Method and apparatus for secure access payment and identification

• US 9,530,137 B2
• Filed: 02/09/2016
• Issued: 12/27/2016
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US15/019,660
• Publication Number:
  US 20160162902A1
• Time in Patent Office: 322 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 : using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 : Authentication

Abstract

According to one aspect, the invention provides a system for authenticating identities of a plurality of users. In one embodiment, the system includes a first handheld device including a wireless transceiver which is configured to transmit authentication information, a second device including a wireless receiver, where the second device is configured to receive the authentication information.

Claims

1. A system for authenticating a user for enabling a transaction, the system comprising:

a first device including;

a first processor, the first processor programmed to authenticate a user of the first device based on secret information and to retrieve or receive first biometric information of the user of the first device;

a first wireless transceiver coupled to the first processor and programmed to transmit a first wireless signal including first authentication information of the user of the first device; and

a biometric sensor configured to capture the first biometric information of the user;

wherein the first processor is programmed to generate one or more signals including the first authentication information, an indicator of biometric authentication, and a time varying value in response to valid authentication of the first biometric information, and to provide the one or more signals including the first authentication information for transmitting to a second device; and

wherein the first processor is further configured to receive an enablement signal from the second device; and

the system further including the second device that is configured to provide the enablement signal indicating that the second device approved the transaction based on use of the one or more signals;

wherein the second device includes a second processor that is configured to provide the enablement signal based on the indication of biometric authentication of the user of the first device, at least a portion of the first authentication information, and second authentication information of the user of the first device to enable and complete processing of the transaction.

2. The system according to claim 1, wherein the first processor is programmed to determine the first authentication information so that the first authentication information is generated based on at least part of the first biometric information or generated based on receiving the first biometric information.

3. The system according to claim 1, the second device including:

a second communication interface coupled to the second processor, and

wherein the second processor is configured to receive the first authentication information of the user of the first device, to retrieve or receive second the authentication information of the user of the first device; and

use the first authentication information and the second authentication information to authenticate the user of the first device to enable the transaction.

4. The system according to claim 1, the second device including:

a second wireless transceiver coupled to the second processor, and

wherein the second processor is configured to receive the first authentication information of the user of the first device, to retrieve or receive the second authentication information of the user of the first device; and

use the first authentication information and the second authentication information to authenticate the user of the first device to enable the transaction.

5. The system of claim 1, wherein the first processor is further configured to compare stored authentication information with the authentication information of the user and configured to enable the first device based on a valid comparison.

6. The system of claim 1, wherein the first processor is further configured to encrypt the first authentication information to communicate to the second device.

7. The system of claim 1, wherein the first device includes a first memory coupled to the first processor and configured to store the first biometric information.

8. The system of claim 1, wherein the first authentication information includes a multidigit public ID code for a credit card account, which a credit card issuer can map to a usable credit card number.

9. The system of claim 1, wherein the first processor is further configured to communicate information associated with the biometric information of the user of the first device.

10. The system of claim 1, further comprising:

wherein the first device includes a user interface coupled to the first processor;

wherein the first processor is configured to receive the first biometric information of the user of the first device; and

wherein the biometric information is employed by the user of the first device to initiate payment for the transaction.

11. The system of claim 1, wherein the first device is configured to communicate with the second device that is a networked credit card validation-information entity configured to approve or deny financial transactions based on authentication of the user.

12. A system for authenticating a user for enabling a transaction, the system comprising:

a first device including;

a biometric sensor configured to capture a first biometric information of the user;

a first processor programmed to;

     1) authenticate a user of the first device based on secret information,

     2) retrieve or receive first biometric information of the user of the first device,

     3) authenticate the user of the first device based on the first biometric, and

     4) generate one or more signals including first authentication information, an indicator of biometric authentication of the user of the first device, and a time varying value; and

a first wireless transceiver coupled to the first processor and programmed to wirelessly transmit the one or more signals to a second device for processing;

wherein generating the one or more signals occurs responsive to valid authentication of the first biometric information; and

wherein the first processor is further programmed to receive an enablement signal indicating an approved transaction from the second device, wherein the enablement signal is provided from the second device based on acceptance of the indicator of biometric authentication and use of the first authentication information and use of second authentication information to enable the transaction.