Biometric security using a fob

• US 7,506,819 B2
• Filed: 09/21/2007
• Issued: 03/24/2009
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Saunders, Peter D, Larkin, Carl, Fields, Seth W, Beenau, Blayn W, Gray, William J, Montgomery, Joshua L, Bonalle, David S
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US11/858,958
• Publication Number:
  US 20080008359A1
• Time in Patent Office: 550 Days
• Field of Search: 235/487, 235/492, 235/493, 235/380, 340/5.52, 340/10.1, 340/572.1, 705/41, 705/64, 705/16, 705/65, 902 2- 4, 902/8
• US Class Current: 235/487
• CPC Class Codes: G01D 21/00 Measuring or testing not otherwise provided for
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0215 : Including financial accounts
• CPC Class Codes: G07C 9/247 : electronically, e.g. by comparing signal of hand-writing with a reference signal from the pass
• CPC Class Codes: G07C 9/257 : electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 : using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 : with central registration
• CPC Class Codes: G07C 9/28 : the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 : the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 : for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 : Terminal devices

Abstract

The present invention discloses a system and methods for biometric security using biometrics in a transponder-reader system. The biometric security system also includes a biometric sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a biometric sensor. In another embodiment, the system includes a reader configured with a biometric sensor. The device for verifying samples compares the biometric samples with information stored on databases.

Claims

1. A Radio Frequency (RF) customer payment device comprising:

an RF transponder configured to receive a customer payment device authentication code from an RF Identification (RFID) reader;

a database comprising a unique customer payment device identification code, a unique customer payment device encryption key corresponding to the unique customer payment device identification code, and a customer payment device account code;

a retinal scan sensor configured to detect a retinal sample to create retinal scan sample data; and

a customer payment device authentication circuit to communicate with the database, wherein the customer payment device authentication circuit is configured to use the unique customer payment device encryption key to encrypt the customer payment device authentication code and to use the unique customer payment device encryption key to encrypt the customer payment device account code;

wherein the RF transponder is configured to transmit at least one of the encrypted customer payment device authentication code or the encrypted customer payment device account code to the RFID reader, and wherein the customer payment device authentication circuit is configured to be enabled in response to the retinal scan sample data matching authenticated retinal scan sample data.

2. The RF customer payment device of claim 1, further comprising:

a second RF transponder, wherein at least one of the RF transponder or the second RF transponder is configured to transmit an RFID reader authentication code to the RFID reader and receive an encrypted RFID reader authentication code from the RFID reader;

a protocol/sequence controller to communicate with the customer payment device authentication circuit and at least one of the RF transponder or the second RF transponder via a modulator/demodulator; and

an enable/disable switch configured to enable/disable at least one of the RF transponder or the second RF transponder.

3. The RF customer payment device of claim 2, further comprising:

an RFID reader decryption key, wherein the customer payment device authentication circuit is configured to use the RFID reader decryption key to decrypt the encrypted RFID reader authentication code received from the RFID reader to authenticate the RFID reader;

wherein the unique customer payment device identification code comprises a personalized unique customer payment device identification code, wherein the unique customer payment device encryption key comprises a personalized unique customer payment device encryption key, wherein the customer payment device account code comprises a personalized customer payment device account code, and wherein the RFID reader decryption key comprises a personalized RFID reader decryption key.

4. The RF customer payment device of claim 1, further comprising a Universal Serial Bus (USB) interface to:

communicate with at least one of the encrypted customer payment device account code or the encrypted customer payment device authentication code to the RFID reader; and

personalize the RF customer payment device in association with a personalization system.

5. The RF customer payment device of claim 1, wherein the customer payment device account code comprises a unique account number in a magnetic stripe format.

6. The RF customer payment device of claim 1, wherein the retinal scan sensor includes at least one of a retinal scan sensor or an iris scan sensor, and wherein the retinal scan sensor is configured to detect and verify retinal scan characteristics including at least one of blood vessel patterns, pupil dilation or body heat.

7. The RF customer payment device of claim 1, wherein the RF customer payment device is an RF customer payment fob.

8. A Radio Frequency Identification (RFID) reader comprising:

a Radio Frequency (RF) transponder configured to receive a unique customer payment device identification code, an encrypted customer payment device account code, and retinal scan sample data from an RF customer payment device;

a database comprising authenticated retinal scan sample data and a plurality of customer payment device-specific decryption keys; and

an RFID authentication circuit to communicate with the database, decrypt the encrypted customer payment device account code using a unique customer payment device decryption key selected from the plurality of customer payment device-specific decryption keys, and compare the retinal scan sample data to the authenticated retinal scan sample data to authenticate the RF customer payment device.

9. The RFID reader of claim 8, further comprising a USB interface to communicate with the RF customer payment device and personalize at least one of the RF customer payment device or the RFID reader.

10. The RFID reader of claim 8, wherein the RF transponder is configured to authenticate the RF customer payment device by decrypting the encrypted customer payment device authentication code using the unique customer payment device decryption key, and wherein the decrypted customer payment device account code comprises a customer payment device account number in a magnetic stripe format configured to be transmitted to a Point of Sale (POS) device and processed under a merchant'"'"'s business as usual standard.

11. The RFID reader of claim 10, wherein the customer payment device account number is in an ISO/IEC 7813 magnetic stripe format.

12. The RFID reader of claim 8, further comprising an RFID reader PIN interface configured to receive a secondary verification.

13. The RFID reader of claim 8, further comprising an RF antenna configured to operate at at least one of approximately a 13.56 MHz frequency or a 134 kHz frequency.

14. A method for utilizing a Radio Frequency (RF) customer payment device to facilitate an RF payment transaction, the method comprising:

verifying retinal scan sample data detected at a retinal scan sensor to create verified retinal scan sample data;

activating a transponder system authentication circuit in response to at least one of an RF interrogation signal from an RF Identification (RFID) reader or the verified retinal scan sample data;

encrypting, at the transponder system authentication circuit, a customer payment device authentication code with a unique encryption key;

transmitting the encrypted customer payment device authentication code and a unique customer payment device identification code to the RFID reader;

transmitting an RFID reader authentication code to the RFID reader;

decrypting an encrypted RFID reader authentication code received from the RFID reader using a transponder decryption key; and

authenticating the RFID reader and transmitting RF customer payment device account data to the RFID reader in response to the decrypted RFID reader authentication code matching the RFID reader authentication code, and in response to the verified retinal scan sample data matching authenticated retinal scan sample data.

15. The method of claim 14, further comprising communicating with the RFID reader via a second transponder.

16. The method of claim 14, wherein the retinal scan sensor includes at least one of a retinal scan sensor or an iris scan sensor.

17. A method for facilitating an RF payment transaction using an RFID reader, comprising:

transmitting a customer payment device authentication code to an RF customer payment device;

receiving an encrypted customer payment device authentication code, retinal scan sample data, and a unique customer payment device identification code from the RF customer payment device;

decrypting the encrypted customer payment device authentication code using a unique customer payment device decryption key corresponding to the unique customer payment device authentication code;

authenticating the RF customer payment device in response to the retinal scan sample data matching authenticated retinal scan sample data and in response to the decrypted customer payment device authentication code matching the customer payment device authentication code;

receiving an encrypted customer payment device account code from the RF customer payment device;

decrypting the encrypted customer payment device account code using the unique customer payment device decryption key; and

transmitting the decrypted customer payment device account code for payment processing.

18. The method of claim 17, further comprising:

receiving an RFID reader authentication code from the RF customer payment device;

encrypting the RFID reader authentication code using an RFID reader encryption key; and

transmitting the encrypted RFID reader authentication code to the RF customer payment device for authentication of the RFID reader.