Source: http://www.google.com/patents/US7505941?dq=oakley+D523,461
Timestamp: 2014-08-22 20:06:12
Document Index: 191954347

Matched Legal Cases: ['Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'art 1', 'art 2', 'art 3', 'art 4', 'art 5', 'art 6', 'art 7']

Patent US7505941 - Methods and apparatus for conducting electronic transactions using biometrics - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign in<nobr>Advanced Patent Search</nobr>PatentsA system and method for facilitating electronic transactions using a biometric are disclosed. The system for facilitating electronic transactions using a biometric comprises a smartcard-reader transaction system. The method comprises determining if a transaction violates an established rule, such as...http://www.google.com/patents/US7505941?utm_source=gb-gplus-sharePatent US7505941 - Methods and apparatus for conducting electronic transactions using biometricsAdvanced Patent SearchPublication numberUS7505941 B2Publication typeGrantApplication numberUS 10/908,434Publication dateMar 17, 2009Filing dateMay 11, 2005Priority dateAug 31, 1999Fee statusPaidAlso published asUS20050187883Publication number10908434, 908434, US 7505941 B2, US 7505941B2, US-B2-7505941, US7505941 B2, US7505941B2InventorsFred Bishop, David S Bonalle, Glen SalowOriginal AssigneeAmerican Express Travel Related Services Company, Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (103), Non-Patent Citations (53), Referenced by (15), Classifications (36), Legal Events (3) External Links: USPTO, USPTO Assignment, EspacenetMethods and apparatus for conducting electronic transactions using biometricsUS 7505941 B2Abstract A system and method for facilitating electronic transactions using a biometric are disclosed. The system for facilitating electronic transactions using a biometric comprises a smartcard-reader transaction system. The method comprises determining if a transaction violates an established rule, such as a preset spending limit. The method also comprises notifying a user to proffer a biometric sample in order to verify the identity of said user, and detecting a proffered biometric at a sensor to obtain a proffered biometric sample. The method additionally comprises verifying the proffered biometric sample and authorizing a transaction to continue upon verification of the proffered biometric sample.
1. A method for conducting a transaction in a transaction system, the method comprising:
receiving a transaction request from a user, said user proffering a transaction instrument to facilitate said transaction request;
issuing a challenge to said user;
receiving a response from said user based upon said challenge;
receiving a biometric at a biometric sensor to create a biometric sample, said biometric sensor communicating with said transaction system to initiate verification of said biometric sample;
processing said response to verify said transaction instrument and said biometric sample to verify said user and to provide access to a transaction service;
assembling credentials for said transaction at a server to create assembled credentials, said assembled credentials comprising at least one key;
receiving a second request from said user at said server, said second request comprising said portion of said assembled credentials provided to said user; and
validating, at said server, said portion of said assembled credentials provided to said user with said key of said assembled credentials to provide access to said transaction service.
2. The method of claim 1, wherein said transaction is an electronic purchase transaction.
3. The method of claim 1, wherein said step of processing said response comprises processing said response to verify a smartcard.
4. The method of claim 1, wherein said step of receiving said biometric further comprises receiving a registration of at least one biometric sample, wherein said registration comprises a proffered biometric sample.
5. The method of claim 4, wherein said step of receiving said registration further comprises processing database information contained in at least one of a smartcard, smartcard reader, said biometric sensor, a remote server, a merchant server and a smartcard system.
6. The method of claim 4, wherein said step of receiving said registration further comprises comparing said proffered biometric sample with a stored biometric sample.
7. The method of claim 6, wherein said step of comparing further comprises comparing said proffered biometric sample to said stored biometric sample by using at least one of a third-party security vendor device and a local CPU.
8. The method of claim 1, wherein said step of receiving said biometric further comprises at least one of detecting, processing and storing a second biometric sample.
9. The method of claim 1, wherein said step of receiving said biometric further comprises the use of at least one secondary security procedure. Description
CROSS-REFERENCE TO RELATED APPLICATIONS This application is a continuation-in-part and claims priority to U.S. application Ser. No. 09/652,899, entitled �Methods And Apparatus For Conducting Electronic Transactions,� filed Aug. 31, 2000, the '899 application itself claims the benefit of: U.S. Provisional Application No. 60/151,880, filed Aug. 31, 1999; U.S. Provisional Application No. 60/164,668, filed Nov. 9, 1999; U.S. Provisional Application No. 60/165,577, filed Nov. 15, 1999; and, U.S. Provisional Application No. 60/201,635, filed May 3, 2000. All of the above-listed applications are incorporated herein by reference.
FIELD OF INVENTION The invention relates generally to methods and apparatus for conducting network transactions. More particularly, the invention relates to systems for authenticating and conducting business over data networks (such as the Internet) using a personal identifier such as a biometric.
BACKGROUND OF INVENTION In recent years, many consumers have discovered the convenience and economy of purchasing goods and services electronically. A number of channels for electronic purchases (commonly called �e-purchases�) are available, including shop-at-home television networks, call-in responses to television advertisements, and the like. Most recently, direct purchasing via the Internet has become extremely popular.
In a typical Internet transaction, a consumer generally identifies goods and/or services for purchase by viewing an online advertisement such as a hypertext markup language (HTML) document provided via a World Wide Web (WWW) browser. Payment typically occurs via a charge card number that is provided via a secure channel such as a secure sockets layer (SSL) connection that is established between the consumer and the merchant. A charge card account number is typically a sixteen-digit charge card number. Credit or charge card numbers typically comply with a standardized format having four spaced sets of numbers, as represented by the number �0000 0000 0000 0000�. The first five to seven digits are reserved for processing purposes and identify the issuing bank, card type, etc. The last sixteenth digit is used as a sum check for the sixteen-digit number. The intermediary eight-to-ten digits are used to uniquely identify the customer. The merchant then processes the charge card number by, for example, receiving direct authorization from the card issuer, then the merchant completes the transaction. The SSL standard is described by, for example, �The SSL Protocol Version 3.0� dated Nov. 18, 1996, which is available online at http://home.netscape.com/eng/ssl3/draft302.txt, the entire contents of which are incorporated herein by reference.
To improve the security deficiencies inherent in transporting charge card numbers over unsecure networks, many have suggested the use of �smart cards.� Smart cards typically include an integrated circuit chip having a microprocessor and memory for storing data directly on the card. The data can correspond to a cryptographic key, for example, or to an electronic purse that maintains an electronic value of currency. Many smartcard schemes have been suggested in the prior art, but these typically exhibit a marked disadvantage in that they are non-standard. In other words, merchants typically must obtain new, proprietary software for their Web storefronts to accept smartcard transactions. Moreover, the administration costs involved with assigning and maintaining the cryptographic information associated with smart cards have been excessive to date.
Existing digital wallet technology, such as the digital wallet technology provided by, for example, GlobeSet, Inc., 1250 Capital of Texas Highway South, Building One, Suite 300, Austin, Tex. 78746, provides a means for customers to utilize transaction card products (e.g., credit, charge, debit, smart cards, account numbers and the like) to pay for products and services on-line. In general, digital wallets are tools which store personal information (name, address, charge card number, credit card number, etc.) in order to facilitate electronic commerce or other network interactions. The personal information can be stored on a general server or at a client location (PC or Smartcard) or on a hybrid of both a general server and a client server. The digital wallet general server is comprised of a Web server and a database server which centrally houses the customer's personal and credit card information, shopping preferences and profiles of on-line merchants.
In an exemplary embodiment, a digital wallet performs functions such as single sign on/one password, automatic form filling of check out pages, one- or two-click purchasing, personalization of Websites, on-line order and delivery tracking, itemized electronic receipts, and customized offers and promotions based upon spending patterns and opt-ins. More particularly, a one-click purchase activates the wallet and confirms the purchase at the same time. A two-click check out first activates the wallet, then the second click confirms the purchase.
Further still, even with the use of electronic wallets and smartcards, there is a desire to further safeguard electronic transactions against evolving threats. While existing systems may provide for the limited use of personal identifiers such as PINs, these PINs can easily be duplicated and/or discovered.
Thus, a new system of conducting electronic transactions is therefore desired. Such a system should provide improved security that would require the use of a personal identifier, such as a biometric to safeguard the transactions.
SUMMARY OF INVENTION In exemplary embodiments of the invention, a user is provided with an intelligent instrument, such as a smartcard, which can be used in conducting electronic transactions. The instrument contains a digital certificate and suitably authenticates with a server on the network that conducts all or portions of the transaction on behalf of the user. The user is a purchaser conducting a purchase transaction and the server is a wallet server that interacts with a security server to provide enhanced reliability and confidence in the transaction.
Electronic transactions, such as purchase transactions, are conducted by receiving a transaction request from a user; issuing a challenge to said user; receiving a response from said user based upon said challenge; receiving a biometric at a biometric sensor communicating with said system to initiate verification of a biometric sample; and, processing said response to verify an instrument and processing said biometric sample to verify said user. The biometric sample may include a user's voice, fingerprint, facial features, ear features, sound signature, handwriting signature, vascular patterns, DNA, hand geometry, smell, keystroke/typing features, iris, retina, and brainwaves.
The invention also may include the steps of assembling credentials which include at least one key for the electronic transaction; providing at least a portion of the credentials to the user; receiving a second request from the user which includes the portion of the credentials; and validating the portion of the credentials with the key to provide access to a transaction service.
Moreover, the present invention protects a network server from an attack by: restricting access to the network server to a portion of the network server for at least a selected protocol and scanning the portion of the network server for particular characters associated with the selected protocol. The particular characters may be removed or replaced with benign characters in order to reduce the security risk posed by the selected protocol. In an exemplary embodiment, the characters can be logged in order to form a security log. The security log can be reviewed to determine whether the particular characters are hostile. Alternatively, a request may be denied.
The present invention also includes a transaction tool, such as a digital wallet used to perform purchase transactions, having an activator and a toolbar. In an exemplary embodiment, the toolbar allows a user to perform a small download of the activator and the toolbar utilizes one or more operating system controls, for example, a system tray icon. The transaction tool also includes a form fill component and an auto remember component for pre-filling forms with information previously provided by the user.
FIGS. 1A-C are block diagrams of various embodiments of an exemplary transaction system;
FIG. 12B is a message sequence chart of a correct communications flow without the security problems shown in FIG. 12A;
FIG. 13 is a flow diagram of an exemplary process for reducing or eliminating undesired executable code;
FIG. 14 illustrates an exemplary smartcard transaction system in accordance with the present invention;
FIG. 15 illustrates an exemplary registration procedure in accordance with the present invention; and
FIG. 16 illustrates an exemplary smartcard reader configured with a security system, wherein the security system incorporates one or more biometric system.
DETAILED DESCRIPTION The present invention may be described herein in terms of functional block components and various processing steps. It should be appreciated that such functional blocks may be realized by any number of hardware and/or software components configured to perform the specified functions. For example, the present invention may employ various integrated circuit (I.C.) components (e.g., memory elements, processing elements, logic elements, look-up tables, and the like), which may carry out a variety of functions under the control of one or more microprocessors or other control devices. Similarly, the software elements of the present invention may be implemented with any programming or scripting language such as C, C++, Java, COBOL, assembler, PERL, or the like, with the various algorithms being implemented with any combination of data structures, objects, processes, routines or other programming elements. Further, it should be noted that the present invention may employ any number of conventional techniques for data transmission, signaling, data processing, network control, and the like. Still further, the invention could be used to detect or prevent security issues with a scripting language, such as JavaScript, VBScript or the like.
While various exemplary embodiments have been illustrated in FIGS. 1A-C, it will be appreciated that other embodiments are possible. For example, an embodiment may include connection 150 but not connection 152 or vice versa. Furthermore, components (e.g., customer 110, merchant 120, security server 130, wallet server 140 and application server 160) may be individual computers or networked groups of computers acting with similar purpose to fulfill the functions described herein. Functionality attributed to a single component may be distributed among one or more individual computers in order to fulfill the described functionality. For example, the wallet server 140, may in fact be a collection of Web servers, application servers, database servers and other types of servers.
With reference now to FIG. 2, an exemplary purchaser computer 110 (also referred to as a client, customer, or user computer) is any computer system that is capable of initiating an electronic purchase transaction on data network 102. In various embodiments, purchaser computer 110 is a personal computer running any operating system 212 such as any version of the Windows operating system available from the Microsoft Corporation (Redmond, Wash.) or any version of the MacOS operating system available from the Apple Corporation (Cupertino, Calif.).
Purchaser computer 110 suitably includes hardware and/or software to allow a smartcard 202 to interface with a Web browser 216 through operating system 212. Web browser 216 is any program compatible with purchaser computer 110 that communicates via network 102 such as Netscape Communicator available from the Netscape Corporation (Mountain View, Calif.), Internet Explorer available from the Microsoft Corporation (Redmond, Wash.), or the AOL Browser available from the America Online Corporation (Dulles, Va.). In various embodiments, purchaser computer 110 includes a wallet client 214, which is any computer program configured to communicate with wallet server 140. An exemplary wallet client 214 is the Microsoft Wallet, or the Globeset Wallet available from the Globeset Corporation (Austin, Tex.), although any wallet program could be used.
Wallet client 214 and browser 216 may interact with smartcard 202 by sending data through operating system 212 to a card reader 204. Card reader 204 is any reader device capable of transferring information between wallet client 214 and smartcard 202. In various embodiments, card reader 204 is an ISO-7816 compatible reader such as the Model GCR410 available from the Gemplus Corporation (Redwood City, Calif.), or any other suitable reader.
ISO/IEC 7816-1:1998 Identification cards�Integrated circuit(s) cards with contacts�Part 1: Physical characteristics; ISO/IEC 7816-2:1999 Information technology�Identification cards�Integrated circuit(s) cards with contacts�Part 2: Dimensions and location of the contacts; ISO/IEC 7816-3:1997 Information technology�Identification cards�Integrated circuit(s) cards with contacts�Part 3: Electronic signals and transmission protocols; ISO/IEC 7816-4:1995 Information technology�Identification cards�Integrated circuit(s) cards with contacts�Part 4: Interindustry commands for interchange; ISO/IEC 7816-5:1994 Identification cards�Integrated circuit(s) cards with contacts�Part 5: Numbering system and registration procedure for application identifiers; ISO/IEC 7816-6:1996 Identification cards�Integrated circuit(s) cards with contacts�Part 6: Interindustry data elements; and ISO/IEC 7816-7:1999 Identification cards�Integrated circuit(s) cards with contacts�Part 7: Interindustry commands for Structured Card Query Language (SCQL). An exemplary smartcard 202 is a smartcard in accordance with the ISO 7816 specifications including a model SLE66 chip available from the Infineon Corporation (Munich, Germany). The SLE66 chip includes a memory (such as a 16 k memory, although more or less memory could be used) and a processor running, for example, the Multos operating system (such as Multos v.4). In various embodiments smartcard 202 also includes an applet for storing and processing digital certificates or other cryptographic functions. For a basic introduction of cryptography, see �Applied Cryptography: Protocols, Algorithms, And Source Code In C,� by Bruce Schneier and published by John Wiley & Sons (second edition, 1996), which is hereby incorporated by reference. For example, an X.509 Java applet could be included on smartcard 202 for processing an X.509 certificate stored thereon. While the embodiments described herein utilize a smartcard, it will be appreciated that other intelligent tokens, for example a global system for mobile communication (GSM) mobile phone, can be substituted for the smartcard in various embodiments of the invention.
With reference now to FIG. 3, a security server 130 suitably includes an interface to network 102, a security engine 304 and an authorization server 306 communicating with a database 310. Network interface 302 is any program that facilitates communications on network 102, such as a Web server. In various embodiments, network interface 302 is based upon Netscape Enterprise Server, available from the Netscape Corporation (Mountain View, Calif.). Network interface 302 receives electronic messages on network 102 and routes them to security engine 304 or authorization server 306 as appropriate.
With reference now to FIG. 4, an exemplary wallet server 140 includes a network interface 402, an optional applet server 404 and a wallet application 406. Network interface 402 is any program that facilitates communications on network 102, such as a Web server. In various embodiments, network interface 402 is based upon Netscape Enterprise Server, available from the Netscape Corporation (Mountain View, Calif.). Optional applet server 404 provides server functionality for distributed programs such as Java programs or ActiveX controls. An exemplary applet server is the Java Applet Server available from Sun Microsystems (Mountain View, Calif.). Applet server 404 and network interface 402 provide support functionality for wallet application 406, which may handle login functionality, retrieve wallet data from wallet database 408, and/or administer transactions as described herein. In various embodiments of the invention, wallet server 140 may include the SERVERWALLET (a.k.a. NETWALLET) program available from the Globeset Corporation (Austin, Tex.).
The activator application program may be implemented as a conventional computer application. In various embodiments, the activator application displays information as a system tray icon, as a �floating bitmap,� or in any other suitable manner. The graphical representations (e.g., icons) may indicate status information such as �browsing at a supported site,� �browsing at a supported checkout page,� �browsing at a supported payment page,� �no browser windows open,� �browsing at an unsupported page,� and/or the like.
In an exemplary embodiment, the present invention is enhanced by providing a transaction tool with a window which includes controls which allow a user to more easily use the transaction tool. The transaction tool can be used for various electronic transactions. For example, purchase transactions, financial advisory transactions, insurance transactions, consumer-to-consumer transactions, such as barter transactions, transactions relating to offers and rewards, etc. The transaction tool described in detail herein is a digital wallet used for electronic purchase transactions. The digital wallet is enhanced by providing a window with controls for the customer to more easily use the wallet. In an exemplary embodiment, the present invention includes a client-side implementation for accessing digital wallet functionality (�activator�) and a server-side toolbar that allows the user to perform a small download of the activator and utilize one or more control elements of the Operating System User Interface, for example, a Microsoft Windows system tray icon.
The activator is object code that runs on the user's computer and contains routines for accessing the wallet server. The activator can generate events and the activator contains procedural logic which allows for communication with the wallet server in response to specific user and system actions or events. In an exemplary embodiment, the activator presents a single graphical element, for example an icon which in a Microsoft Windows embodiment appears as a Windows system tray icon, and which enables the user to trigger the appearance of the wallet toolbar. In various embodiments, the wallet toolbar is, in effect, a special browser window that accesses the wallet server. The activator communicates with the wallet server to automate the update of the activator object code, via a small download. In an exemplary embodiment, the user is queried for a confirmation prior to performing the activator download. In various embodiments, the activator communicates with applications other than the wallet, for example, offers of rewards.
The activator, which may be implemented on the client side, allows the user 110 to be in constant or intermittent communication with the digital wallet 140 issuer, for example, American Express, without having to have intrusive windows taking up space on the user's display. As described above, this allows the wallet issuer to monitor and present possible items of interest to the user at appropriate times. The configurable controls presented in the window allow the customer to quickly navigate to desired Web sites, and to immediately invoke desired functionality such as digital shopping cart checkout. In an exemplary embodiment, the client toolbar may be a discrete window that associates with the user's browser window, and maintains a geometry that effectively renders it a part of the user's browser. Although when the user clicks on its controls, the window remains in its original state, namely the window directs the browser window to visit desired URLs and invoke specific actions (such as, use of the digital wallet). For example, after selecting a digital wallet icon from the system tray, the digital wallet toolbar 502 is displayed as a discrete window that is associated with the user's browser window 500 as shown in FIG. 5. In an alternative embodiment, the client toolbar frames the existing wallet window, providing the additional controls as described above in an extension of the window area which is provided by an existing wallet. In another alternative embodiment, the area is divided in the user's standard browser window to create an area that can be used for wallet and the other controls described above.
The system may be configured to provide a convenient way for customers to not only visit favorite URLs, but also to invoke specific functionality that might otherwise incur many steps, and which might change as the vendors' sites are continually updated. The system also may provide a simpler user experience by making the wallet and e-commerce sites not only easy to use, but by making the wallet and client toolbar easy to find. When a user has many different windows open, finding the wallet window can be difficult and annoying, especially as different browser windows seize GUI focus during the course of normal navigation and interaction with sites. As such, use of the system tray icon and server side functionality provides a superior user experience. In an exemplary embodiment, the present system works with any known in the art browser, such as Netscape Navigator.
While prior art systems may simply provide a customizable portal (e.g., MyAmericanExpress.com) that allows a user to visit the page and then traverse links from that page, an exemplary embodiment of the present invention suitably provides a window with controls that will stay on the users' desktop as they navigate throughout the Web. Additionally, the client toolbar provides a means of automating actions for the user, where these actions take place on third party e-commerce sites. Moreover, prior art systems may utilize a separate browser window to render the wallet controls, but the present invention utilizes a standard browser window which has been divided to provide an area for the wallet to occupy. For example, In an exemplary embodiment, a digital wallet icon is available to the user as a system tray icon (not shown). Upon invocation of the digital wallet icon, the digital wallet toolbar 502 is displayed as shown in FIG. 5. The digital wallet toolbar is unobtrusive while including controls which allow the user to utilize the digital wallet. In an exemplary embodiment, the toolbar 502 is associated with the browser window 500.
As shown in FIG. 6, if the user selects a shopping directory button from the toolbar 502, the toolbar expands to a shopping directory page 602. The user can select a merchant from the list of merchants 604 displayed in the shopping directory page 602. Upon selecting a merchant from the list of merchants 604, the digital wallet takes the user to the selected merchant site 702, such as is shown in FIG. 7. In an exemplary embodiment, when the digital wallet takes a user to a merchant site 702, the toolbar 502 returns to its normal size.
When the user makes a purchase from a merchant, for example by placing items in a shopping cart and proceeding to checkout at the merchant's site, the checkout function is performed, in part, by the digital wallet of the present invention. As shown in FIG. 8, when the user indicates a desired purchase at a merchant site 702, the checkout user interface 802 of the digital wallet is displayed. For example, the checkout display 802 appears in one side of the browser window, while the merchant window 702 is still displayed on the opposite side of the browser window. Much of the information that a user would normally have to enter at the merchant checkout (for example, name, address, e-mail address, credit card information, etc.) is already known by the digital wallet and is pre-filled in the digital wallet checkout window 802. In an exemplary embodiment, the user can edit the pre-filled information.
In an exemplary embodiment, the present system also includes methods and apparatus that facilitate the reliable population of HTML forms on Web sites. The end result is that users can identify information content that they wish to provide to sites in a general manner, independent of the actual appearance, labeling, and behaviors of various e-commerce Web sites. In an exemplary embodiment, the present invention includes an �auto-remember� component that allows a user to capture data that is entered and a �form fill� component which includes a powerful set of processes that results from the combination of several different models of sites and users.
With respect to the �auto-remember� feature, prior art digital wallets may implement a remember function, but it must be initiated by the user. With the present �auto-remember� feature, digital wallet users do not need to click a button to remember the form they just filled out because the present system remembers the fields that the user is submitting on a merchant window. When a form is submitted (for example, by pressing a �Submit� button or a �Buy� button), the online wallet responds by determining if the window that triggered the form submission is a merchant window of interest. If so, the wallet suitably remembers the data; otherwise, the wallet can disregard the occurrence of the form submission and continue to run as normal.
The digital wallet controls may include a button labeled �remember,� or may also support an automatic remember feature that is always active. In general, fields other than those that are automatically populated by the wallet can be remembered. In this context, remembering a field means that when a user enters data into a specific field, the value will be stored by the system. The wallet component will detect field values entered in this way, and will securely transmit them to a server via the Internet. When a user next goes to this page, the wallet, in addition to populating the form with fields that are retrieved from the wallet system, will also populate the form with values that had previously been remembered. When processing the form (pre-fill), the wallet will securely retrieve field values from the server.
More particularly, with respect to the Internet Explorer browser, the invention suitably implements an ActiveX control that attaches itself to a Web page such as, for example, the American Express Online Wallet. In an exemplary embodiment, the ActiveX control contains a method that captures the browser events of all Internet Explorer browsers, so that the American Express Online Wallet can respond to these events if necessary by a JavaScript function loaded within the American Express Online Wallet, thereby allowing the system to obtain the completely downloaded document within an Internet Explorer browser. Specifically, this allows the system to capture the �Document Complete� event raised by the Internet Explorer browser which specifies when a document has finished loading. When this event is captured, the ActiveX control notifies the American Express Online Wallet by calling a JavaScript function loaded within the American Express Online Wallet. This function responds to this event by suitably communicating with the ActiveX control to capture the �Form Submit� events for all forms on all Internet Explorer browsers.
When a user fills a form on a Web page and clicks the �Submit� (i.e., any control, such as a button, that submits a form) button for that page, the American Express Online Wallet is notified by the ActiveX control calling a JavaScript function loaded within the American Express Online Wallet. The American Express Online Wallet then suitably determines if the document raising the �Submit� event is of interest by checking the URL of the window that raised the event. If the event is to be handled, the American Express Online Wallet must call a suitable function within the ActiveX control that obtains the document object model (DOM) that raised the event. The DOM can then be traversed and the form values can be saved so that they can be sent to the server for storage in memory. In an exemplary embodiment, the ActiveX control must properly detach itself from capturing the browser events and form �Submit� events so that runtime errors are minimized.
With respect to the form fill function, the digital wallet, such as, for example, the American Express Online Wallet, provides a form fill functionality to aid users in populating forms. Prior art systems, such as the system provided by GlobeSet, Inc., typically use a Browser Helper Object (BHO). The BHO approach often includes disadvantages such as, for example, the Internet Explorer 5.0 browser has a bug where it will only load the first BHO specified in the registry. This is a problem for any application since it cannot be sure whether its BHO is loaded or not. Moreover, a BHO is loaded for each instance of Internet Explorer such that multiple instances of a BHO could be running at any given time�therefore eating up memory and slowing down navigation for all browsers versus only the one of interest.
The present invention may be configured to replace the BHO solution by using the same ActiveX control as specified in the �auto remember� feature. By attaching an ActiveX control to the Online Wallet Web page, the system suitably obtains the document object model for any document loaded within any given Internet Explorer browser by using, for example, the Shell Windows API. When a user clicks a �Fill Form� button on the Online Wallet, the wallet can respond by first obtaining the document object model through the ActiveX control. Next, the wallet can save the names of the fields that make up forms and send them to a heuristic engine on the server. The server will respond to this request by returning the values that should be used to fill these fields. The fields can then be filled using the same document object model obtained earlier. As such, the present invention reduces the problem of having to enter repetitive data in forms at Web sites. In addition to saving effort on part of customers, it increases accuracy of the entered data.
More particularly, the architecture of the present invention combines a server-side model of each site (e.g., fields, pages, links, etc.), server-side model of user (e.g., profile), user generated model of site (e.g., macro recording, tagging, drag and drop) model of site manually generated by system (e.g., to augment and validate the user generated models), and heuristically generated model of site (e.g., inference of semantic information about fields, actions, etc.). The present system creates and stores several distinct types of models. The first characterizes the site, for example, how do you check out, how do you add something to a shopping cart, how do you search for a type of product, how do you enter preferences (e.g., travel), etc. The second model characterizes the user, for example, what are the things that a user can do and what are the profile attributes of a user. By combining these two models, the present system creates special processes that add great flexibility and power. The system maps from the model of what a user can do, to the model of the site, wherein the site models are generated by any known method. As such, the site model can be created by the user, by the host, by the transaction card company (issuer) or even by the site provider. In an exemplary embodiment, ECML/XML can be used to represent models for the site. In various embodiments site models can be exchanged with other systems.
The present invention includes heuristics based field recognition. In this approach, field labels are identified by their spatial proximity to form fields of interest. A combination of field labels and form field HTML attributes (most notably the �name� attribute of the HTML �input,� �select,� and �action� elements) will be used as input to a heuristic engine that contains a dictionary to aid the identification of desired fields.
In an exemplary embodiment, the above two approaches may need some manual interaction in order to completely create process maps and form field maps that accurately depict the navigation and form field completion possibilities that enable this invention. When necessary, human analysts will operate in a fashion similar to what occurs during user mediated field recognition, although they will provide far more information about their navigation and form filling processes than would the typical user. In all cases, the information that is gathered is used to create a process map (or detailed site map) that depicts the sequence of actions (form fill, HTTP Post, HTTP Get, etc.) by which various activities can occur. A field map will also be generated for each of the Web pages in the process map, wherein the field map defines the precise names of fields that can be used to automate form submission. State maps may also be required to track the states of users as they interact with the Web site (the state of the user, such as logged on versus not logged on, will modify the results of specific actions on the site).
In an exemplary embodiment, the process by which the user interacts can either be fully automated (in which case the user merely conveys the desire to perform a scripted action) or can be user mediated (in which case the invention can pre-fill form fields for the user, thereby affording the user the opportunity to correct, change, or complete any fields that require further data entry). In addition to the products and services described above, the enabling technology in the form of the process and field maps can be leveraged for new products and services, such as enabling companies to automate the entry of form data for their site visitors. For example, if a company compiled process and field maps for the benefit of their own customers (by any of the means described above), then the company can also license this information, services, and products to third-party customers. The sites for which these maps exist may also use the present invention such that the sites benefit by delivering a similar service to their customers who are not benefiting from the system. The underlying processes themselves will also rely on a system which acquires this information and reformats it, for example, as XML and ECML. These standard representations would form the basis of information exchange for the latter two products or services.
Initialization step 902 suitably involves opening the activator application and initializing the application as appropriate. The activator application may be initialized in response to system startup, connection to a network (such as the internet or a LAN), or initialization of a browser (such as Internet Explorer, available from the Microsoft Corporation (Redmond, Wash.) or Netscape Explorer, available from the Netscape Corporation (Mountain View, Calif.). In various embodiments, the activator application may contact the wallet server 140 (FIG. 1), wallet application 406 (FIG. 4) or another server on network 102. The activator application suitably contacts the remote server to obtain information such as a list of Web sites, domain names, or URLs that are supported by the wallet. This information may be obtained on a regular basis (e.g. daily, weekly, monthly, or at each initialization of the agent application) or when polled by the activator application or the server. In various embodiments, the activator application stores the list of supported URLs in a cache or file on a local drive, or in memory on the client computer.
As the user browses the Internet or other data network 102, the activator application suitably monitors the location of the user on the network. One method of monitoring the user's browsing is to monitor the URL used by the user's browser. In such embodiments, the activator application obtains the present URL from the user's browser (or from the system network interface, as appropriate) and compares (step 906) the present URL against the list of supported URLs obtained from the remote server in initialization (step 902). These comparisons are shown in logically separate steps 906, 908, 912 and 916 in FIG. 9, although these steps could be combined or separated in any fashion without departing from the ambit of the invention. For example, although FIG. 9 shows multiple comparisons being executed, a single comparison of each present URL against the list of supported URLs may be sufficient in certain embodiments.
Other functionality (step 916) may also be incorporated into the activator application. For example, security mechanisms (such as those described above and below), customer monitoring functions, coupons, special offers and the like could be implemented. In the case of coupons or special offers, the activator could sense the present URL as corresponding to a particular product or Web page. When the user �surfs� or browses to the particular supported URL, the activator application notices the match and presents the user (via a dialog window or via the browser, or the like) with a special offer, such as an opportunity to purchase a particular product or to receive a special discount on a purchase. It will be appreciated that other functionality could be incorporated into the activator application without departing from the ambit of the present application.
In an exemplary embodiment, the registration information also includes card reader information which includes whether the card reader port should be serial or USB port. If the wallet application is approved, a card reader may be shipped or otherwise provided to the user, and a special code (such as a cryptographic key, or a password, or any other sort of electronic or printed code) is also provided to the user. The user then registers for online wallet service by electronically contacting wallet server 140 and authenticating to the server with the card and/or with the special code. After providing the special code, the user receives a specially configured copy of the wallet software, which may be installed on customer computer 110, as appropriate. The wallet pre-fill procedure may be used with any credit card or charge card by simply associating a version of the wallet program with a special code. Configuration information for a particular user is associated with a code that is provided to the user, who may later present the special code to authenticate him/herself with wallet server 140 to obtain a copy of the wallet that has already been pre-configured with data specific to the particular user.
The PKCS1 block is suitably provided to smartcard 202 via reader 204 for processing (step 1006 in FIG. 10). In various embodiments, card reader 204 interacts with customer computer 110 to prompt the user for a personal identifier, for example a personal identification number (PIN) or other unique identifier, to access the card. In an exemplary embodiment, a PIN is stored on smartcard 202. Alternatively, a PIN or other personal identifier may be stored elsewhere on the system, for example, on the reader 204 or the customer computer 110. The user suitably enters the personal identifier as appropriate to unlock smartcard 202, which receives the dual challenge block from wallet client 214 and digitally signs the block as appropriate. In various embodiments, smartcard 202 contains a private key that is used to compute a digital signature of the block. The signed block is then returned to wallet client 214, as appropriate. In various embodiments, smartcard 202 also provides a certificate (such as an X.509 certificate) that corresponds to the private key used to compute the digital signature.
Various embodiments of the invention incorporate an added protection against security breaches. Because many server-side functions incorporated into security server 130 or wallet server 140, for example, may incorporate various scripting components written in scripting languages such as JavaScript (as defined by Sun Microsystems, Mountain View, Calif.) or VBscript (as defined by the Microsoft Corporation, Redmond, Wash.), servers coupled to network 102 may provide various functionality to the multiple clients 110 through such server languages by providing scripts (or code) from the server to the client. The code is interpreted, compiled or otherwise executed by client computer 110. In embodiments incorporating JavaScript, for example, scripts are interpreted and executed by a browser program (e.g. Internet Explorer, Netscape Communicator or the like) running on client computer 110. Other embodiments include other non-PC browsers, for example Wireless Application Protocol (WAP) phones that support Wireless Markup Language (WML) scripts. The various scripting languages may contain instructions, objects or other data mechanisms for accessing files on the user's hard drive, for example, or for otherwise manipulating data on the user's computer. To prevent unauthorized sources from providing executable code to the user, the scripting languages may include a mechanism for allowing the user to approve scripts provided only from trusted sources. For example, a user conducting an electronic transaction as described above may allow scripts provided from the wallet server to execute, but may prevent other scripts provided by other sources from executing on the user's computer.
A potential security problem encountered with many scripting languages is shown in FIG. 12A. An unscrupulous �cracker� may create a Web site 1204 that is designed to perform malicious activities against users of a legitimate Web server 1206. The cracker site 1204 (shown as the �criminal site� in the figure) may, for example, provide a portion of code, such as a script, to the user. The criminal site 1204 may also induce the user's Web browser 216 to request a particular uniform resource locator (URL) at the legitimate server 1206 (such as the wallet server 140, or any other server on network 102). The referenced URL may be deliberately crafted such that the legitimate server 1206 returns, for example, an error message or other response to the client browser 216. In various embodiments, the response from the legitimate server 1206 may automatically include a portion or variation of the request from the user's Web browser 216. If that response includes JavaScript, VBscript or other code generated as a result of the malicious intent of the criminal site 1204, then the code may be executed on the user's computer. This example illustrates one of many techniques in which a �cracker� may induce a legitimate Web server 1206 to send malicious instructions to a user's Web browser 216. Because the various coding and scripting languages contain instructions for accessing the host computer's file system, registry, or the like, it will be understood that the unauthorized execution of such code is highly undesirable. Nevertheless, the technique shown in FIG. 12A may allow scripting or other code from a criminal site 1204 to be provided to a user's computer. Because the user's computer thinks that the scripting came from a trusted source (i.e. the wallet server), the client's computer may execute the code from the criminal site, thus creating the potential for damage, unauthorized data dissemination or destruction, or the like. FIG. 12B illustrates the correct communication flow that should occur (as opposed to the criminal attack flow shown in FIG. 12A).
In various embodiments, an optional step 1308 suitably includes maintaining a data log of information provided by the various portions of the Web site. All content in which characters have been encoded or removed can be logged so that the log can be reviewed to determine if the Web site is being used to compromise a network client. For example, all content provided from the Web page, all content provided from within the trusted portion, all content having scripting/programming content, all content from outside the trusted portion, or any other part of the Web site content could be logged into one or more data files. The data files may be suitably searched or otherwise consulted to determine whether there have been attempts to provide unauthorized content to users by the server.
In another exemplary embodiment of the present invention, transaction system 100 may be configured with one or more biometric scanners, processors and/or systems. FIG. 14 illustrates an exemplary transaction system 1400 in accordance with the present invention, wherein exemplary components for use in completing an electronic transaction are depicted. While the invention may be described with the use of a smartcard, a smartcard is not required and the invention contemplates similar embodiments using only an account code or number.
System 1400 may include smartcard 202 having an integrated circuit (IC) 1410. Smartcard 202 may also be configured with a biometric sensor 1404, described in further detail herein. System 1400 may also comprise smartcard reader 204 configured to communicate with smartcard 202, computer 110, wallet 140, merchant 120 and/or an access point 1450.
Access point 1450 may be configured as any point of interaction between a smartcard user and transaction system 1400. For example, access point 1450 may include a merchant POS device, a kiosk, a terminal, a computer interface, and/or any other device for facilitating user access to transaction system 1400. Smartcard reader 204 may be configured with a biometric sensor 1604, described in further detail herein. Smartcard 202 may communicate with network 102 through smartcard reader 204.
A biometric system may include one or more technologies, or any portion thereof, to facilitate recognition of a personal identifier, such as, for example a biometric. As used herein, a personal identifier may include a user's voice, fingerprint, facial, ear, signature, vascular patterns, DNA sampling, hand geometry, sound, olfactory, keystroke/typing, iris, retinal, brainwaves, or any other biometric relating to recognition based upon any body part, function, system, attribute and/or other characteristic, or any portion thereof. As used herein, the terms �personal identifier� and �biometric� may be used interchangeably. Certain of these technologies will be described in greater detail herein. Moreover, while some of the examples discussed herein may include a particular biometric system or sample, the invention contemplates any of the biometrics discussed herein in any of the embodiments.
The biometric system may be configured as a security system and may include a registration procedure in which a user of a transaction instrument proffers a sample of his fingerprints, DNA, retinal scan, voice, and/or other biometric sample to an authorized sample receiver (ASR). As used herein, a transaction instrument may refer to a physical smartcard, debit card, charge card, loyalty card, radio-frequency enabled card, or the like. Further, a transaction instrument may also refer to the electronic information stored and/or associated with a physical card. As used herein, all transaction instruments will be referred to herein as �smartcard 202.� An ASR may include a local database, a remote database, a portable storage device, a host system, an issuer system, a merchant system, a smartcard issuer system, an employer, a financial institution, a non-financial institution, a loyalty point provider, a company, the military, the government, a school, a travel entity, a transportation authority, a security company, and/or any other system or entity that may be authorized to receive and store biometric samples and associate the samples with specific biometric databases and/or transaction instruments (e.g., smartcards 202). As used herein, a user of a smartcard, cardmember, or any similar phrase may include the person or device holding or in possession of the smartcard, or it may include any person or device that accompanies or authorizes the smartcard owner to use the smartcard.
FIG. 15 illustrates an exemplary registration procedure in accordance with the present invention. In one embodiment, a cardmember may contact an ASR to submit one or more biometric samples to an ASR (step 1501). The cardmember may contact the ASR and submit a sample in person, through a computer and/or Internet, through software and/or hardware, through a third-party biometric authorization entity, through a kiosk and/or biometric registration terminal, and/or by any other direct or indirect means, communication device or interface for a person to contact an ASR.
A cardmember may then proffer a biometric sample to the ASR (step 1503). As used herein, a biometric sample may be any one or more of the biometric samples or technologies, or portion thereof, described herein or known in the art. By proffering one or more biometric samples, a biometric may be scanned by at least one of a retinal scan, iris scan, fingerprint scan, hand print scan, hand geometry scan, voice print scan, vascular scan, facial and/or ear scan, signature scan, keystroke scan, olfactory scan, auditory emissions scan, DNA scan, and/or any other type of scan to obtain a biometric sample. Upon scanning the sample, the system may submit the scanned sample to the ASR in portions during the scan, upon completing the scan or in batch mode after a certain time period. The scanned sample may include a hardcopy (e.g., photograph), digital representation, an analog version or any other configuration for transmitting the sample. The ASR receives the sample and the ASR may also receive copies of a cardmember's biometric data along with the sample or at a different time (or within a different data packet) from receiving the sample.
The ASR and/or cardmember may correlate and/or register the sample with cardmember information to create a data packet for the sample and store the data packet in digital and/or any storage medium known in the art. As used herein, a data packet may include the digitized information relating to at least one of a biometric sample, a registered biometric sample, a stored biometric sample, a proffered biometric, a proffered biometric sample, cardmember information, smartcard information and/or any other information. The terms �data packet,� �biometric sample,� and �sample� may be used interchangeably. As used herein, registered samples may include samples that have been proffered, stored and associated with cardmember information. By storing the data packet in digital format, the ASR may digitize any information contained in one of the biometric scans described herein. By storing the data packet in any storage medium, the ASR may print and/or store any biometric sample. Hardcopy storage may be desirable for back-up and archival purposes.
The biometric sample may also be associated with user information to create a data packet (step 1505). The sample may be associated with user information at any step in the process such as, for example, prior to submission, during submission and/or after submission. In one embodiment, the user may input a PIN number or zip code into access point 1450, then scan the biometric to create the biometric sample. The local access point may associate the biometric sample data with the PIN and zip code, then transmit the entire packet of information to the ASR. In another embodiment, the access point may facilitate transmitting the sample to an ASR, and during the transmission, the sample may be transmitted through a third system which adds personal information to the sample.
The information associated with the biometric sample may include any information such as, for example, cardmember information, smartcard 202 information, smartcard 202 identifier information, smartcard 202 issuer information, smartcard 202 operability information, and/or smartcard 202 manufacturing information. Smartcard 202 information may be not limited to smartcard chip information and may include information related to any transaction instrument such as transponders, credit cards, debit cards, merchant-specific cards, loyalty point cards, cash accounts and any other transaction instruments and/or accounts. The cardmember information may also contain information about the user including personal information�such as name, address, and contact details; financial information�such as one or more financial accounts associated with the cardmember; loyalty point information�such as one or more loyalty point accounts (e.g., airline miles, charge card loyalty points, frequent diner points) associated with the cardmember; and/or non-financial information�such as employee information, employer information, medical information, family information, and/or other information that may be used in accordance with a cardmember.
For example, a cardmember may have previously associated a credit card account (or charge card account), a debit card account, and a frequent flier account with his biometric sample which may be stored at an ASR. Later, when cardmember desires to purchase groceries, cardmember may submit his biometric sample while using smartcard 202 for the purchase at access point 1450. Access point 1450 may facilitate sending the biometric sample to the ASR such that the ASR authorizes the biometric sample and checks a look-up table in the ASR database to determine if any information may be associated with the sample. If information (e.g., financial accounts) may be associated with the sample, the ASR may transmit the information to the access point. The access point may then present cardmember with a list of the three accounts associated with the biometric sample. Cardmember and/or a merchant may then chose one of the accounts in order to continue and finalize the transaction.
In another embodiment, cardmember may associate each account with a different biometric sample. For example, during registration, cardmember may submit a sample of his right index fingerprint, and request that the system primarily associate this sample with a particular credit card account. Cardmember may additionally submit a sample of his left index fingerprint and request that the system primarily associate the sample with a particular debit account. Additionally, cardmember may submit his right thumbprint and request that the system primarily associate that sample with a particular frequent flier account. By �primarily� associating a sample with an account, the system initially associates the sample with that account. For example, cardmember submitting his right index fingerprint for a financial transaction may have money for the transaction taken from his credit card account. Cardmember may additionally specify which accounts should be secondarily associated with a sample. For example, cardmember may have a debit card account secondarily associated with his right index fingerprint. As a result, if cardmember submits his right index fingerprint for a transaction, and the primary account associated with the sample is overdrawn or unavailable, the secondary account may be accessed in order to further the transaction.
While primary and secondary account association are described herein, any number of accounts may be associated with a sample. Moreover, any hierarchy or rules may be implemented with respect to the association. For example, the cardmember may instruct the system to access a debit card account when it receives a right index fingerprint sample, the purchase qualifies for loyalty points with a certain airline and the purchase amount is less than $50. The cardmember may additionally instruct the system to access a credit card account if it receives a right index fingerprint sample, the purchase does not qualify for airline miles and the purchase amount is greater than $50. Further, while fingerprint samples are discussed herein, any biometric sample may have one or more accounts associated with it and may be used to facilitate a transaction using any of the routines discussed herein.
The ASR and/or cardmember may associate a specific smartcard 202 identifier with the biometric sample by any method known in the art for associating an identifier (e.g., through the use of software, hardware and/or manual entry.) The ASR may additionally verify the cardmember and/or smartcard 202 by using one or more forms of the user's secondary identification (step 1507). For example, the ASR may verify the cardmember by matching the smartcard information to information retrieved from scanning information from a cardmember's driver's license. The ASR may verify smartcard 202 by contacting the vendor of smartcard 202 to confirm that smartcard 202 was issued to a specific cardmember. In another embodiment, the ASR may activate smartcard 202 during the registration procedure to confirm that the smartcard 202 smartcard chip identifier and other information may be properly associated with the cardmember and the cardmember's specific biometric samples. The ASR may additionally employ one or more verification methods to confirm that the biometric sample belongs to the user, such as, for example, the ASR may request from the user demographic information, further biometric samples and/or any other information. As used herein, �confirm,� �confirmation� or any similar term includes verifying or substantially verifying the accuracy, existence, non-existence, corroboration, and/or the like of the information, component, or any portion thereof. The ASR may additionally employ one or more additional processing methods in order to facilitate association of a biometric sample. As used herein, the term processing may include scanning, detecting, associating, digitizing, printing, comparing, storing, encrypting, decrypting, and/or verifying a biometric and/or a biometric sample, or any portion thereof.
Upon association, authentication and/or verification of the biometric sample and smartcard 202, the system may create a data packet store the data packet and smartcard 202 identifier (step 1509) in one or more databases on and/or in communication with system 1400 via a network, server, computer, or any other means of communicating as described herein. The database(s) may be any type of database described herein. For example, a biometric sample stored on smartcard 202 may be stored in the memory and/or other database of a transaction instrument. The database(s) may be located at or operated by any of the entities discussed herein such as, for example, the ASR and/or by a third-party biometric database operator.
The information stored in the database may be sorted or stored according to one or more characteristics associated with the sample in order to facilitate faster access to the stored sample. For example, fingerprint samples may be stored in a separate database than voice prints. As another example, all fingerprints with certain whirl patterns may be stored in a separate sub-database and/or database from fingerprints with arch patterns.
The biometric samples may also be stored and/or associated with a personal identification number (PIN) and/or other identifier to facilitate access to the sample. The PIN may be cardmember selected or randomly assigned to the biometric sample. The PIN may consist of any characters such as, for example, alphanumeric characters and/or foreign language characters.
The system may further protect the samples by providing additional security with the sample. The security may include, for example, encryption, decryption, security keys, digital certificates, firewalls and/or any other security methods known in the art and discussed herein. One or more security vendors may utilize the security methods to store and/or access the biometric samples. The present invention anticipates that storage of the biometric samples may be such that a sample may be first encrypted and/or stored under a security procedure, such that the sample may only be accessed by a vendor with the proper level of access or security which corresponds to or provides access to the stored sample. The samples may be accessible by certain vendors such as, for example, smartcard 202 transaction account provider system, an issuer system, a merchant system, a smartcard issuer system, an employer, a financial institution, a non-financial institution, a loyalty-point provider, a company, the military, the government, a school, a travel entity, a transportation authority, and/or a security company.
The smartcard of the invention may include a particular security system wherein the security system incorporates a particular biometric system. As shown in FIG. 14, smartcard 202 may include a biometric security system 1402 configured for facilitating biometric security using, for example, fingerprint samples. As used herein, fingerprint samples may include samples of one or more fingerprints, thumbprints, palmprints, footprints, and/or any portion thereof. Biometric security system 1402 may include a biometric sensor 1404 which may be configured with a sensor and/or other hardware and/or software for acquiring and/or processing the biometric data from the person such as, for example, optical scanning, capacitance scanning, or otherwise sensing the portion of cardmember. In one embodiment, biometric sensor 1404 of the security system 1402 may scan a finger of a cardmember in order to acquire his fingerprint characteristics into smartcard 202. Biometric sensor 1404 may be in communication with integrated circuit 110 such that IC 110 receives the fingerprint information and transmits a signal to smartcard 202 to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, the user may place his finger on the biometric sensor to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. Smartcard 202 may digitize the fingerprint and compare it against a digitized fingerprint stored in a database included on smartcard 202. The fingerprint information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a Universal Serial Bus (USB) connection, a wireless connection, a computer, a network and/or any other means for communicating. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. As used herein, compare, comparison and similar terms may include determining similarities, differences, existence of elements, non-existence of elements and/or the like.
A CPU such as, for example, customer computer 110, and/or merchant 130 may be configured to facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors. One or more comparison techniques and/or technologies may be used for comparisons. For example, for fingerprint comparisons, the CPU may utilize an existing database to compare fingerprint minutia such as, for example, ridge endings, bifurcation, lakes or enclosures, short ridges, dots, spurs and crossovers, pore size and location, Henry System categories such as loops, whorls, and arches, and/or any other method known in the art for fingerprint comparisons.
Smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples may be not being used. For example, to detect the use of fake fingers, smartcard 202 may be further configured to measure blood flow, to check for correctly aligned ridges at the edges of the fingers, and/or any other secondary procedure to reduce biometric security fraud. Other security procedures for ensuring the authenticity of biometric samples may include monitoring pupil dilation for retinal and/or iris scans, pressure sensors, blinking sensors, human motion sensors, body heat sensors, eyeball pressure sensors and/or any other procedures known in the art for authenticating the authenticity of biometric samples.
After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication, and the transaction may proceed accordingly. However, the invention contemplates that the verification of biometric information may occur at any point in the transaction such as, for example, after the mutual authentication. At any point in the transaction, the system may additionally request cardmember to enter a PIN and/or other identifier associated with the transaction account and/or biometric sample to provide further verification of cardmember's identification. As part of the transaction, cardmember payor may be requested to select from one of the financial accounts, loyalty accounts, credit accounts, debit account, and/or other accounts associated with the biometric sample. The user may be presented with a list of account options on a display associated with smartcard reader 204, smartcard 202, a third-party security device and/or any other financial or transaction device association with a transaction. In another embodiment, a payee may select one of the accounts. For example, a department store payee may manually and/or automatically select a department store issued account, if available, for a transaction.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using facial recognition or recognition of any other body part or object. As discussed herein, facial recognition may include recognition of any facial features obtained through a facial scan such as, for example, the eyes, nose, cheeks, jaw line, forehead, chin, ear features, head shape, hairline, neck features, shoulder height, forehead slope, lip shape, distance between the ears and/or any portion thereof. Biometric security system 1402 may include a biometric sensor 1404 which may be configured with a video camera, optical scanner, imaging radar, ultraviolet imaging and/or other hardware and/or software for acquiring the biometric data from the person such as, for example video scanning, optical scanning or otherwise sensing any portion of cardmember. In one embodiment, biometric sensor 1404 of the security system 1402 may scan the face of a cardmember in order to acquire his facial characteristics into smartcard 202. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the facial information and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may scan the facial features of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. Security system 1402 may be configured such that cardmember may stand at least two-feet away from sensor 1404. Additionally, sensor 1404 may be configured to detect facial features of a user turned at least 30 degrees toward the camera.
Smartcard 202 may digitize the facial scan and compare it against a digitized facial scan stored in a database included on smartcard 202. The facial scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples.
The CPU may facilitate the local comparison to authenticate the biometric and may validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors. One or more comparison techniques and/or technologies may be used for comparisons. For example, for facial recognition, the CPU may utilize an existing database to compare nodal points such as the distance between the eyes, the width of the nose, the jaw line, and the depth of the user's eye sockets. While only some types of nodal points are listed, the present invention recognizes that it is known that there are over 80 different nodal points on a human face that may be used for comparison in the present invention. Additionally, third-party devices such as facial recognition software and/or hardware systems may be used to facilitate facial recognition, such as the systems developed by Viisage, Imagis, and Identix which employ complex algorithms that facilitate both searching facial and/or ear scans and adjusting stored data based on eyewear, facial hair, and other changes in outward facial and/or ear appearance.
Smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples may be not being used. For example, to detect the use of fake facial features, smartcard 202 may be further configured to measure blood flow, to detect a thermal pattern associated with facial features, and/or any other secondary procedure to reduce biometric security fraud. Other security procedures for ensuring the authenticity of biometric samples may include monitoring pupil dilation for retinal and/or iris scans, pressure sensors, blinking sensors, human motion sensors, body heat sensors and/or any other procedures known in the art for authenticating the authenticity of biometric samples. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by any of the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using voice recognition. As discussed herein, voice recognition may include recognition of voice and/or speaker features such as, phonated excitation, whispered excitation, frication excitation, compression, vibration, parametric waveforms, tone, pitch, dialect, annunciation, and/or any portion thereof. As discussed herein, these voice recognition features may be collectively referred to as a �voice print.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an audio capture device such as a microphone, telephone, cellular phone, computer, speaker and/or other hardware and/or software for acquiring the biometric data from the person such as, for example auditory scanning, recording or otherwise sensing the portion of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the voice print of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a voice print, when a user recites, for example, a pass phrase or audible PIN. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the voice print and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the voice print and compare it against a digitized voice print stored in a database included on smartcard 202. The voice print information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
One or more comparison techniques and/or technologies may be used for comparisons. For example, for voice recognition, the CPU may utilize an existing database to compare the voice print by comparing voice print waveforms in the time domain, by comparing energy content in the voice prints across the frequency domain, by the use of stochastic models and/or template models, and/or by any other voice recognition method known in the art. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as voice recognition software and/or hardware systems to facilitate voice print comparisons, such as, for example SAFLINK and Voice Security Systems.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a recorded voice, system 1402 may be further configured to detect audio noise associated with an electronic device and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment of the present invention, biometric security system 1402 may be configured for facilitating biometric security using signature recognition. As discussed herein, signature recognition may include recognition of the shape, speed, stroke, stylus pressure, timing information, character height and width and/or other signature information and/or any portion thereof during the act of signing. As discussed herein, these signature recognition features may be collectively referred to as a �signature scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an LCD screen, digitizing tablet and/or other hardware and/or software that facilitates digitization of biometric data from the person such as, for example signature scanning, recording or otherwise sensing the signature of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the signature scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a signature scan, when a user signs, for example, his name or a specified word or phrase. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the signature scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the signature scan and compare it against a digitized signature scan stored in a database included on smartcard 202. The signature scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for voice recognition, the CPU may utilize an existing database to compare the features of a signature scan by comparing graphs, charts, and or other data relating to shape, speed, stroke, stylus pressure, timing information, character height and width and/or by any other signature recognition data. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as signature recognition software and/or hardware systems to facilitate signature scan comparisons, such as, for example CyberSIGN, LCI Computer Group, and Xenetek.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false signature device, system 1402 may be further configured to detect a thermal pattern associated with a human hand and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using vascular pattern recognition. As discussed herein, vascular pattern may include recognition of structures, depths, and other biometric reference points of arterial tissues, vein tissues, capillary tissues, epithelial tissues, connective tissues, muscle tissues, nervous and/or other inner tissues and/or any portion thereof. As discussed herein, these vascular pattern features may be collectively referred to as a �vascular scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an optical scanner, x-ray, ultrasound, computed tomography, thermal scanner and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a vascular pattern of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the vascular scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a vascular scan, when a user places his hand in front of an optical scanner. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the vascular scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the vascular scan based on biometric reference points and compare it against a digitized vascular scan stored in a database included on smartcard 202. The vascular scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for vascular pattern recognition, the CPU may utilize an existing database to compare the vascular scan by comparing biometric reference points, vascular coordinates, vascular and/or tissue lengths, widths and depths; blood pressure including waveforms, dicrotic notches, diastolic pressure, systolic pressure, anacrotic notches and pulse pressure, and/or any other characteristic of vascular and/or tissue patterns. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as vascular pattern recognition software and/or hardware systems to facilitate vascular scan comparisons, such as, for example VEID International, Identica and ABT Advanced Biometric Technologies.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false vascular pattern, system 1402 may be further configured to detect a thermal pattern associated with vascular patterns and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using DNA biometrics. As discussed herein, DNA biometrics may include recognition of structures, gene sequences, and other genetic characteristics of skin tissue, hair tissue, and/or any other human tissue and/or any portion thereof containing genetic information. As discussed herein, these genetic features may be collectively referred to as a �DNA scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, a chemical sensor and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a DNA scan of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the DNA scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a DNA scan, when a user submits genetic material to sensor 1404. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the DNA scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the DNA scan based on genetic information reference points and compare it against a digitized DNA scan stored in a database included on smartcard 202. The DNA scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for DNA recognition, the CPU may utilize an existing database to compare the DNA scan by comparing nucleotides, code sequences, regulatory regions, initiation and stop codons, exon/intron borders, and/or any other characteristics of DNA. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as DNA recognition software and/or hardware systems to facilitate DNA scan comparisons, such as, for example Applied DNA Sciences.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use false DNA, system 1402 may be further configured to take a DNA sample directly off a user and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using hand geometry biometrics. As discussed herein, hand geometry biometrics may include recognition of hand geometry parameters, such as, for example, hand shape, finger length, finger thickness, finger curvature and/or any portion thereof. As discussed herein, these hand geometry features may be collectively referred to as a �hand geometry scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, a three-dimensional imaging system and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a hand geometry scan of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the hand geometry scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a hand geometry scan, when a user places his hand in front of an optical scanner. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the hand geometry scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the hand geometry scan based on hand geometry parameters and compare it against a digitized hand geometry scan stored in a database included on smartcard 202. The hand geometry scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for hand geometry recognition, the CPU may utilize an existing database to compare hand shape, finger length, finger thickness, finger curvature and/or any other of the 90 different hand geometry parameters known in the art. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as hand geometry recognition software and/or hardware systems to facilitate hand geometry scan comparisons, such as, for example IR Recognition Services and Human Recognition Services.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of false hands, system 1402 may be further configured to measure blood flow, to detect body heat and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using auditory emissions biometrics. As discussed herein, auditory emissions biometrics may include emissions that an ear generates when stimulated by sound, such as vibrations and reverberated sound waves and/or any portion thereof. As discussed herein, these auditory emissions features may be collectively referred to as an �auditory emissions scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, an auditory sensor, an auditory generator and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example sound generating, scanning, detecting or otherwise sensing an auditory emissions scan of card member.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the auditory emissions scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture an auditory emissions scan, when a user hears an auditory stimulant and the user's auditory emissions may be detected by biometric sensor 1404. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the auditory emissions scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the auditory emissions scan based on emissions waveforms and compare it against a digitized auditory emissions scan stored in a database included on smartcard 202. The auditory emissions scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for auditory emissions recognition, the CPU may utilize an existing database to compare emissions difference in frequency, wavelength, and/or other characteristics between the transmitted and reverberated sound waves. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as auditory emissions recognition software and/or hardware systems to facilitate auditory emissions scan comparisons, such as, for example those developed by the University of Southampton.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of false auditory emissions scans, system 1402 may be further configured to detect electronic noise associated with a device producing electronic auditory emissions and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using olfactory biometrics. As discussed herein, olfactory biometrics may include odorants that a body generates when odor evaporates from and/or any portion thereof. As discussed herein, these odorants may be collectively referred to as a �smellprint.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an electronic sensor, a chemical sensor, and/or an electronic or chemical sensor configured as an array of chemical sensors, wherein each chemical sensor may detect a specific odorants, or smell. In another embodiment, biometric sensor 1404 may be configured as a gas chromatograph, spectrometer, conductivity sensor, piezoelectric sensor and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a smellprint of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the smellprint of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a smellprint, when a user stands within at least two feet of sensor 1404. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the smellprint and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the smellprint and compare it against a digitized smellprint stored in a database included on smartcard 202. The smellprint information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for smellprints, the CPU may utilize an existing database to compare the difference in molecular structures, chemical compounds, temperature, mass differences, pressure, force, and odorants by using statistical, ANN and neuromorphic techniques. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as smellprint recognition software and/or hardware systems to facilitate smellprint comparisons, such as, for example those developed by Company Mastiff Electronic Systems.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false odorant, system 1402 may be further configured to detect man-made smells, abnormal odorants, body heat and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using keystroke/typing recognition biometrics. As discussed herein, keystroke/typing recognition biometrics may include recognition of the duration of keystrokes, latencies between keystrokes, inter-keystroke times, typing error frequency, force keystrokes and/or any portion thereof. As discussed herein, these features may be collectively referred to as a �keystroke scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an electronic sensor, an optical sensor, a keyboard, and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a keystroke scan of cardmember. A keyboard may include any type of input device, such as, for example, flat electronic pads with labels as keys, touch screens, and/or any other types of input devices.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the keystroke scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a keystroke scan, when a user types, for example, a PIN or pass phrase into a keyboard configured with sensor 1404. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the keystroke scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the keystroke scan based on keystroke characteristics and compare the scan against a digitized keystroke scan stored in a database included on smartcard 202. The keystroke scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for keystroke scans, the CPU may utilize an existing database to compare the behavioral, temporal and physical characteristics associated with keystrokes. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as keystroke scan recognition software and/or hardware systems to facilitate keystroke scan comparisons, such as, for example those developed by BioPassword� by BioNet Systems, LLC.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false keystroke, system 1402 may be further configured to detect body heat and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using iris scan biometrics. As discussed herein, iris scan biometrics may include recognition of characteristics of the colored tissues surrounding the pupil, such as the rings, furrows and freckles and/or any portion thereof. As discussed herein, these characteristics may be collectively referred to as an �iris scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with a video camera, an optical scanner, a digital camera, a charge coupled device and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing an iris scan of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the iris scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture an iris scan, when a user uses sensor 1404 to scan his iris while he may be up to five feet away from sensor 1404. Sensor 1404 may scan the user's iris through contacts, sunglasses, and/or any other type of eye glasses. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the iris scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the iris scan based on iris characteristics and compare the scan against a digitized iris scan stored in a database included on smartcard 202. The iris scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for iris scans, the CPU may utilize an existing database to compare the surface patterns of the iris by localizing the boundaries and the eyelid contours of the iris and creating a phase code for the texture sequence in the iris. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as iris scan recognition software and/or hardware systems to facilitate iris scan comparisons, such as, for example those developed by Iridian, LG Electronics and BioCom.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false iris, system 1402 may be further configured to vary the light shone into the eye to watch for pupil dilation, to detect body heat and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using retinal scanning biometrics. As discussed herein, retinal scanning biometrics may include recognition of characteristics of the reflected retinal pattern of the eye, such as the location, structure, size, and shape of blood vessels and/or any portion thereof. As discussed herein, these characteristics may be collectively referred to as a �retinal scan.� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with low-intensity light source, such as an infrared source, an optical coupler and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a retinal scan of cardmember.
In one exemplary application of smartcard 202 incorporating biometric security system 1402, system 1402 may capture the iris scan of the cardmember to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. In one embodiment, biometric sensor 1404 of the security system 1402 may capture a retinal scan, when a sensor 1404 shines a light source into the user's retina and detects the reflected retina pattern. Sensor 1404 may detect a user's retinal pattern when the user may be up to five feet away from sensor 1404. Biometric sensor 1404 may be in communication with IC 110 such that sensor 1404 receives the retinal scan and transmits a signal to the CPU to facilitate activating the operation of smartcard 202. A power source may be in communication with biometric sensor 1404 and IC 110 to provide the desired power for operation of the biometric security system components.
Smartcard 202 may digitize the retinal scan based on retinal characteristics and compare the scan against a digitized iris scan stored in a database included on smartcard 202. The retinal scan information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard reader 204, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The CPU may facilitate the local comparison to authenticate the biometric and validate the information. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by one or more third-party security vendors.
For example, for retinal scans, the CPU may utilize an existing database to compare the blood vessel patterns of the retina by comparing stored and detected retinal patterns. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as retinal scan recognition software and/or hardware systems to facilitate keystroke scan comparisons, such as, for example those developed by EyeKey and Retinal Technologies.
Smartcard 202 and/or any other third-party security vendor system used in connection with smartcard 202 may additionally be configured with secondary security procedures to confirm that fake biometric samples are not being used. For example, to detect the use of a false retina, system 1402 may be further configured to vary the light shone into the eye to watch for pupil dilation, to detect body heat and/or any other secondary procedure to thwart biometric security fraud. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication by the methods described herein.
Additionally, smartcard 202 may be configured with a security verification mechanism to verify whether the sampled biometric and/or related information is staying on smartcard 202 and/or reader 204. The security verification mechanism may be used to safeguard biometric information from getting lost and/or compromised on the host system.
In an additional or alternate embodiment, smartcard reader 204 may include one or more security system, wherein the security system incorporates one or more biometric system. As shown in FIG. 16, smartcard reader 204 includes a biometric security system 1602 configured for facilitating biometric security using a biometric sample. Biometric security system 1602 may include a biometric sensor 1604 which may be configured with a sensor, video camera, digital camera, optical scanner, light source and/or other hardware and/or software for acquiring biometric data form the person such as, for example, optical scanning, chemical sensing, or otherwise detecting the portion of cardmember. Biometric sensor 1604 may be in communication with a sensor interface/driver 1606 such that sensor interface 1606 receives biometric information and transmits a signal to the CPU to facilitate activating the operation of smartcard 202.
In one exemplary application of smartcard reader 204 including biometric security system 1602, the user may submit a biometric sample to the biometric sensor to initiate the mutual authentication process between smartcard 202 and smartcard reader 204, and/or to provide verification of the user's identity. Smartcard reader 204 may digitize the sample and compare it against a digitized biometric sample stored in a database (e.g., database 1610) included on smartcard reader 204. The biometric sample information may additionally be compared with information from one or more third-party databases communicating with smartcard 202 through any communication software and/or hardware, including for example, smartcard 202, a USB connection, a wireless connection, a computer, a network and/or any other means for communicating. The transfer of information may include use of encryption decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard reader 204 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples.
A smartcard reader CPU 1614 may facilitate the local comparison to authenticate the biometric sample and may validate the information. Reader CPU 1614 may be configured in a manner similar to that of the CPU. Any of the embodiments may alternatively or additionally include remote comparisons performed or controlled by third-party security vendors in any way known in the art for comparing biometric data.
Smartcard reader 204 may also be configured with secondary security procedures biometric to confirm that fake biometric samples are not being used. For example, smartcard reader 204 may be further configured to measure blood flow, body heat and/or any other secondary procedure to reduce biometric security fraud. Other security procedures for ensuring the authenticity of biometric samples may include monitoring pupil dilation for retinal and/or iris scans, pressure sensors, blinking sensors, human motion sensors, and/or any other procedures known in the art for authenticating the authenticity of biometric samples. After verifying the biometric information, smartcard 202 and smartcard reader 204 may begin authentication, and the transaction may proceed accordingly.
Additionally, CPU 1614 may be configured with a security verification mechanism to verify whether the sampled biometric and/or related information is staying on smartcard 202 and/or reader 204. The security verification mechanism may be used to safeguard biometric information from getting lost and/or compromised on the host system.
While the biometric safeguard mechanisms describe smartcard 202 and/or smartcard reader 204 configured with a biometric safeguard mechanism, any part of system 1400 may be equipped with a biometric safeguard system. For example, the invention contemplates receiving a biometric sample only at the reader, only at the smartcard, at both the smartcard and the reader, or at any other combination of location or device. As such, any scanner or database discussed herein may be located within or associated with another device. For example, the smartcard may scan a user biometric, but the database used for comparison may be located within the reader or merchant server. In other embodiments, the biometric security device may be located away from the point of sale device and/or provide other functions. For example, the biometric security device may be located near the item to be purchased or located in any other location within or outside of the merchant. In one embodiment, the biometric security device may be located outside of a jewelry display to allow a user to not only start the authentication process before check-out, but also to allow access to the product within the display case. In this regard, the biometric security device may communicate the information to the point of sale device so access point 1450 may verify that the person that entered the jewelry box is the same person that is now buying the jewelry. In another embodiment, any portion of system 1400 may be configured with a biometric security device. The biometric security device may be attached and/or free-standing. Biometric security devices may be configured for local and/or third-party operation. For example, the present invention contemplates the use of third-party fingerprint scanning and security devices such as those made by Interlink Electronics, Keytronic, Identix Biotouch, BIOmetricID, onClick, and/or other third-party vendors.
In yet another embodiment, the database used for comparison may contain terrorist and/or criminal information. As used herein, terrorists and/or criminals may include terrorists, felons, criminals, convicts, indicted persons, insurgents, revolutionaries and/or other offenders. The information may include biometric information, personal information as described herein, arrest records, aliases used, country of residence, affiliations with gangs and terrorist groups, and/or any other terrorist and/or criminal information.
As an example of a secondary security procedure in accordance with the present invention, the biometric sensor 1404, 1604 may be configured to allow a finite number of scans. For example, biometric sensor 1404, 1604 may be configured to only accept data from a single scan. As a result, biometric sensor 1404, 1604 may turn off or deactivate smartcard 202 and/or smartcard reader 204 if more than one scan may be needed to obtain a biometric sample. Biometric sensor 1404, 1604 may also be configured to accept a preset limit of scans. For example, biometric sensor 1404, 1604 may receive three invalid biometric samples before it turns off and/or deactivates smartcard 202 and/or smartcard reader 204.
The sensor or any other part of system 1400 may also activate upon sensing a particular type or group of biometric samples. The activation may include sending a signal, blinking, audible sound, visual display, beeping, providing an olfactory signal, providing a physical touch signal, and providing a temperature signal to said user and/or the like. For example, if the sensor detects information from a gold card member, the system may display a special offer on access point 1450. If the sensor detects a repeat customer, the sensor may signal or notify a manager to approach the customer and thank them for their repeat business. In another embodiment, the system may send a signal to a primary account holder or any other person or device to notify them that the smartcard is being used or that a condition or rule is being violated (e.g., charge above $1000).
Any of the biometric security systems described herein may additionally be configured with a fraud protection log. That is, a biometric security system, such as biometric security system 1402, 1602 may be configured to log all biometric samples submitted on smartcard 202 and/or smartcard reader 204 and store the log information on databases on and/or communicating with system 1402, 1602. If a new and/or different biometric sample is submitted that differs from the log data, biometric security system 1402, 1602 may employ a security procedure such as deactivation, warning authorities, requesting a secondary scan, and/or any other security procedure.
Biometric security system 1402, 1602 and/or the biometric security system configured with system 1400 may also be configured to obtain a plurality of biometric samples for verification and/or other security purposes. For example, after biometric security system 1402, receives a first biometric sample (e.g., scans one finger), it may be configured to receive a second biometric sample (e.g., scans a second finger). The first and second biometric samples may be compared with stored biometric samples by any of the methods disclosed herein. The second biometric sample may be the only sample compared with stored biometric samples if the first sample may be unreadable or inadequate.
In yet another exemplary embodiment of the present invention, smartcard 202 may be equipped with a biometric safeguard mechanism. For example, in one exemplary application of smartcard 202, smartcard 202 may use biometric security system 1402 to authorize a transaction that violates an established rule, such as, for example, a purchase exceeding an established per purchase spending limit, a purchase exceeding a preset number of transactions, any portion of a purchase and/or transaction involving non-monetary funds (e.g., paying a portion of the transaction with loyalty points, coupons, airline miles, etc.) and/or any other purchase and/or transaction exceeding a preset or established limit. Cardmember, a third-party issuer system a third-party financial system, a company and/or any other entity or system may establish the preset limits. The limits may be used to prevent fraud, theft, overdrafts, and/or other non-desirable situations associated with financial and non-financial accounts. For example, if smartcard 202 is stolen and the thief tries to make a large purchase with the card, the biometric safeguard mechanism may prevent the purchase until cardmember's identity is verified by biometric means.
For example, smartcard 202 may activate biometric security system 1402 to notify a user a user who is attempting to make a large purchase that the user must provide a biometric sample to verify the user's identity. By notifying, smartcard 202 may be configured to provide an audible signal, visual signal, optical signal, mechanical signal, vibration, blinking, signaling, beeping, providing an olfactory signal, providing a physical touch signal, and providing a temperature signal to said user and/or provide any other notification to a cardmember. Accordingly, cardmember may provide such verification by submitting a biometric sample, for example placing his finger over biometric sensor 1404 and/or any other biometric security devices used in association with smartcard 202. Biometric sensor 1404 may then digitize the biometric sample (e.g., fingerprint) and use the digitized sample for verification by any of the methods described herein. Once cardmember's identity and/or smartcard 202 smartcard chip identifier may be verified, smartcard 202 may provide a transaction authorized signal to the CPU (and/or to IC 110) for forwarding to smartcard reader 204. Smartcard reader 204 may then provide the transaction authorized signal to access point 1450 in a similar manner as is done with conventional PIN driven systems and access point 1450 may process the transaction under the merchant's business as usual standard. If smartcard 202 has been stolen, then cardmember's identity may not be verified and the transaction may be cancelled. Additionally, one or more further security procedures may be triggered, such as, for example, smartcard 202 may deactivate, smartcard 202 may send a notification to a security vendor, smartcard 202 may be confiscated by the merchant and/or any other security procedures may be used.
In another exemplary embodiment, smartcard reader 204 may be equipped with a biometric safeguard mechanism. For example, in one exemplary application of smartcard reader 204, smartcard reader 204 may use biometric security system 1602 to authorize a transaction that violates an established rule, such as, for example, a purchase exceeding an established per purchase spending limit, a purchase exceeding a preset number of transactions and/or any other purchase exceeding a preset or established limit. Cardmember, a third-party issuer system a third-party financial system, a company and/or any other entity or system may establish the preset limits. The limits may be used to prevent fraud, theft, overdrafts, and/or other non-desirable situations associated with financial and non-financial accounts. For example, if smartcard 202 is stolen and the thief tries to make a large purchase with the card, the biometric safeguard mechanism may prevent the purchase until cardmember's identity is verified by biometric means.
In one example, where cardmember is using a company-issued smartcard 202, smartcard 202 may the have a pre-set limit of transactions that may be completed before biometric verification is required. If the user exceeds the transaction limit, smartcard reader 204 may be configured to scan a biometric sample in order to verify the user's identity. Accordingly, the user may provide such verification by submitting a biometric sample, for example submitting a retinal scan to biometric sensor 1604. Smartcard reader 204 may then digitize the biometric sample (e.g., retinal pattern) and use the digitized sample for verification by any of the methods described herein. Once cardmember's identity and/or smartcard 202 smartcard chip identifier may be verified, smartcard reader 204 may receive a transaction authorized signal from a security vendor authorized to give such a signal. Smartcard reader 204 may then provide the transaction authorized signal to access point 1450 in similar manner as is done with conventional PIN driven systems and access point 1450 may process the transaction under the merchant's business as usual standard.
While the biometric safeguard mechanisms described herein use fingerprint scanning and retinal scanning for biometric sample verification for exemplification, any biometric sample may be submitted for verification, authorization and/or any other safeguard purpose. For example the present invention contemplates the use of voice recognition, facial and/or ear recognition, signature recognition, vascular patterns, DNA sampling, hand geometry, auditory emissions recognition, olfactory recognition, keystroke/typing recognition, iris scans, and/or any other biometric known in the art.
In another exemplary embodiment of the present invention, one or more biometric samples may be used to sign and/or encrypt information. For example, smartcard 202 and/or reader 2500 may be configured to receive a biometric sample from a user. The sample may then be digitized and used, for example, as a variable in an encryption calculation to secure data. If the user wants to retrieve the encrypted data, the user must submit the relevant biometric sample and have it authenticated by any of the methods described herein. Once the biometric sample is authenticated, the data will be decrypted for access.
Similarly, a biometric may be used as both a private key and a public key for encryption purposes. In one exemplary embodiment, an entity may use stored biometric sample information to encrypt data in a manner similar to a public key. The data may then be configured such that it is only accessible by a real biometric sample, for example, by a user proffering a fingerprint sample at a reader. Upon verification of the real biometric sample, the data may be decrypted and/or retrieved.
While the exemplary embodiments describe herein make reference to identification, authentication and authorization processes, it should be understood that the biometric security systems and methods described herein may be used for identification purposes only, authentication purposes only, and/or authorization purposes only. Similarly, any combination of identification, authentication and/or authorization systems and methods may be used in conjunction with the present invention.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4453074Oct 19, 1981Jun 5, 1984American Express CompanyProtection system for intelligent cardsUS4582985Mar 18, 1982Apr 15, 1986Loefberg BoAdsorption using active charcoalUS4747147Jun 16, 1986May 24, 1988Sparrow Malcolm KFingerprint recognition and retrieval systemUS4993068Nov 27, 1989Feb 12, 1991Motorola, Inc.Unforgeable personal identification systemUS5175416May 17, 1991Dec 29, 1992Mansvelt Andre PeterFunds transfer systemUS5180902May 17, 1991Jan 19, 1993David SchickSelf verifying transaction card with disabling capabilityUS5193114Aug 8, 1991Mar 9, 1993Moseley Donald RConsumer oriented smart card system and authentication techniquesUS5245329Apr 27, 1989Sep 14, 1993Security People Inc.Access control system with mechanical keys which store dataUS5321751Feb 18, 1993Jun 14, 1994Eastman Kodak CompanyMethod and apparatus for credit card verificationUS5438184Oct 26, 1993Aug 1, 1995Verifone Inc.Method and apparatus for electronic cash transactionsUS5461217Feb 8, 1994Oct 24, 1995At&T Ipm Corp.Secure money transfer techniques using smart cardsUS5513272Dec 5, 1994Apr 30, 1996Wizards, LlcSystem for verifying use of a credit/identification card including recording of physical attributes of unauthorized usersUS5521966Dec 14, 1993May 28, 1996At&T Corp.Method and system for mediating transactions that use portable smart cardsUS5534857Nov 10, 1992Jul 9, 1996Security Domain Pty. Ltd.Method and system for secure, decentralized personalization of smart cardsUS5539825Nov 21, 1994Jul 23, 1996Fujitsu LimitedElectronic cashless transaction systemUS5541582Jan 13, 1994Jul 30, 1996Datascape, Inc.Apparatus for data communication switchingUS5559504Jan 7, 1994Sep 24, 1996Kabushiki Kaisha ToshibaSurface shape sensor, identification device using this sensor, and protected system using this deviceUS5559887Sep 30, 1994Sep 24, 1996Electronic Payment ServiceCollection of value from stored value systemsUS5577121Jun 9, 1994Nov 19, 1996Electronic Payment Services, Inc.Transaction system for integrated circuit cardsUS5581630Mar 12, 1996Dec 3, 1996Texas Instruments IncorporatedPersonal identificationUS5590038Jun 20, 1994Dec 31, 1996Pitroda; Satyan G.Universal electronic transaction card including receipt storage and system and methods of conducting electronic transactionsUS5590197Apr 4, 1995Dec 31, 1996V-One CorporationElectronic payment system and methodUS5602918Dec 22, 1995Feb 11, 1997Virtual Open Network Environment Corp.Application level security system and methodUS5604801Feb 3, 1995Feb 18, 1997International Business Machines CorporationPublic key data communications system under control of a portable security deviceUS5613001Jan 16, 1996Mar 18, 1997Bakhoum; Ezzat G.Digital signature verification technology for smart credit card and internet applicationsUS5677953Jun 7, 1995Oct 14, 1997Spyrus, Inc.System and method for access control for portable data storage mediaUS5721781Sep 13, 1995Feb 24, 1998Microsoft CorporationAuthentication system and method for smart card transactionsUS5737439Oct 29, 1996Apr 7, 1998Smarttouch, Llc.Anti-fraud biometric scanner that accurately detects blood flowUS5739512May 30, 1996Apr 14, 1998Sun Microsystems, Inc.Digital delivery of receiptsUS5742756Feb 12, 1996Apr 21, 1998Microsoft CorporationSystem and method of using smart cards to perform security-critical operations requiring user authorizationUS5742845Jun 22, 1995Apr 21, 1998Datascape, Inc.System for extending present open network communication protocols to communicate with non-standard I/O devices directly coupled to an open networkUS5757917Nov 1, 1995May 26, 1998First Virtual Holdings IncorporatedComputerized payment system for purchasing goods and services on the internetUS5764789Sep 27, 1996Jun 9, 1998Smarttouch, LlcTokenless biometric ATM access systemUS5778173Jun 12, 1996Jul 7, 1998At&T Corp.Mechanism for enabling secure electronic transactions on the open internetUS5796831May 31, 1995Aug 18, 1998GemplusMethod for conducting a transaction between a chip card and an information systemUS5799087Apr 21, 1995Aug 25, 1998Citibank, N.A.Electronic-monetary systemUS5806045Jul 8, 1996Sep 8, 1998Cardone Development CompanyMethod and system for allocating and redeeming incentive credits between a portable device and a base deviceUS5815252Nov 21, 1995Sep 29, 1998Canon Kabushiki KaishaBiometric identification process and system utilizing multiple parameters scans for reduction of false negativesUS5815657Apr 26, 1996Sep 29, 1998Verifone, Inc.In a computerUS5826241Sep 16, 1994Oct 20, 1998First Virtual Holdings IncorporatedComputerized system for making payments and authenticating transactions over the internetUS5832212Apr 19, 1996Nov 3, 1998International Business Machines CorporationCensoring browser method and apparatus for internet viewingUS5835894Feb 14, 1997Nov 10, 1998Ann Adcock CorporationSpeaker and command verification methodUS5838812Jul 25, 1996Nov 17, 1998Smarttouch, LlcTokenless biometric transaction authorization systemUS5857079Dec 23, 1994Jan 5, 1999Lucent Technologies Inc.For storing transaction information by financial by financial identitiesUS5869822Oct 4, 1996Feb 9, 1999Meadows, Ii; Dexter L.Automated fingerprint identification systemUS5875432Feb 15, 1997Feb 23, 1999Sehr; Richard PeterComputerized voting information system having predefined content and voting templatesUS5884271Sep 6, 1996Mar 16, 1999Pitroda; Satyan G.Device, system and methods of conducting paperless transactionsUS5884292May 6, 1993Mar 16, 1999Pitney Bowes Inc.System for smart card funds refillUS5889941Nov 22, 1996Mar 30, 1999Ubiq Inc.System and apparatus for smart card personalizationUS5892211May 1, 1997Apr 6, 1999Electronic Payment Services, Inc.Transaction system comprising a first transportable integrated circuit device, a terminal, and a security deviceUS5898838Sep 30, 1997Apr 27, 1999Datascape, Inc.Editor for developing statements to support i/o operation on open network using segregator for segregating protocol statements from application statements upon verification of correspondenceUS5901239Aug 1, 1996May 4, 1999Nec CorporationSkin pattern and fingerprint classification systemUS5905908Dec 19, 1997May 18, 1999Datascape, Inc.Open network system for I/O operations with non-standard I/O devices utilizing extended protocol including device identifier and identifier for operation to be performed with deviceUS5907620Aug 23, 1996May 25, 1999Cheyenne Property TrustMethod and apparatus for enforcing the use of cryptography in an international cryptography frameworkUS5912446Sep 12, 1996Jun 15, 1999International Verifact Inc.Transaction terminal for cooperating with transaction cardsUS5915973Mar 11, 1997Jun 29, 1999Sylvan Learning Systems, Inc.System for administration of remotely-proctored, secure examinations and methods thereforUS5917913Dec 4, 1996Jun 29, 1999Wang; Ynjiun PaulPortable electronic authorization devices and methods thereforUS5917925Aug 14, 1997Jun 29, 1999Moore; Lewis J.System for dispensing, verifying and tracking postage and other information on mailpiecesUS5920058Oct 23, 1996Jul 6, 1999Weber; David C.Holographic labeling and reading machine for authentication and security applicationsUS5920629Dec 19, 1997Jul 6, 1999Citibank, N.A.Payment methodUS5920847Oct 7, 1996Jul 6, 1999Visa International Service AssociationElectronic bill pay systemUS5930767May 28, 1997Jul 27, 1999Motorola, Inc.Transaction methods systems and devicesUS5931917Sep 26, 1996Aug 3, 1999Verifone, Inc.System, method and article of manufacture for a gateway system architecture with system administration information accessible from a browserUS5936226May 20, 1997Aug 10, 1999Intel CorporationMass storage device adapter for smart cardsUS5942761Jun 7, 1995Aug 24, 1999Tuli; Raja SinghEnhancement methods and devices for reading a fingerprint imageUS5987155Oct 27, 1997Nov 16, 1999Dew Engineering And Development LimitedBiometric input device with peripheral portUS5988497May 30, 1996Nov 23, 1999Mci Communications CorporationMethod for authenticating credit transactions to prevent fraudulent chargesUS5995014Dec 30, 1997Nov 30, 1999Accu-Time Systems, Inc.Biometric interface device for upgrading existing access control unitsUS6012039Feb 5, 1999Jan 4, 2000Smarttouch, Inc.Tokenless biometric electronic rewards systemUS6012636Apr 22, 1997Jan 11, 2000Smith; Frank E.Multiple card data system having first and second memory elements including magnetic strip and fingerprints scanning meansUS6016476Jan 16, 1998Jan 18, 2000International Business Machines CorporationPortable information and transaction processing system and method utilizing biometric authorization and digital certificate securityUS6041410Dec 22, 1997Mar 21, 2000Trw Inc.Personal identification fobUS6095413Nov 17, 1997Aug 1, 2000Automated Transaction CorporationSystem and method for enhanced fraud detection in automated electronic credit card processingUS6101477Jan 23, 1998Aug 8, 2000American Express Travel Related Services Company, Inc.Methods and apparatus for a travel-related multi-function smartcardUS6104922Mar 2, 1998Aug 15, 2000Motorola, Inc.User authentication in a communication system utilizing biometric informationUS6116736Apr 23, 1999Sep 12, 2000Neuroptics, Inc.Pupilometer with pupil irregularity detection capabilityUS6120461Aug 9, 1999Sep 19, 2000The United States Of America As Represented By The Secretary Of The ArmyApparatus for tracking the human eye with a retinal scanning display, and method thereofUS6148093Sep 18, 1997Nov 14, 2000Mcconnell; Gary A.Methods and device for validating a personal signatureUS6154879Feb 5, 1999Nov 28, 2000Smarttouch, Inc.Tokenless biometric ATM access systemUS6199079Mar 20, 1998Mar 6, 2001Junglee CorporationMethod and system for automatically filling forms in an integrated network based transaction environmentUS6219639Apr 28, 1998Apr 17, 2001International Business Machines CorporationMethod and apparatus for recognizing identity of individuals employing synchronized biometricsUS6223984Jun 6, 1997May 1, 2001Cybermark, Inc.Distinct smart card reader having wiegand, magnetic strip and bar code types emulation outputUS6233348Mar 23, 1998May 15, 2001Fujitsu LimitedFingerprint registering apparatus, fingerprint identifying apparatus, and fingerprint identifying methodUS6257486Nov 23, 1998Jul 10, 2001Cardis Research & Development Ltd.Smart card pin system, card, and readerUS6257620Feb 23, 2000Jul 10, 2001Bernard Carroll KenneyHigh efficiency ski for sailing on snow or iceUS6263446Nov 19, 1998Jul 17, 2001Arcot Systems, Inc.Method and apparatus for secure distribution of authentication credentials to roaming usersUS6268788Sep 15, 1998Jul 31, 2001Litronic Inc.Apparatus and method for providing an authentication system based on biometricsUS6269348Jan 29, 1999Jul 31, 2001Veristar CorporationTokenless biometric electronic debit and credit transactionsUS6307956Jan 24, 2000Oct 23, 2001Gerald R. BlackWriting implement for identity verification systemUS6325285Nov 12, 1999Dec 4, 2001At&T Corp.Smart card with integrated fingerprint readerUS6327578 *Dec 29, 1998Dec 4, 2001International Business Machines CorporationFour-party credit/debit payment protocolUS6332193Jan 18, 1999Dec 18, 2001Sensar, Inc.Method and apparatus for securely transmitting and authenticating biometric data over a networkUS6360953Jul 15, 1998Mar 26, 2002Magnex CorporationSecure print sensing smart card with on-the-fly-operationUS6424249Feb 11, 1999Jul 23, 2002Image Data, LlcPositive identity verification system and method including biometric user authenticationUS6446862Dec 31, 1999Sep 10, 2002W. Stephen G. MannPoint of purchase (PoP) terminalUS6480825Jan 29, 1998Nov 12, 2002T-Netix, Inc.System and method for detecting a recorded voiceUS6483929Aug 18, 2000Nov 19, 2002Tarian LlcMethod and apparatus for histological and physiological biometric operation and authenticationUS6491639Apr 5, 2000Dec 10, 2002Pacesetter, Inc.Extravascular hemodynamic sensorUS6496594Oct 21, 1999Dec 17, 2002Francine J. ProkoskiMethod and apparatus for aligning and comparing images of the face and body from different imagersUS6560581 *Jun 8, 1998May 6, 2003Visa International Service AssociationSystem and method for secure electronic commerce transactionUS6799270 *Sep 24, 1999Sep 28, 2004Citrix Systems, Inc.System and method for secure distribution of digital information to a chain of computer system nodes in a networkUS6851051 *Apr 12, 1999Feb 1, 2005International Business Machines CorporationSystem and method for liveness authentication using an augmented challenge/response schemeUSRE36580Apr 29, 1998Feb 22, 2000Wizards, LlcSystem for verifying use of credit/identification card including recording physical attributes of unauthorized users* Cited by examinerNon-Patent CitationsReference1"Automatic Ear Recognition by Force Field Transformations", by Hurley, et al., The Institution of Electrical Engineers, 2000, pp. 7/1-7/5.2"Biometric Person Authentication: Odor", by Korotkaya, Department of Information Technology, Laboratory of Applied Mathematics, Lappeenranta University of Technology, 18 pages.3"Biometrics: Hand Geometry", by Ross, et al., http://biometrics/cse.msu.edu/hand-geometry.html, Feb. 26, 2004, 2 pages.4"Biometrics: Speaker Verification", by Kulkarni, et al., http://biometrics.cse.msu.edu/speaker/html, Mar. 8, 2004, 5 pages.5"Credit on Your Key Ring, Buy Gas at Mobil, Exxon and Soon Burgers at McDonald's", by Krakow, MSNBC, http://www.msnbc.msn.com/id/3072638. Feb. 17, 2004, 4 pages.6"Everything You Need to Know About Biometrics", by Bowman, Identix Croproation, Jan. 2000, 8 pages.7"Fingerprint Analysis-The Basics", http://www.crimtrac.gov.au/fingerprintanalysis.htm, Feb. 18, 2004, 3 pages.8"Fingerprint Technology-Indentix Inc.-Empowering Identification(TM)-Understanding Biometrics", http://www.identix.com/newsroom/news-biometrics-finger.html, Feb. 18, 2004, 1 page.9"How Facial Recognition Systems Work", by Bonsor, http://computer.howstuffworks.com/facial-recognition.htm/printable, Feb. 18, 2004, 6 pages.10"How Fingerprint Scanners Work", by Harris, http:computer.howstuffworks.com/fingerprint-scanner.htm/printable, Feb. 18, 2004, 6 pages.11"Identix Inc.-Empowering Identification(TM)-Understanding Biometrics", http://www.identix.com/newsroom/news-biometrics-face.html, 1 page.12"Individual Biometrics-Facial Recognition", http:ctl.ncsc.dni.us/biomet%20web/BMfacial.html, Feb. 18, 2004, 2 pages.13"Individual Biometrics-Fingerprint", http:ctl.ncsc.dni.us/biomet%20web/BMFingerprint.html, Feb. 18, 2004, 3 pages.14"Individual Biometrics-Hand Geometry", http://ctl.ncsc.dni.us/biomet%20web/BMHand.html, Feb. 18, 2004, 2 pages.15"Individual Biometrics-Iris Scan", http:ctl.ncsc.dni.us/biomet%20web/BMIris.html, Feb. 18, 2004, 2 pages.16"Individual Biometrics-Retinal Scan", http:ctl.ncsc.dni.us/biomet%20web/BMRetinal.html, Feb. 18, 2004, 2 pages.17"Individual Biometrics-Vascular Patterns", http:ctl.ncsc.dni.us/biomet%20web/BMVascular.html, Feb. 18, 2004, 1 page.18"International Biometric Group-Signature Biometrics: How It Works", http://www.ibgweb.com./reports/public/reports/signature-scan-tech.html, Feb. 18, 2004, 1 page.19"International Biometric Group-Voice Recognition Technology: How It Works", http://www.ibgweb.com/reports/public/reports/voice-scan-tech.html, Feb. 18, 2004, 1 page.20"ISO Magnetic Stripe Card Standards", http://www.cyberd.co.uk/support./technotes/ioscards/htm, Feb. 9, 2004, 4 pages.21"ISO Standards", available from http://www/iso/ch/projects/loading/html.22"Judge Dismisses FTC Suit Against Rambus", Evers, IDG New Service, http://www.infoworld.com/article/04/02/18/HNjudgedismisses-.html, Feb. 18, 2004, 3 pages.23"Microsoft, IBM and Phillips Test RFID Technology", by Rohde, IDG New Service, http:www.compterweekly.com/Article127889.htm, Feb. 9, 2004, 3 pages.24"Pay By Touch Press Releases", http://www.paybytouch.com/press.html, Feb. 10, 2004, 3 pages.25"Paying It By Ear", The Guardian, Jan. 18, 2003, http://money.guardian.co.uk/creditanddebt/creditcards/story/0,1456,876908,00.html, 3 pages.26"PowerPay RFID Payment and Marketing Solution Speeds Purchases at Seahawks Stadium with Technology from Texas Instruments", http://www.powerpayit.com/news/Seahawks-pr.html, Feb. 9, 2004, 2 pages.27"Putting Their Finger on It", by Wilson, http://sanfrancisco.bizjournals.com/sanfrancisco/stories/2003/10/20/story6.html?t=printable, Feb. 9, 2004, 2 pages.28"RFID Take Priority With Wal-Mart", by DocMemory, http://www.simmtester.com/page/news/shownews.asp?num=6550, Feb. 9, 2004, 2 pages.29"Smart Card Developer's Kit: Some Basic Standards for Smart cards", http:unix.be.eu.org/docs/smart-card-developer-kit/ch03/033-035.html, Feb. 9, 2004, 2 pages.30"Smart Card Technology and Applications"; http://disc.cba.uh.edu/~rhirsch/fall96/lara.htm (8 pages).31"The Evolution of Mobile Payment", by McPherson, Financial Insights, Feb. 2, 2004, http://www.banktech.com./story/mews/showArticle/jhtml?article ID=17601432, 2 pages.32"The Henry Classification System", International Biometric Group, 7 pages.33"TI Embraces Prox Card Standard", by Roberti, Mar. 6, 2003, http://www.ti.com/tiris/docs/in-the-news/2003/3-6-03.shtml, 2 pages.34"Visual Speech and Speaker Recognition", by Luettin, Jun. 30, 2000, http://herens.idiap.ch/~luettin/luettin-thesis.bib.abs.html, 1 page.35Business Wire (press release), "Master Card E-Wallet", Jul. 11, 2000.36C.H. Fancher, "In Your Pocket Smartcards", IEEE Spectrum, Feb. 1997, pp. 47-53.37Dhem, et al., "SCALPS" Smart Card for Limited Payment Systems, IEEE Micro, Jun. 1996, pp. 42-51.38Dr. J. Leach, "Dynamic Authentication for Smartcards", Computers and Security, vol. 14, No. 5, 1995, pp. 385-389.39Geer, et al., "Token-Mediated Certification and Electronic Commerce", Proc. 2nd USENIX Workshop on Electronic Commerce, Nov. 18-21, 1996, pp. 13-22.40Gobioff, et al., "Smart Cards in Hostile Environments", Proc. 2nd USENIX Workshop in Electronic Commercie, Nov. 18-21, 1996, pp. 23-28.41I Blythe, "Smarter, More Secure Smartcards", BYTE, Jun. 1997, pp. 63-64.42J. Goldman, "Internet Security, The Next Generation, When Software Encryption is not Enough", Web Techniques, Nov. 1997, pp. 43-46.43J. Simmons, "Smart Cards Hold the Key to Secure Internet Commerce", EC World, Dec. 1998, pp. 36-38.44M.T. Smith, "Smart Cards: Integrating for Portable Company", Computer-Integrated Engineering, Aug. 1998, pp. 110-115.45Manninger, et al., "Adapting an Electronic Purse for Internet Payments", ACISP '98 Proceedings, Jul. 13-15, 1998, pp. 205-214.46Obongo.com Web Site, "Obongo", Aug. 8, 2000 (Description of wallet toolbar also available at http://www.obongo.com/chabi/webSite/index.htm).47P. Wayner, "Digital Cash", AP Professional, 1996, pp. 76-83, 85-100.48Pay By Touch-Company, http://www.paybytouch.com/company.html.49PR Newswire (press release), "Providian Launches Nation's First Clear Chip Card", Sep. 12, 2000. The press release may be related to the art of the invention, but based upon the information in the press release, it is unclear if the press release is prior art. However, in an abundance of caution the Applicant desires to put the press release into the file wrapper.50Transport Layer Security Working Group, "The SSL Protocol, CVersion 3.0", Nov. 18, 1996 (also available at (http://home.netscape.com/eng/ssl3/draft302.txt).51Turban, et al., "Using Smartcards in Electronic Commerce", Proc. 31st Annual Hawaii Inter. Conf. on System Sciences, vol. 4, 1998, pp. 62-69.52Wu, et al., "Authenticating Passwords Over an Insecure Channel", Computers and Security, vol. 15, No. 5, 1996, pp. 431-439.53Yan, et al., "Banking on the Internet and Its Applications", Proc. 13th Annual Hawaii Inter. Conf. on System Sciences, vol. 4, 1997, pp. 275-284.Referenced byCiting PatentFiling datePublication dateApplicantTitleUS7890371 *May 28, 2008Feb 15, 2011Trade-Van Information Services Co.Method for processing transaction informationUS7983451Jun 30, 2006Jul 19, 2011Motorola Mobility, Inc.Recognition method using hand biometrics with anti-counterfeitingUS8214652 *Jun 3, 2008Jul 3, 2012BIO-key International. Inc.Biometric identification network securityUS8335928 *Oct 27, 2008Dec 18, 2012Sony CorporationInformation providing system and method and storage mediumUS8510797 *Sep 12, 2011Aug 13, 2013Barclays Bank PlcOnline user authenticationUS8515840 *Oct 2, 2007Aug 20, 2013American Express Travel Related Services Company, Inc.Modular electronic walletUS8554689 *Mar 12, 2012Oct 8, 2013Ebay Inc.Biometric authentication of mobile financial transactions by trusted service managersUS20080270787 *Jun 3, 2008Oct 30, 2008Bio-Key International, Inc.Biometric identification network securityUS20090055750 *Oct 27, 2008Feb 26, 2009Sony CorporationInformation providing system and method and storage mediumUS20100088237 *Oct 5, 2009Apr 8, 2010Wankmueller John RMethods and systems for using physical payment cards in secure e-commerce transactionsUS20110016317 *Jun 21, 2010Jan 20, 2011Sony CorporationKey storage device, biometric authentication device, biometric authentication system, key management method, biometric authentication method, and programUS20110138450 *Jun 3, 2010Jun 9, 2011Validity Sensors, Inc.Secure Transaction Systems and Methods using User Authenticating Biometric InformationUS20110219446 *Mar 5, 2010Sep 8, 2011Jeffrey IchnowskiInput parameter filtering for web application securityUS20120066758 *Sep 12, 2011Mar 15, 2012Srinivas KasturiOnline User AuthenticationUS20120173434 *Mar 12, 2012Jul 5, 2012Ebay Inc.Biometric authentication of mobile financial transactions by trusted service managers* Cited by examinerClassifications U.S. Classification705/67, 705/75, 235/435, 705/64, 713/186, 726/5, 713/182, 705/79, 713/150, 726/27, 235/442, 380/277, 705/65International ClassificationG06Q99/00, G07F7/08, G07F7/10Cooperative ClassificationG07F7/1008, G06Q20/341, G06Q20/3674, G06Q20/367, G06Q20/401, G06Q20/4097, G06Q20/027, G06Q20/382, G06Q20/363, G07F7/0866European ClassificationG06Q20/382, G06Q20/3674, G06Q20/027, G06Q20/4097, G06Q20/363, G06Q20/401, G06Q20/341, G06Q20/367, G07F7/08C, G07F7/10DLegal EventsDateCodeEventDescriptionApr 21, 2014ASAssignmentFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.;REEL/FRAME:032722/0746Effective date: 20140324Owner name: III HOLDINGS 1, LLC, DELAWAREAug 13, 2012FPAYFee paymentYear of fee payment: 4May 11, 2005ASAssignmentOwner name: AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY,Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BISHOP, FRED;BONALLE, DAVID S;SALOW, GLEN;REEL/FRAME:016001/0821;SIGNING DATES FROM 20050106 TO 20050330RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google