 14, wherein the decrypted customer payment device account code comprises a customer payment device account number in a magnetic stripe format configured to be transmitted to a Point of Sale (POS) device and processed under a merchant'"'"'s business as usual standard.

18. The RFID reader of claim 17, wherein the customer payment device account number is in an ISO/IEC 7813 magnetic stripe format.

19. The RFID reader of claim 14, further comprising an RFID reader PIN interface configured to receive a secondary verification.

20. The RFID reader of claim 14, further comprising an RF antenna configured to operate at least one of approximately a 13.56 MHz frequency or a 134 kHz frequency.

21. The RFID reader of claim 14, wherein the biometric sample data comprises a biometric sample characteristic including at least one of:

minutia, vascular patterns, prints, waveforms, odorants, nodal points, reference points, size, shape, thermal patterns, blood flow or body heat.

22. A method for utilizing a Radio Frequency (RF) customer payment device comprising a transponder and a biometric security device to facilitate an RF payment transaction, the method comprising:

verifying a proffered biometric sample detected at a biometric sensor to create verified biometric sample data;

activating a transponder system authentication circuit in response to at least one of an RF interrogation signal from an RF Identification (RFID) reader or the verified biometric sample data;

encrypting, at the transponder system authentication circuit, a customer payment device authentication code with a unique encryption key;

transmitting the encrypted customer payment device authentication code and a unique customer payment device identification code to the RFID reader;

transmitting an RFID reader authentication code to the RFID reader;

decrypting an encrypted RFID reader authentication code received from the RFID reader using a transponder decryption key; and

authenticating the RFID reader and transmitting RF customer payment device account data to the RIFD reader in response to the decrypted RFID reader authentication code matching the RFID reader authentication code, and in response to verified biometric sample data matching authenticated biometric sample data.

23. The method of claim 22, wherein the RF customer payment device comprises a second transponder to communicate with the RFID reader.

24. The method of claim 22, wherein the proffered biometric sample comprises a biometric sample characteristic including at least one of:

minutia, vascular patterns, prints, waveforms, odorants, nodal points, reference points, size, shape, thermal patterns, blood flow, or body heat.

25. The method of claim 22, wherein the biometric sensor includes at least one of:

a retinal scan sensor, an iris scan sensor, a fingerprint sensor, a hand print sensor, a hand geometry sensor, a voice print sensor, a vascular sensor, a facial sensor, an ear sensor, a signature sensor, a keystroke sensor, an olfactory sensor, an auditory emissions sensor, or a DNA sensor.

26. A method for facilitating an RF payment transaction using an RFID reader, comprising:

transmitting a customer payment device authentication code to an RF customer payment device;

receiving an encrypted customer payment device authentication code, biometric sample data, and a unique customer payment device identification code from the RF customer payment device;

decrypting the encrypted customer payment device authentication code using a unique customer payment device decryption key corresponding to the unique customer payment device authentication code;

authenticating the RF customer payment device in response to the biometric sample data matching authenticated biometric sample data and in response to the decrypted customer payment device authentication code matching the customer payment device authentication code;

receiving an encrypted customer payment device account code from the RF customer payment device;

decrypting the encrypted customer payment device account code using the unique customer payment device decryption key; and

transmitting the decrypted customer payment device account code for payment processing.

27. The method of claim 26, further comprising:

receiving an RFID reader authentication code from the RF customer payment device;

encrypting the RFID reader authentication code using an RFID reader encryption key; and

transmitting the encrypted RFID reader authentication code to the RF customer payment device for authentication of the RFID reader.

28. The method of claim 26, wherein the biometric sample data comprises a biometric sample characteristic including at least one of:

minutia, vascular patterns, prints, waveforms, odorants, nodal points, reference points, size, shape, thermal patterns, blood flow or body heat.