Iris scan biometrics on a payment device

• US 8,279,042 B2
• Filed: 09/20/2007
• Issued: 10/02/2012
• Est. Priority Date: 07/10/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Xatra Fund MX LLC (Intellectual Ventures LLC)
• Inventors: Bonalle, David S., Beenau, Blayn W., Saunders, Peter D., Montgomery, Joshua L., Larkin, Carl, Gray, William J., Fields, Seth W.
• Primary Examiner(s): Zimmerman, Brian
• Assistant Examiner(s): Khan, Omer S
• Application Number:
  US11/858,182
• Publication Number:
  US 20080021840A1
• Time in Patent Office: 1,839 Days
• Field of Search: 340/10.1, 340/10.3, 340/5.8, 340/5.82
• US Class Current: 340/5.83
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The present invention discloses system and methods for biometric security using hand geometry recognition biometrics in a transponder-reader system. The biometric security system also includes a hand geometry scan sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a transponder configured with a hand geometry scan sensor. In another embodiment, the system includes a reader configured with a hand geometry scan sensor. In yet another embodiment, the present invention discloses methods for proffering and processing hand geometry scan samples to facilitate authorization of transactions.

Claims

1. A Radio Frequency (RF) payment device comprising:

a first and a second RF transponder configured to receive a device authentication code from an RF Identification (RFID) reader;

a unique device encryption key corresponding to a device identification code associated with the RF payment device;

an iris scan sensor configured to detect a proffered iris scan sample to create proffered iris scan sample data, wherein the iris scan sensor is configured to detect a false iris scan based on iris scan characteristics; and

a device authentication circuit configured to use the unique device encryption key to encrypt the device authentication code and a device account code associated with the RF payment device to create an encrypted device authentication code and an encrypted device account code;

wherein the first and the second RF transponder is configured to transmit at least one of the encrypted device authentication code and the encrypted device account code to the RFID reader, and

wherein the iris scan sensor comprises a switch configured to place the first and the second RF transponder in at least one of a selectivity mode or an inclusivity mode, wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the first and the second RF transponder in an operational mode permitting the first and the second RF transponder to be responsive to interrogation.

2. The RF payment device of claim 1, further comprising a verification device configured to enable the device authentication circuit in response to the proffered iris scan sample data matching authenticated iris scan sample data.

3. The RF payment device of claim 2, further comprising a second RF transponder, wherein at least one of the RF transponder or the second RF transponder is configured to transmit an RFID reader authentication code to the RFID reader and receive an encrypted RFID reader authentication code from the RFID reader in response to the proffered iris scan sample data matching the authenticated iris scan sample data.

4. The RF payment device of claim 3, further comprising an RFID reader decryption key, wherein the device authentication circuit is configured to use the RFID reader decryption key to decrypt the encrypted RFID reader authentication code received from the RFID reader in order to authenticate the RFID reader.

5. The RF payment device of claim 1, wherein the iris scan sensor comprises at least one of a video camera, an optical scanner, a digital camera, or a charge coupled device, wherein the iris scan characteristics include at least one of surface patterns, pupil dilation, body heat, boundaries, eyelid contours, or texture sequence.

6. The RF payment device of claim 3, wherein the iris scan sensor is configured to store log data within the RF payment device, the log data comprising at least one of detected iris scan sample data, processed iris scan sample data or stored iris scan sample data, and wherein the iris scan sensor is further configured to employ a security procedure in response to the proffered iris scan sample data differing from the log data.

20. The RF payment device of claim 1, wherein the detection of the false iris scan comprises a secondary security system configured to detect pupil dilation.

21. The RF payment device of claim 1, wherein the proffered iris scan sample includes a scan of colored tissues surrounding a pupil.

7. A method for registering and using proffered iris scan sample data for facilitating a Radio Frequency (RF) transaction, comprising:

detecting a proffered iris scan sample at an iris scan sensor to create the proffered iris scan sample data;

detecting whether the proffered iris scan sample is a false iris scan based on iris scan characteristics;

associating the proffered iris scan sample data with at least one of an RF device, a user identifier, or a transaction account;

verifying the proffered iris scan sample data to activate the RF device and to confirm the proffered iris scan sample data to create registered iris scan sample data;

receiving a transaction request from the RF device, wherein the transaction request comprises transaction iris scan sample data;

aad

authorizing the transaction request in response to the transaction iris scan sample data matching the registered iris scan sample data; and

placing a first and a second RF transponder in at least one of a selectivity mode or an inclusivity mode in the RF device,

wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the first and the second RF transponder in an operational mode permitting the first and the second RF transponder to be responsive to interrogation.

8. The method of claim 7, further comprising associating the registered iris scan sample data with at least one of personal information, credit card information, debit card information, savings account information, or loyalty point information.

9. The method of claim 8, further comprising associating the registered iris scan sample data with second user information comprising at least one of personal information, credit card information, debit card information, savings account information, or loyalty point information.

10. The method of claim 7, further comprising facilitating at least one of authorized access, activation of a second device, a financial transaction, or a non-financial transaction in response to the transaction iris scan sample data matching the registered iris scan sample data.

11. The method of claim 7, further comprising:

transmitting a device authentication code from a sample receiver to the RF device;

receiving an encrypted device authentication code, second proffered iris scan sample data, and a device identification code from the RF device;

decrypting the encrypted device authentication code using a unique device decryption key corresponding to the device identification code to create a decrypted device authentication code; and

authenticating the RF device in response to the second proffered iris scan sample data matching the registered iris scan sample data and in response to the decrypted device authentication code matching the device authentication code.

12. The method of claim 11, further comprising:

receiving a reader authentication code from the RF device;

encrypting the reader authentication code using a reader encryption key to create an encrypted reader authentication code;

transmitting the encrypted reader authentication code to the RF device for authentication of the sample receiver;

receiving an encrypted device account code from the RF device upon the authentication of the sample receiver;

decrypting the encrypted device account code using the unique device decryption key to create a decrypted device account code; and

transmitting the decrypted device account code for processing of the transaction.

13. The method of claim 7, further comprising:

receiving an RF device update request comprising at least one of a preloaded value update request or a reload protocol update request;

updating, in response to the RF device update request, at least one of a preloaded value data file or a reload protocol data file, wherein the preloaded value data file comprises a stored value;

requesting a funding source value from a first funding source and the preloaded value data file, wherein the requesting of the funding source value is in response to an instruction from the reload protocol data file;

updating the stored value with the funding source value; and

in response to the stored value being greater than the transaction value, authorizing the merchant transaction request to facilitate the RF transaction.

14. The method of claim 13, wherein the reload protocol update request comprises at least one of a minimum depletion value update request, a time period update request, a number of occurrences update request, or a maximum value update request.

15. The method of claim 14, further comprising determining a compliance of the RF transaction with a preset transaction limitation comprising at least one of a maximum transaction amount, a minimum transaction amount, a maximum number of transactions within a time period value, a maximum number of transactions value, a use by certain merchants criterion, a temporal limitation, or a use of non-monetary funds criterion.

16. The method of claim 15, further comprising requiring second proffered iris scan sample data to override the preset transaction limitation.

17. An authorized sample receiver (ASR) comprising:

a biometric sensor configured to receive a first proffered iris scan sample to create first proffered iris scan sample data, wherein the biometric sensor is configured to detect a false iris scan based on iris scan characteristics;

a biometric processor configured to create registered iris scan sample data from the first proffered iris scan sample data in response to second proffered iris scan sample data associated with an RF device matching the first proffered iris scan sample data;

an RF Identification (RFID) reader configured to receive a transaction request from the RF device, wherein the transaction request comprises transaction iris scan sample data, an encrypted device account code, and a device identification code;

an authentication circuit configured to decrypt the encrypted device account code using a unique RF device decryption key selected from a plurality of device-specific decryption keys, wherein the authentication circuit is further configured to authenticate the RF device in response to the transaction iris scan sample data matching the registered iris scan sample data; and

wherein the biometric sensor comprises a switch configured to place a first and a second RF transponder in at least one of a selectivity mode or an inclusivity mode in the RF device,

wherein the selectivity mode includes enabling purchase of an item using a selected account number and the inclusivity mode includes the first and the second RF transponder in an operational mode permitting the first and the second RF transponder to be responsive to interrogation.

18. The ASR of claim 17, further configured to transmit a device authentication code to the RF device, receive an encrypted device authentication code from the RF device, and decrypt the encrypted device authentication code using the unique RF device decryption key to authenticate the RF device.

19. The ASR of claim 18, further configured to receive an ASR authentication code from the RF device, encrypt the ASR authentication code, and transmit the encrypted ASR authentication code to the RF device to facilitate authentication of the ASR.