Source: http://www.google.com.tw/patents/US7505941
Timestamp: 2013-05-22 20:29:53
Document Index: 633314322

Matched Legal Cases: ['Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'art 1', 'art 2', 'art 3', 'art 4', 'art 5', 'art 6', 'art 7']

�M�Q US7505941 - Methods and apparatus for conducting electronic transactions using biometrics - Google �M�Q�j�M �Ϥ� �a�� Play YouTube �s�D Gmail ���ݵw�� ��h »�i���M�Q�j�M | �������� | �n�J�i���M�Q�j�M�M�QA system and method for facilitating electronic transactions using a biometric are disclosed. The system for facilitating electronic transactions using a biometric comprises a smartcard-reader transaction system. The method comprises determining if a transaction violates an established rule, such as...http://www.google.com.tw/patents/US7505941?utm_source=gb-gplus-share�M�Q US7505941 - Methods and apparatus for conducting electronic transactions using biometrics���}��US7505941 B2�X���������v�ӽЮѽs��10/908,434�o�G���2009�~3��17���ӽФ��2005�~5��11�� �u���v���1999�~8��31����L���}�M�Q��US20050187883�o��HFred BishopDavid S BonalleGlen Salow��M�Q�v�HAmerican Express Travel Related Services Company, Inc. ���M�Q������705/67705/75235/435705/64713/186726/5713/182705/79713/150726/27235/442380/277705/65��ڱM�Q������G06Q99/00G07F7/08G07F7/10 �X�@����G06Q20/4097G06Q20/3674G06Q20/401G06Q20/382G07F7/1008G06Q20/027G06Q20/363G07F7/0866G06Q20/367G06Q20/341 �ڬw������G06Q 20/382G06Q 20/3674G06Q 20/027G06Q 20/4097G06Q 20/363G06Q 20/401G06Q 20/341G06Q 20/367G07F 7/08CG07F 7/10D�ѦҤ��m�M�Q�ޥ� (103)�D�M�Q�ޥ� (53)�Q�H�U�M�Q�ޥ� (8)�~���s�����M�Q�ӼЧ� ���M�Q�ӼЧ��M�Q����T�� �ڬw�M�Q��Methods and apparatus for conducting electronic transactions using biometricsUS 7505941 B2�K�n A system and method for facilitating electronic transactions using a biometric are disclosed. The system for facilitating electronic transactions using a biometric comprises a smartcard-reader transaction system. The method comprises determining if a transaction violates an established rule, such as a preset spending limit. The method also comprises notifying a user to proffer a biometric sample in order to verify the identity of said user, and detecting a proffered biometric at a sensor to obtain a proffered biometric sample. The method additionally comprises verifying the proffered biometric sample and authorizing a transaction to continue upon verification of the proffered biometric sample.
9. The method of claim 1, wherein said step of receiving said biometric further comprises the use of at least one secondary security procedure. ����
CROSS-REFERENCE TO RELATED APPLICATIONS This application is a continuation-in-part and claims priority to U.S. application Ser. No. 09/652,899, entitled ��Methods And Apparatus For Conducting Electronic Transactions,�� filed Aug. 31, 2000, the '899 application itself claims the benefit of: U.S. Provisional Application No. 60/151,880, filed Aug. 31, 1999; U.S. Provisional Application No. 60/164,668, filed Nov. 9, 1999; U.S. Provisional Application No. 60/165,577, filed Nov. 15, 1999; and, U.S. Provisional Application No. 60/201,635, filed May 3, 2000. All of the above-listed applications are incorporated herein by reference.
BACKGROUND OF INVENTION In recent years, many consumers have discovered the convenience and economy of purchasing goods and services electronically. A number of channels for electronic purchases (commonly called ��e-purchases��) are available, including shop-at-home television networks, call-in responses to television advertisements, and the like. Most recently, direct purchasing via the Internet has become extremely popular.
In a typical Internet transaction, a consumer generally identifies goods and/or services for purchase by viewing an online advertisement such as a hypertext markup language (HTML) document provided via a World Wide Web (WWW) browser. Payment typically occurs via a charge card number that is provided via a secure channel such as a secure sockets layer (SSL) connection that is established between the consumer and the merchant. A charge card account number is typically a sixteen-digit charge card number. Credit or charge card numbers typically comply with a standardized format having four spaced sets of numbers, as represented by the number ��0000 0000 0000 0000��. The first five to seven digits are reserved for processing purposes and identify the issuing bank, card type, etc. The last sixteenth digit is used as a sum check for the sixteen-digit number. The intermediary eight-to-ten digits are used to uniquely identify the customer. The merchant then processes the charge card number by, for example, receiving direct authorization from the card issuer, then the merchant completes the transaction. The SSL standard is described by, for example, ��The SSL Protocol Version 3.0�� dated Nov. 18, 1996, which is available online at http://home.netscape.com/eng/ssl3/draft302.txt, the entire contents of which are incorporated herein by reference.
Although millions of transactions take place every day via the Internet, conventional SSL transactions often exhibit a number of marked disadvantages. Although SSL typically provides a secure end-to-end connection that prevents unscrupulous third parties from eavesdropping (e.g., ��sniffing��) or otherwise obtaining a purchaser's charge card number, the protocol does not provide any means for ensuring that the charge card number itself is valid, or that the person providing the card number is legally authorized to do so. Because of the high incidence of fraud in Internet transactions, most charge card issuers consider network transactions to be ��Card Not Present�� transactions subject to a higher discount rate. Stated another way, because of the increased risk from ��Card Not Present�� transactions, most charge card issuers charge the merchant a higher rate for accepting card numbers via electronic means than would be charged if the card were physically presented to the merchant.
To improve the security deficiencies inherent in transporting charge card numbers over unsecure networks, many have suggested the use of ��smart cards.�� Smart cards typically include an integrated circuit chip having a microprocessor and memory for storing data directly on the card. The data can correspond to a cryptographic key, for example, or to an electronic purse that maintains an electronic value of currency. Many smartcard schemes have been suggested in the prior art, but these typically exhibit a marked disadvantage in that they are non-standard. In other words, merchants typically must obtain new, proprietary software for their Web storefronts to accept smartcard transactions. Moreover, the administration costs involved with assigning and maintaining the cryptographic information associated with smart cards have been excessive to date.
To conduct a transaction, customer 110 suitably establishes a connection through network 102 with a merchant 120. When a purchase is to be consummated, customer 110 accesses wallet server 140. The customer 110 is then redirected to security server 130 to verify that a smartcard is in the customer's possession. The smartcard may include a digital certificate that uniquely identifies the card such that digital credentials relating to the transaction may be created, as described below. In various embodiments, portions of the digital credentials are returned to customer 110 and a portion is provided to wallet server 140 via secure connection 150. Customer 110 may then use the digital credentials to authenticate to a wallet server 140, which may complete the electronic transaction as a proxy for customer 110. Wallet server 140 may include functionality for completing purchase forms affiliated with merchant computer 120, for example. When merchant 120 receives a secure purchase instrument identifier from customer 110 or from wallet server 140, card authorization may take place over connection 152 as with any ordinary charge card authorization. As described above, the communications can be performed using various protocols, for example SSL or VPN and the like. Because the smartcard contains identifying information that is unique to the particular card and which can be made known to the network through electronic means, a purchase transaction conducted with the smartcard is more secure than a transaction conducted with an ordinary charge or credit card. A lower discount rate may be justified for the secure transaction, which may be processed by the card issuer as a ��Card Present�� transaction. Additionally, if the transaction is a ��Card Present�� transaction, the risk of fraud may be transferred from the merchant to the card issuer.
ISO/IEC 7816-1:1998 Identification cards�XIntegrated circuit(s) cards with contacts�XPart 1: Physical characteristics; ISO/IEC 7816-2:1999 Information technology�XIdentification cards�XIntegrated circuit(s) cards with contacts�XPart 2: Dimensions and location of the contacts; ISO/IEC 7816-3:1997 Information technology�XIdentification cards�XIntegrated circuit(s) cards with contacts�XPart 3: Electronic signals and transmission protocols; ISO/IEC 7816-4:1995 Information technology�XIdentification cards�XIntegrated circuit(s) cards with contacts�XPart 4: Interindustry commands for interchange; ISO/IEC 7816-5:1994 Identification cards�XIntegrated circuit(s) cards with contacts�XPart 5: Numbering system and registration procedure for application identifiers; ISO/IEC 7816-6:1996 Identification cards�XIntegrated circuit(s) cards with contacts�XPart 6: Interindustry data elements; and ISO/IEC 7816-7:1999 Identification cards�XIntegrated circuit(s) cards with contacts�XPart 7: Interindustry commands for Structured Card Query Language (SCQL). An exemplary smartcard 202 is a smartcard in accordance with the ISO 7816 specifications including a model SLE66 chip available from the Infineon Corporation (Munich, Germany). The SLE66 chip includes a memory (such as a 16 k memory, although more or less memory could be used) and a processor running, for example, the Multos operating system (such as Multos v.4). In various embodiments smartcard 202 also includes an applet for storing and processing digital certificates or other cryptographic functions. For a basic introduction of cryptography, see ��Applied Cryptography: Protocols, Algorithms, And Source Code In C,�� by Bruce Schneier and published by John Wiley & Sons (second edition, 1996), which is hereby incorporated by reference. For example, an X.509 Java applet could be included on smartcard 202 for processing an X.509 certificate stored thereon. While the embodiments described herein utilize a smartcard, it will be appreciated that other intelligent tokens, for example a global system for mobile communication (GSM) mobile phone, can be substituted for the smartcard in various embodiments of the invention.
The activator application program may be implemented as a conventional computer application. In various embodiments, the activator application displays information as a system tray icon, as a ��floating bitmap,�� or in any other suitable manner. The graphical representations (e.g., icons) may indicate status information such as ��browsing at a supported site,�� ��browsing at a supported checkout page,�� ��browsing at a supported payment page,�� ��no browser windows open,�� ��browsing at an unsupported page,�� and/or the like.
In an exemplary embodiment, the present invention is enhanced by providing a transaction tool with a window which includes controls which allow a user to more easily use the transaction tool. The transaction tool can be used for various electronic transactions. For example, purchase transactions, financial advisory transactions, insurance transactions, consumer-to-consumer transactions, such as barter transactions, transactions relating to offers and rewards, etc. The transaction tool described in detail herein is a digital wallet used for electronic purchase transactions. The digital wallet is enhanced by providing a window with controls for the customer to more easily use the wallet. In an exemplary embodiment, the present invention includes a client-side implementation for accessing digital wallet functionality (��activator��) and a server-side toolbar that allows the user to perform a small download of the activator and utilize one or more control elements of the Operating System User Interface, for example, a Microsoft Windows system tray icon.
In an exemplary embodiment, the present system also includes methods and apparatus that facilitate the reliable population of HTML forms on Web sites. The end result is that users can identify information content that they wish to provide to sites in a general manner, independent of the actual appearance, labeling, and behaviors of various e-commerce Web sites. In an exemplary embodiment, the present invention includes an ��auto-remember�� component that allows a user to capture data that is entered and a ��form fill�� component which includes a powerful set of processes that results from the combination of several different models of sites and users.
With respect to the ��auto-remember�� feature, prior art digital wallets may implement a remember function, but it must be initiated by the user. With the present ��auto-remember�� feature, digital wallet users do not need to click a button to remember the form they just filled out because the present system remembers the fields that the user is submitting on a merchant window. When a form is submitted (for example, by pressing a ��Submit�� button or a ��Buy�� button), the online wallet responds by determining if the window that triggered the form submission is a merchant window of interest. If so, the wallet suitably remembers the data; otherwise, the wallet can disregard the occurrence of the form submission and continue to run as normal.
The digital wallet controls may include a button labeled ��remember,�� or may also support an automatic remember feature that is always active. In general, fields other than those that are automatically populated by the wallet can be remembered. In this context, remembering a field means that when a user enters data into a specific field, the value will be stored by the system. The wallet component will detect field values entered in this way, and will securely transmit them to a server via the Internet. When a user next goes to this page, the wallet, in addition to populating the form with fields that are retrieved from the wallet system, will also populate the form with values that had previously been remembered. When processing the form (pre-fill), the wallet will securely retrieve field values from the server.
More particularly, with respect to the Internet Explorer browser, the invention suitably implements an ActiveX control that attaches itself to a Web page such as, for example, the American Express Online Wallet. In an exemplary embodiment, the ActiveX control contains a method that captures the browser events of all Internet Explorer browsers, so that the American Express Online Wallet can respond to these events if necessary by a JavaScript function loaded within the American Express Online Wallet, thereby allowing the system to obtain the completely downloaded document within an Internet Explorer browser. Specifically, this allows the system to capture the ��Document Complete�� event raised by the Internet Explorer browser which specifies when a document has finished loading. When this event is captured, the ActiveX control notifies the American Express Online Wallet by calling a JavaScript function loaded within the American Express Online Wallet. This function responds to this event by suitably communicating with the ActiveX control to capture the ��Form Submit�� events for all forms on all Internet Explorer browsers.
When a user fills a form on a Web page and clicks the ��Submit�� (i.e., any control, such as a button, that submits a form) button for that page, the American Express Online Wallet is notified by the ActiveX control calling a JavaScript function loaded within the American Express Online Wallet. The American Express Online Wallet then suitably determines if the document raising the ��Submit�� event is of interest by checking the URL of the window that raised the event. If the event is to be handled, the American Express Online Wallet must call a suitable function within the ActiveX control that obtains the document object model (DOM) that raised the event. The DOM can then be traversed and the form values can be saved so that they can be sent to the server for storage in memory. In an exemplary embodiment, the ActiveX control must properly detach itself from capturing the browser events and form ��Submit�� events so that runtime errors are minimized.
With respect to the Netscape browser, because of Netscape's implementation of events, the system captures the event from within JavaScript alone. If the system successfully obtains the ��Universal Browser Write�� privilege (i.e. granted by the user), the system can then successfully call a function that allows an external window to capture events of another window. The system then can traverse the document object model for all frames of that window. When doing so, the system notifies each form of the window that the system wants to capture the ��Submit�� event. As such, when a user fills a form on the window that the system notified and clicks the ��Submit�� button (i.e., any control, such as a button, that submits a form) for that page, the online wallet is notified and suitably responds. One skilled in the art will appreciate that the present invention may be implemented in any suitable transaction system, including, but not limited to any suitable digital wallet system.
With respect to the form fill function, the digital wallet, such as, for example, the American Express Online Wallet, provides a form fill functionality to aid users in populating forms. Prior art systems, such as the system provided by GlobeSet, Inc., typically use a Browser Helper Object (BHO). The BHO approach often includes disadvantages such as, for example, the Internet Explorer 5.0 browser has a bug where it will only load the first BHO specified in the registry. This is a problem for any application since it cannot be sure whether its BHO is loaded or not. Moreover, a BHO is loaded for each instance of Internet Explorer such that multiple instances of a BHO could be running at any given time�Xtherefore eating up memory and slowing down navigation for all browsers versus only the one of interest.
The present invention may be configured to replace the BHO solution by using the same ActiveX control as specified in the ��auto remember�� feature. By attaching an ActiveX control to the Online Wallet Web page, the system suitably obtains the document object model for any document loaded within any given Internet Explorer browser by using, for example, the Shell Windows API. When a user clicks a ��Fill Form�� button on the Online Wallet, the wallet can respond by first obtaining the document object model through the ActiveX control. Next, the wallet can save the names of the fields that make up forms and send them to a heuristic engine on the server. The server will respond to this request by returning the values that should be used to fill these fields. The fields can then be filled using the same document object model obtained earlier. As such, the present invention reduces the problem of having to enter repetitive data in forms at Web sites. In addition to saving effort on part of customers, it increases accuracy of the entered data.
The present invention includes heuristics based field recognition. In this approach, field labels are identified by their spatial proximity to form fields of interest. A combination of field labels and form field HTML attributes (most notably the ��name�� attribute of the HTML ��input,�� ��select,�� and ��action�� elements) will be used as input to a heuristic engine that contains a dictionary to aid the identification of desired fields.
In another embodiment, the present invention includes user mediated field recognition. In this approach, the user willfully captures input via a ��Remember�� button or similar control that allows servers to capture information about the sequence of actions the user executes. When the user does this, he or she can effectively ��play back�� the actions (similar to macro scripting employed in other software systems). As such, the user's actions can be fed into the heuristic engine and also be fed directly into field mapping tables that are used by the processes of this engine.
Other functionality (step 916) may also be incorporated into the activator application. For example, security mechanisms (such as those described above and below), customer monitoring functions, coupons, special offers and the like could be implemented. In the case of coupons or special offers, the activator could sense the present URL as corresponding to a particular product or Web page. When the user ��surfs�� or browses to the particular supported URL, the activator application notices the match and presents the user (via a dialog window or via the browser, or the like) with a special offer, such as an opportunity to purchase a particular product or to receive a special discount on a purchase. It will be appreciated that other functionality could be incorporated into the activator application without departing from the ambit of the present application.
Upon receipt of redirect message 1012, customer 110 suitably contacts wallet server 140 to request a connection. In various embodiments ��Request connect�� message 1014 suitably includes the security token and possibly the additional security token in entirety or part as part of redirect message 1012. Wallet server 140 queries the security server 130 using some combination of security tokens in whole or part to obtain identification of customer 110. The query 1016 and response 1018 are suitably transmitted across network 150, which in some embodiments is maintained separate from network 102 to enhance the security of the system 100. An alternative embodiment employs network 102 that in some embodiments affords enhanced security by Virtual Private Network, SSL protocol, use of shared secrets, and/or other cryptographic means. If the return credentials 1018 are in order, wallet server 140 retrieves the attributes corresponding to customer 110 from wallet database 408 and notifies customer 110 of a successful login via message 1020. It will be appreciated that alternate embodiments of a logon sequence are possible. It will also be appreciated that any sort of encryption schemes, message formats and the like could be used to implement a login sequence 1000.
A potential security problem encountered with many scripting languages is shown in FIG. 12A. An unscrupulous ��cracker�� may create a Web site 1204 that is designed to perform malicious activities against users of a legitimate Web server 1206. The cracker site 1204 (shown as the ��criminal site�� in the figure) may, for example, provide a portion of code, such as a script, to the user. The criminal site 1204 may also induce the user's Web browser 216 to request a particular uniform resource locator (URL) at the legitimate server 1206 (such as the wallet server 140, or any other server on network 102). The referenced URL may be deliberately crafted such that the legitimate server 1206 returns, for example, an error message or other response to the client browser 216. In various embodiments, the response from the legitimate server 1206 may automatically include a portion or variation of the request from the user's Web browser 216. If that response includes JavaScript, VBscript or other code generated as a result of the malicious intent of the criminal site 1204, then the code may be executed on the user's computer. This example illustrates one of many techniques in which a ��cracker�� may induce a legitimate Web server 1206 to send malicious instructions to a user's Web browser 216. Because the various coding and scripting languages contain instructions for accessing the host computer's file system, registry, or the like, it will be understood that the unauthorized execution of such code is highly undesirable. Nevertheless, the technique shown in FIG. 12A may allow scripting or other code from a criminal site 1204 to be provided to a user's computer. Because the user's computer thinks that the scripting came from a trusted source (i.e. the wallet server), the client's computer may execute the code from the criminal site, thus creating the potential for damage, unauthorized data dissemination or destruction, or the like. FIG. 12B illustrates the correct communication flow that should occur (as opposed to the criminal attack flow shown in FIG. 12A).
In addition to (or as an alternative to) configuring the client such that the client only ��trusts�� a certain portion of the server, the server may be configured to improve the security of the client-server interaction. For example, scripting with heightened trust may be disallowed on most of the server to improve security. Moreover, data provided to the trusted portion of the Web site may be monitored and/or modified before being returned to the user (steps 1304 and 1306). Most scripting languages require certain characters for formatting commands. For example, the JavaScript language is frequently encoded with script instructions placed between angle brackets (��<�� and ��>��). Hence, the angle brackets may be removed from any content that will be returned by a trusted portion of the Web site. If a Web page provided from a trusted portion of the Web site were to include a ��criminal�� JavaScript program attempting to use angle brackets, for example, the script instructions would not execute on the user's computer because the script instructions would not be properly formatted after removing the angle brackets. Alternatively, certain ��dangerous�� characters (such as the angle brackets in JavaScript) may be returned in an alternate format, for example, in ��ampersand notation�� with an ampersand (��&��) and an American Standard Code for Information Interchange (ASCII) value for the particular character, or by replacing the ��dangerous�� character with a safe character, such as the ��space�� character (step 1306). It will be appreciated that any characters could be eliminated or encoded in various embodiments of the invention depending upon the particular languages, scripting environments, and the like that may be utilized.
In some cases internal machines can be attacked by a ��criminal�� site sending content that contains script to a network server that can log the content in audit trail (e.g., log) files. Given that a browser may have been configured a heightened trust for files residing on the server, in various embodiments, when a user reviews the audit trail files of Web and other e-commerce servers by using the browser, a script may be executed on the network client with the trust level of the network server that delivered the audit trail records (e.g., with a heightened trust level). Execution of this script may cause an attack which may occur long after the script was sent to the network server. This attack is preventable using the same methods and procedures described above to prevent cross site scripting, such as the ��criminal�� attacks described above. A filter, such as the one described in FIG. 13, running on a network server, such as a Web server, or running on a network client, such as a PC browser, can filter for script control characters and encode the characters, reject the characters or reject the entire record.
A biometric system may include one or more technologies, or any portion thereof, to facilitate recognition of a personal identifier, such as, for example a biometric. As used herein, a personal identifier may include a user's voice, fingerprint, facial, ear, signature, vascular patterns, DNA sampling, hand geometry, sound, olfactory, keystroke/typing, iris, retinal, brainwaves, or any other biometric relating to recognition based upon any body part, function, system, attribute and/or other characteristic, or any portion thereof. As used herein, the terms ��personal identifier�� and ��biometric�� may be used interchangeably. Certain of these technologies will be described in greater detail herein. Moreover, while some of the examples discussed herein may include a particular biometric system or sample, the invention contemplates any of the biometrics discussed herein in any of the embodiments.
The biometric system may be configured as a security system and may include a registration procedure in which a user of a transaction instrument proffers a sample of his fingerprints, DNA, retinal scan, voice, and/or other biometric sample to an authorized sample receiver (ASR). As used herein, a transaction instrument may refer to a physical smartcard, debit card, charge card, loyalty card, radio-frequency enabled card, or the like. Further, a transaction instrument may also refer to the electronic information stored and/or associated with a physical card. As used herein, all transaction instruments will be referred to herein as ��smartcard 202.�� An ASR may include a local database, a remote database, a portable storage device, a host system, an issuer system, a merchant system, a smartcard issuer system, an employer, a financial institution, a non-financial institution, a loyalty point provider, a company, the military, the government, a school, a travel entity, a transportation authority, a security company, and/or any other system or entity that may be authorized to receive and store biometric samples and associate the samples with specific biometric databases and/or transaction instruments (e.g., smartcards 202). As used herein, a user of a smartcard, cardmember, or any similar phrase may include the person or device holding or in possession of the smartcard, or it may include any person or device that accompanies or authorizes the smartcard owner to use the smartcard.
The ASR and/or cardmember may correlate and/or register the sample with cardmember information to create a data packet for the sample and store the data packet in digital and/or any storage medium known in the art. As used herein, a data packet may include the digitized information relating to at least one of a biometric sample, a registered biometric sample, a stored biometric sample, a proffered biometric, a proffered biometric sample, cardmember information, smartcard information and/or any other information. The terms ��data packet,�� ��biometric sample,�� and ��sample�� may be used interchangeably. As used herein, registered samples may include samples that have been proffered, stored and associated with cardmember information. By storing the data packet in digital format, the ASR may digitize any information contained in one of the biometric scans described herein. By storing the data packet in any storage medium, the ASR may print and/or store any biometric sample. Hardcopy storage may be desirable for back-up and archival purposes.
The information associated with the biometric sample may include any information such as, for example, cardmember information, smartcard 202 information, smartcard 202 identifier information, smartcard 202 issuer information, smartcard 202 operability information, and/or smartcard 202 manufacturing information. Smartcard 202 information may be not limited to smartcard chip information and may include information related to any transaction instrument such as transponders, credit cards, debit cards, merchant-specific cards, loyalty point cards, cash accounts and any other transaction instruments and/or accounts. The cardmember information may also contain information about the user including personal information�Xsuch as name, address, and contact details; financial information�Xsuch as one or more financial accounts associated with the cardmember; loyalty point information�Xsuch as one or more loyalty point accounts (e.g., airline miles, charge card loyalty points, frequent diner points) associated with the cardmember; and/or non-financial information�Xsuch as employee information, employer information, medical information, family information, and/or other information that may be used in accordance with a cardmember.
In another embodiment, cardmember may associate each account with a different biometric sample. For example, during registration, cardmember may submit a sample of his right index fingerprint, and request that the system primarily associate this sample with a particular credit card account. Cardmember may additionally submit a sample of his left index fingerprint and request that the system primarily associate the sample with a particular debit account. Additionally, cardmember may submit his right thumbprint and request that the system primarily associate that sample with a particular frequent flier account. By ��primarily�� associating a sample with an account, the system initially associates the sample with that account. For example, cardmember submitting his right index fingerprint for a financial transaction may have money for the transaction taken from his credit card account. Cardmember may additionally specify which accounts should be secondarily associated with a sample. For example, cardmember may have a debit card account secondarily associated with his right index fingerprint. As a result, if cardmember submits his right index fingerprint for a transaction, and the primary account associated with the sample is overdrawn or unavailable, the secondary account may be accessed in order to further the transaction.
The ASR and/or cardmember may associate a specific smartcard 202 identifier with the biometric sample by any method known in the art for associating an identifier (e.g., through the use of software, hardware and/or manual entry.) The ASR may additionally verify the cardmember and/or smartcard 202 by using one or more forms of the user's secondary identification (step 1507). For example, the ASR may verify the cardmember by matching the smartcard information to information retrieved from scanning information from a cardmember's driver's license. The ASR may verify smartcard 202 by contacting the vendor of smartcard 202 to confirm that smartcard 202 was issued to a specific cardmember. In another embodiment, the ASR may activate smartcard 202 during the registration procedure to confirm that the smartcard 202 smartcard chip identifier and other information may be properly associated with the cardmember and the cardmember's specific biometric samples. The ASR may additionally employ one or more verification methods to confirm that the biometric sample belongs to the user, such as, for example, the ASR may request from the user demographic information, further biometric samples and/or any other information. As used herein, ��confirm,�� ��confirmation�� or any similar term includes verifying or substantially verifying the accuracy, existence, non-existence, corroboration, and/or the like of the information, component, or any portion thereof. The ASR may additionally employ one or more additional processing methods in order to facilitate association of a biometric sample. As used herein, the term processing may include scanning, detecting, associating, digitizing, printing, comparing, storing, encrypting, decrypting, and/or verifying a biometric and/or a biometric sample, or any portion thereof.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using voice recognition. As discussed herein, voice recognition may include recognition of voice and/or speaker features such as, phonated excitation, whispered excitation, frication excitation, compression, vibration, parametric waveforms, tone, pitch, dialect, annunciation, and/or any portion thereof. As discussed herein, these voice recognition features may be collectively referred to as a ��voice print.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an audio capture device such as a microphone, telephone, cellular phone, computer, speaker and/or other hardware and/or software for acquiring the biometric data from the person such as, for example auditory scanning, recording or otherwise sensing the portion of cardmember.
In another exemplary embodiment of the present invention, biometric security system 1402 may be configured for facilitating biometric security using signature recognition. As discussed herein, signature recognition may include recognition of the shape, speed, stroke, stylus pressure, timing information, character height and width and/or other signature information and/or any portion thereof during the act of signing. As discussed herein, these signature recognition features may be collectively referred to as a ��signature scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an LCD screen, digitizing tablet and/or other hardware and/or software that facilitates digitization of biometric data from the person such as, for example signature scanning, recording or otherwise sensing the signature of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using vascular pattern recognition. As discussed herein, vascular pattern may include recognition of structures, depths, and other biometric reference points of arterial tissues, vein tissues, capillary tissues, epithelial tissues, connective tissues, muscle tissues, nervous and/or other inner tissues and/or any portion thereof. As discussed herein, these vascular pattern features may be collectively referred to as a ��vascular scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an optical scanner, x-ray, ultrasound, computed tomography, thermal scanner and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a vascular pattern of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using DNA biometrics. As discussed herein, DNA biometrics may include recognition of structures, gene sequences, and other genetic characteristics of skin tissue, hair tissue, and/or any other human tissue and/or any portion thereof containing genetic information. As discussed herein, these genetic features may be collectively referred to as a ��DNA scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, a chemical sensor and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a DNA scan of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using hand geometry biometrics. As discussed herein, hand geometry biometrics may include recognition of hand geometry parameters, such as, for example, hand shape, finger length, finger thickness, finger curvature and/or any portion thereof. As discussed herein, these hand geometry features may be collectively referred to as a ��hand geometry scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, a three-dimensional imaging system and/or other hardware and/or software that facilitates capture of biometric data from the person such as, for example scanning, detecting or otherwise sensing a hand geometry scan of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using auditory emissions biometrics. As discussed herein, auditory emissions biometrics may include emissions that an ear generates when stimulated by sound, such as vibrations and reverberated sound waves and/or any portion thereof. As discussed herein, these auditory emissions features may be collectively referred to as an ��auditory emissions scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an infrared optical sensor, an auditory sensor, an auditory generator and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example sound generating, scanning, detecting or otherwise sensing an auditory emissions scan of card member.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using olfactory biometrics. As discussed herein, olfactory biometrics may include odorants that a body generates when odor evaporates from and/or any portion thereof. As discussed herein, these odorants may be collectively referred to as a ��smellprint.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an electronic sensor, a chemical sensor, and/or an electronic or chemical sensor configured as an array of chemical sensors, wherein each chemical sensor may detect a specific odorants, or smell. In another embodiment, biometric sensor 1404 may be configured as a gas chromatograph, spectrometer, conductivity sensor, piezoelectric sensor and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a smellprint of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using keystroke/typing recognition biometrics. As discussed herein, keystroke/typing recognition biometrics may include recognition of the duration of keystrokes, latencies between keystrokes, inter-keystroke times, typing error frequency, force keystrokes and/or any portion thereof. As discussed herein, these features may be collectively referred to as a ��keystroke scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with an electronic sensor, an optical sensor, a keyboard, and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a keystroke scan of cardmember. A keyboard may include any type of input device, such as, for example, flat electronic pads with labels as keys, touch screens, and/or any other types of input devices.
For example, for keystroke scans, the CPU may utilize an existing database to compare the behavioral, temporal and physical characteristics associated with keystrokes. This transfer of information may include use of encryption, decryption, security keys, digital certificates and/or other security devices to confirm the security of the sample. Smartcard 202 may additionally communicate with third-party databases to facilitate a comparison between smartcard 202 identifier and other smartcard identifiers stored with the biometric samples. Further, the present invention anticipates use of one or more third-party devices such as keystroke scan recognition software and/or hardware systems to facilitate keystroke scan comparisons, such as, for example those developed by BioPassword® by BioNet Systems, LLC.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using iris scan biometrics. As discussed herein, iris scan biometrics may include recognition of characteristics of the colored tissues surrounding the pupil, such as the rings, furrows and freckles and/or any portion thereof. As discussed herein, these characteristics may be collectively referred to as an ��iris scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with a video camera, an optical scanner, a digital camera, a charge coupled device and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing an iris scan of cardmember.
In another exemplary embodiment, biometric security system 1402 may be configured for facilitating biometric security using retinal scanning biometrics. As discussed herein, retinal scanning biometrics may include recognition of characteristics of the reflected retinal pattern of the eye, such as the location, structure, size, and shape of blood vessels and/or any portion thereof. As discussed herein, these characteristics may be collectively referred to as a ��retinal scan.�� Biometric security system 1402 may include a biometric sensor 1404 which may be configured with low-intensity light source, such as an infrared source, an optical coupler and/or other hardware and/or software that facilitates the capture of biometric data from the person such as, for example, scanning, detecting or otherwise sensing a retinal scan of cardmember.
�M�Q�ޥ� �ޥΪ��M�Q�ӽФ���o�G��� �ӽЪ��M�Q�W��US44530741981�~10��19��1984�~6��5��American Express CompanyProtection system for intelligent cardsUS45829851982�~3��18��1986�~4��15��Loefberg; BoData carrierUS47471471986�~6��16��1988�~5��24��Sparrow; Malcolm K.Fingerprint recognition and retrieval systemUS49930681989�~11��27��1991�~2��12��Motorola, Inc.Unforgeable personal identification systemUS51754161991�~5��17��1992�~12��29��Visa International Service AssociationFunds transfer systemUS51809021991�~5��17��1993�~1��19��Bane; MarkSelf verifying transaction card with disabling capabilityUS51931141991�~8��8��1993�~3��9��Moseley; Donald R.Consumer oriented smart card system and authentication techniquesUS52453291989�~4��27��1993�~9��14��Security People Inc.Access control system with mechanical keys which store dataUS53217511993�~2��18��1994�~6��14��Eastman Kodak CompanyMethod and apparatus for credit card verificationUS54381841993�~10��26��1995�~8��1��Verifone Inc.Method and apparatus for electronic cash transactionsUS54612171994�~2��8��1995�~10��24��At&T Ipm Corp.Secure money transfer techniques using smart cardsUS55132721994�~12��5��1996�~4��30��Wizards, LlcSystem for verifying use of a credit/identification card including recording of physical attributes of unauthorized usersUS55219661993�~12��14��1996�~5��28��At&T Corp.Method and system for mediating transactions that use portable smart cardsUS55348571992�~11��10��1996�~7��9��Security Domain Pty. Ltd.Method and system for secure, decentralized personalization of smart cardsUS55398251994�~11��21��1996�~7��23��Fujitsu LimitedElectronic cashless transaction systemUS55415821994�~1��13��1996�~7��30��Datascape, Inc.Apparatus for data communication switchingUS55595041994�~1��7��1996�~9��24��Kabushiki Kaisha ToshibaSurface shape sensor, identification device using this sensor, and protected system using this deviceUS55598871994�~9��30��1996�~9��24��Electronic Payment ServiceCollection of value from stored value systemsUS55771211994�~6��9��1996�~11��19��Electronic Payment Services, Inc.Transaction system for integrated circuit cardsUS55816301996�~3��12��1996�~12��3��Texas Instruments IncorporatedPersonal identificationUS55900381994�~6��20��1996�~12��31��C-Sam, Inc.Universal electronic transaction card including receipt storage and system and methods of conducting electronic transactionsUS55901971995�~4��4��1996�~12��31��V-One CorporationElectronic payment system and methodUS56029181995�~12��22��1997�~2��11��Virtual Open Network Environment Corp.Application level security system and methodUS56048011995�~2��3��1997�~2��18��International Business Machines CorporationPublic key data communications system under control of a portable security deviceUS56130011996�~1��16��1997�~3��18��Bakhoum; Ezzat G.Digital signature verification technology for smart credit card and internet applicationsUS56779531995�~6��7��1997�~10��14��Spyrus, Inc.System and method for access control for portable data storage mediaUS57217811995�~9��13��1998�~2��24��Microsoft CorporationAuthentication system and method for smart card transactionsUS57374391996�~10��29��1998�~4��7��Smarttouch, Llc.Anti-fraud biometric scanner that accurately detects blood flowUS57395121996�~5��30��1998�~4��14��Sun Microsystems, Inc.Digital delivery of receiptsUS57427561996�~2��12��1998�~4��21��Microsoft CorporationSystem and method of using smart cards to perform security-critical operations requiring user authorizationUS57428451995�~6��22��1998�~4��21��Datascape, Inc.System for extending present open network communication protocols to communicate with non-standard I/O devices directly coupled to an open networkUS57579171995�~11��1��1998�~5��26��First Virtual Holdings IncorporatedComputerized payment system for purchasing goods and services on the internetUS57647891996�~9��27��1998�~6��9��Smarttouch, LlcTokenless biometric ATM access systemUS57781731996�~6��12��1998�~7��7��At&T Corp.Mechanism for enabling secure electronic transactions on the open internetUS57968311995�~5��31��1998�~8��18��GemplusMethod for conducting a transaction between a chip card and an information systemUS57990871995�~4��21��1998�~8��25��Citibank, N.A.Electronic-monetary systemUS58060451996�~7��8��1998�~9��8��Cardone Development CompanyMethod and system for allocating and redeeming incentive credits between a portable device and a base deviceUS58152521995�~11��21��1998�~9��29��Canon Kabushiki KaishaBiometric identification process and system utilizing multiple parameters scans for reduction of false negativesUS58156571996�~4��26��1998�~9��29��Verifone, Inc.System, method and article of manufacture for network electronic authorization utilizing an authorization instrumentUS58262411994�~9��16��1998�~10��20��First Virtual Holdings IncorporatedComputerized system for making payments and authenticating transactions over the internetUS58322121996�~4��19��1998�~11��3��International Business Machines CorporationCensoring browser method and apparatus for internet viewingUS58358941997�~2��14��1998�~11��10��Ann Adcock CorporationSpeaker and command verification methodUS58388121996�~7��25��1998�~11��17��Smarttouch, LlcTokenless biometric transaction authorization systemUS58570791994�~12��23��1999�~1��5��Lucent Technologies Inc.Smart card for automatic financial recordsUS58698221996�~10��4��1999�~2��9��Stratford, William D.Automated fingerprint identification systemUS58754321997�~2��15��1999�~2��23��Sehr; Richard PeterComputerized voting information system having predefined content and voting templatesUS58842711996�~9��6��1999�~3��16��Pitroda; Satyan G.Device, system and methods of conducting paperless transactionsUS58842921993�~5��6��1999�~3��16��Pitney Bowes Inc.System for smart card funds refillUS58899411996�~11��22��1999�~3��30��Ubiq Inc.System and apparatus for smart card personalizationUS58922111997�~5��1��1999�~4��6��Electronic Payment Services, Inc.Transaction system comprising a first transportable integrated circuit device, a terminal, and a security deviceUS58988381997�~9��30��1999�~4��27��Datascape, Inc.Editor for developing statements to support i/o operation on open network using segregator for segregating protocol statements from application statements upon verification of correspondenceUS59012391996�~8��1��1999�~5��4��Nec CorporationSkin pattern and fingerprint classification systemUS59059081997�~12��19��1999�~5��18��Datascape, Inc.Open network system for I/O operations with non-standard I/O devices utilizing extended protocol including device identifier and identifier for operation to be performed with deviceUS59076201996�~8��23��1999�~5��25��Cheyenne Property TrustMethod and apparatus for enforcing the use of cryptography in an international cryptography frameworkUS59124461996�~9��12��1999�~6��15��International Verifact Inc.Card reader with carriage powered by movement of inserted cardUS59159731997�~3��11��1999�~6��29��Sylvan Learning Systems, Inc.System for administration of remotely-proctored, secure examinations and methods thereforUS59179131996�~12��4��1999�~6��29��Otomaku Properties Ltd., L.L.C.Portable electronic authorization devices and methods thereforUS59179251997�~8��14��1999�~6��29��Moore; Lewis J.System for dispensing, verifying and tracking postage and other information on mailpiecesUS59200581996�~10��23��1999�~7��6��Weber; David C.Holographic labeling and reading machine for authentication and security applicationsUS59206291997�~12��19��1999�~7��6��Citibank, N.A.Electronic-monetary systemUS59208471996�~10��7��1999�~7��6��Visa International Service AssociationElectronic bill pay systemUS59307671997�~5��28��1999�~7��27��Motorola, Inc.Transaction methods systems and devicesUS59319171996�~9��26��1999�~8��3��Verifone, Inc.System, method and article of manufacture for a gateway system architecture with system administration information accessible from a browserUS59362261997�~5��20��1999�~8��10��Intel CorporationMass storage device adapter for smart cardsUS59427611995�~6��7��1999�~8��24��Tuli; Raja SinghEnhancement methods and devices for reading a fingerprint imageUS59871551997�~10��27��1999�~11��16��Dew Engineering And Development LimitedBiometric input device with peripheral portUS59884971996�~5��30��1999�~11��23��Mci Communications CorporationMethod for authenticating credit transactions to prevent fraudulent chargesUS59950141997�~12��30��1999�~11��30��Accu-Time Systems, Inc.Biometric interface device for upgrading existing access control unitsUS60120391999�~2��5��2000�~1��4��Smarttouch, Inc.Tokenless biometric electronic rewards systemUS60126361997�~4��22��2000�~1��11��Smith; Frank E.Multiple card data system having first and second memory elements including magnetic strip and fingerprints scanning meansUS60164761998�~1��16��2000�~1��18��International Business Machines CorporationPortable information and transaction processing system and method utilizing biometric authorization and digital certificate securityUS60414101997�~12��22��2000�~3��21��Trw Inc.Personal identification fobUS60954131997�~11��17��2000�~8��1��Automated Transaction CorporationSystem and method for enhanced fraud detection in automated electronic credit card processingUS61014771998�~1��23��2000�~8��8��American Express Travel Related Services Company, Inc.Methods and apparatus for a travel-related multi-function smartcardUS61049221998�~3��2��2000�~8��15��Motorola, Inc.User authentication in a communication system utilizing biometric informationUS61167361999�~4��23��2000�~9��12��Neuroptics, Inc.Pupilometer with pupil irregularity detection capabilityUS61204611999�~8��9��2000�~9��19��The United States Of America As Represented By The Secretary Of The ArmyApparatus for tracking the human eye with a retinal scanning display, and method thereofUS61480931997�~9��18��2000�~11��14��Leistad; Geirr I.Methods and device for validating a personal signatureUS61548791999�~2��5��2000�~11��28��Smarttouch, Inc.Tokenless biometric ATM access systemUS61990791998�~3��20��2001�~3��6��Junglee CorporationMethod and system for automatically filling forms in an integrated network based transaction environmentUS62196391998�~4��28��2001�~4��17��International Business Machines CorporationMethod and apparatus for recognizing identity of individuals employing synchronized biometricsUS62239841997�~6��6��2001�~5��1��Cybermark, Inc.Distinct smart card reader having wiegand, magnetic strip and bar code types emulation outputUS62333481998�~3��23��2001�~5��15��Fujitsu LimitedFingerprint registering apparatus, fingerprint identifying apparatus, and fingerprint identifying methodUS62574861998�~11��23��2001�~7��10��Cardis Research & Development Ltd.Smart card pin system, card, and readerUS62576202000�~2��23��2001�~7��10��Kenney Bernard CarrollHigh efficiency ski for sailing on snow or iceUS62634461998�~11��19��2001�~7��17��Arcot Systems, Inc.Method and apparatus for secure distribution of authentication credentials to roaming usersUS62687881998�~9��15��2001�~7��31��Litronic Inc.Apparatus and method for providing an authentication system based on biometricsUS62693481999�~1��29��2001�~7��31��Veristar CorporationTokenless biometric electronic debit and credit transactionsUS63079562000�~1��24��2001�~10��23��Gerald R. BlackWriting implement for identity verification systemUS63252851999�~11��12��2001�~12��4��At&T Corp.Smart card with integrated fingerprint readerUS63275781998�~12��29��2001�~12��4��International Business Machines CorporationFour-party credit/debit payment protocolUS63321931999�~1��18��2001�~12��18��Sensar, Inc.Method and apparatus for securely transmitting and authenticating biometric data over a networkUS63609531998�~7��15��2002�~3��26��Magnex CorporationSecure print sensing smart card with on-the-fly-operationUS64242491999�~2��11��2002�~7��23��Image Data, LlcPositive identity verification system and method including biometric user authenticationUS64468621999�~12��31��2002�~9��10��Mann W. Stephen G.Point of purchase (PoP) terminalUS64808251998�~1��29��2002�~11��12��T-Netix, Inc.System and method for detecting a recorded voiceUS64839292000�~8��18��2002�~11��19��Tarian LlcMethod and apparatus for histological and physiological biometric operation and authenticationUS64916392000�~4��5��2002�~12��10��Pacesetter, Inc.Extravascular hemodynamic sensorUS64965941999�~10��21��2002�~12��17��Prokoski Francine J.Method and apparatus for aligning and comparing images of the face and body from different imagersUS65605811998�~6��8��2003�~5��6��Visa International Service AssociationSystem and method for secure electronic commerce transactionUS67992701999�~9��24��2004�~9��28��Citrix Systems, Inc.System and method for secure distribution of digital information to a chain of computer system nodes in a networkUS68510511999�~4��12��2005�~2��1��International Business Machines CorporationSystem and method for liveness authentication using an augmented challenge/response schemeUSRE365801998�~4��29��2000�~2��22��Wizards, LlcSystem for verifying use of credit/identification card including recording physical attributes of unauthorized users�D�M�Q�ޥ��ѦҤ��m1"Automatic Ear Recognition by Force Field Transformations", by Hurley, et al., The Institution of Electrical Engineers, 2000, pp. 7/1-7/5.2"Biometric Person Authentication: Odor", by Korotkaya, Department of Information Technology, Laboratory of Applied Mathematics, Lappeenranta University of Technology, 18 pages.3"Biometrics: Hand Geometry", by Ross, et al., http://biometrics/cse.msu.edu/hand-geometry.html, Feb. 26, 2004, 2 pages.4"Biometrics: Speaker Verification", by Kulkarni, et al., http://biometrics.cse.msu.edu/speaker/html, Mar. 8, 2004, 5 pages.5"Credit on Your Key Ring, Buy Gas at Mobil, Exxon and Soon Burgers at McDonald's", by Krakow, MSNBC, http://www.msnbc.msn.com/id/3072638. Feb. 17, 2004, 4 pages.6"Everything You Need to Know About Biometrics", by Bowman, Identix Croproation, Jan. 2000, 8 pages.7"Fingerprint Analysis-The Basics", http://www.crimtrac.gov.au/fingerprintanalysis.htm, Feb. 18, 2004, 3 pages.8"Fingerprint Technology-Indentix Inc.-Empowering Identification(TM)-Understanding Biometrics", http://www.identix.com/newsroom/news-biometrics-finger.html, Feb. 18, 2004, 1 page.9"How Facial Recognition Systems Work", by Bonsor, http://computer.howstuffworks.com/facial-recognition.htm/printable, Feb. 18, 2004, 6 pages.10"How Fingerprint Scanners Work", by Harris, http:computer.howstuffworks.com/fingerprint-scanner.htm/printable, Feb. 18, 2004, 6 pages.11"Identix Inc.-Empowering Identification(TM)-Understanding Biometrics", http://www.identix.com/newsroom/news-biometrics-face.html, 1 page.12"Individual Biometrics-Facial Recognition", http:ctl.ncsc.dni.us/biomet%20web/BMfacial.html, Feb. 18, 2004, 2 pages.13"Individual Biometrics-Fingerprint", http:ctl.ncsc.dni.us/biomet%20web/BMFingerprint.html, Feb. 18, 2004, 3 pages.14"Individual Biometrics-Hand Geometry", http://ctl.ncsc.dni.us/biomet%20web/BMHand.html, Feb. 18, 2004, 2 pages.15"Individual Biometrics-Iris Scan", http:ctl.ncsc.dni.us/biomet%20web/BMIris.html, Feb. 18, 2004, 2 pages.16"Individual Biometrics-Retinal Scan", http:ctl.ncsc.dni.us/biomet%20web/BMRetinal.html, Feb. 18, 2004, 2 pages.17"Individual Biometrics-Vascular Patterns", http:ctl.ncsc.dni.us/biomet%20web/BMVascular.html, Feb. 18, 2004, 1 page.18"International Biometric Group-Signature Biometrics: How It Works", http://www.ibgweb.com./reports/public/reports/signature-scan-tech.html, Feb. 18, 2004, 1 page.19"International Biometric Group-Voice Recognition Technology: How It Works", http://www.ibgweb.com/reports/public/reports/voice-scan-tech.html, Feb. 18, 2004, 1 page.20"ISO Magnetic Stripe Card Standards", http://www.cyberd.co.uk/support./technotes/ioscards/htm, Feb. 9, 2004, 4 pages.21"ISO Standards", available from http://www/iso/ch/projects/loading/html.22"Judge Dismisses FTC Suit Against Rambus", Evers, IDG New Service, http://www.infoworld.com/article/04/02/18/HNjudgedismisses-.html, Feb. 18, 2004, 3 pages.23"Microsoft, IBM and Phillips Test RFID Technology", by Rohde, IDG New Service, http:www.compterweekly.com/Article127889.htm, Feb. 9, 2004, 3 pages.24"Pay By Touch Press Releases", http://www.paybytouch.com/press.html, Feb. 10, 2004, 3 pages.25"Paying It By Ear", The Guardian, Jan. 18, 2003, http://money.guardian.co.uk/creditanddebt/creditcards/story/0,1456,876908,00.html, 3 pages.26"PowerPay RFID Payment and Marketing Solution Speeds Purchases at Seahawks Stadium with Technology from Texas Instruments", http://www.powerpayit.com/news/Seahawks-pr.html, Feb. 9, 2004, 2 pages.27"Putting Their Finger on It", by Wilson, http://sanfrancisco.bizjournals.com/sanfrancisco/stories/2003/10/20/story6.html?t=printable, Feb. 9, 2004, 2 pages.28"RFID Take Priority With Wal-Mart", by DocMemory, http://www.simmtester.com/page/news/shownews.asp?num=6550, Feb. 9, 2004, 2 pages.29"Smart Card Developer's Kit: Some Basic Standards for Smart cards", http:unix.be.eu.org/docs/smart-card-developer-kit/ch03/033-035.html, Feb. 9, 2004, 2 pages.30"Smart Card Technology and Applications"; http://disc.cba.uh.edu/~rhirsch/fall96/lara.htm (8 pages).31"The Evolution of Mobile Payment", by McPherson, Financial Insights, Feb. 2, 2004, http://www.banktech.com./story/mews/showArticle/jhtml?article ID=17601432, 2 pages.32"The Henry Classification System", International Biometric Group, 7 pages.33"TI Embraces Prox Card Standard", by Roberti, Mar. 6, 2003, http://www.ti.com/tiris/docs/in-the-news/2003/3-6-03.shtml, 2 pages.34"Visual Speech and Speaker Recognition", by Luettin, Jun. 30, 2000, http://herens.idiap.ch/~luettin/luettin-thesis.bib.abs.html, 1 page.35Business Wire (press release), "Master Card E-Wallet", Jul. 11, 2000.36C.H. Fancher, "In Your Pocket Smartcards", IEEE Spectrum, Feb. 1997, pp. 47-53.37Dhem, et al., "SCALPS" Smart Card for Limited Payment Systems, IEEE Micro, Jun. 1996, pp. 42-51.38Dr. J. Leach, "Dynamic Authentication for Smartcards", Computers and Security, vol. 14, No. 5, 1995, pp. 385-389.39Geer, et al., "Token-Mediated Certification and Electronic Commerce", Proc. 2nd USENIX Workshop on Electronic Commerce, Nov. 18-21, 1996, pp. 13-22.40Gobioff, et al., "Smart Cards in Hostile Environments", Proc. 2nd USENIX Workshop in Electronic Commercie, Nov. 18-21, 1996, pp. 23-28.41I Blythe, "Smarter, More Secure Smartcards", BYTE, Jun. 1997, pp. 63-64.42J. Goldman, "Internet Security, The Next Generation, When Software Encryption is not Enough", Web Techniques, Nov. 1997, pp. 43-46.43J. Simmons, "Smart Cards Hold the Key to Secure Internet Commerce", EC World, Dec. 1998, pp. 36-38.44M.T. Smith, "Smart Cards: Integrating for Portable Company", Computer-Integrated Engineering, Aug. 1998, pp. 110-115.45Manninger, et al., "Adapting an Electronic Purse for Internet Payments", ACISP '98 Proceedings, Jul. 13-15, 1998, pp. 205-214.46Obongo.com Web Site, "Obongo", Aug. 8, 2000 (Description of wallet toolbar also available at http://www.obongo.com/chabi/webSite/index.htm).47P. Wayner, "Digital Cash", AP Professional, 1996, pp. 76-83, 85-100.48Pay By Touch-Company, http://www.paybytouch.com/company.html.49PR Newswire (press release), "Providian Launches Nation's First Clear Chip Card", Sep. 12, 2000. The press release may be related to the art of the invention, but based upon the information in the press release, it is unclear if the press release is prior art. However, in an abundance of caution the Applicant desires to put the press release into the file wrapper.50Transport Layer Security Working Group, "The SSL Protocol, CVersion 3.0", Nov. 18, 1996 (also available at (http://home.netscape.com/eng/ssl3/draft302.txt).51Turban, et al., "Using Smartcards in Electronic Commerce", Proc. 31st Annual Hawaii Inter. Conf. on System Sciences, vol. 4, 1998, pp. 62-69.52Wu, et al., "Authenticating Passwords Over an Insecure Channel", Computers and Security, vol. 15, No. 5, 1996, pp. 431-439.53Yan, et al., "Banking on the Internet and Its Applications", Proc. 13th Annual Hawaii Inter. Conf. on System Sciences, vol. 4, 1997, pp. 275-284.�Q�H�U�M�Q�ޥ� �ޥΥ��M�Q�ӽФ���o�G��� �ӽЪ��M�Q�W��US78903712008�~5��28��2011�~2��15��Trade-Van Information Services Co.Method for processing transaction informationUS79834512006�~6��30��2011�~7��19��Motorola Mobility, Inc.Recognition method using hand biometrics with anti-counterfeitingUS82146522008�~6��3��2012�~7��3��BIO-key International. Inc.Biometric identification network securityUS83359282008�~10��27��2012�~12��18��Sony CorporationInformation providing system and method and storage mediumUS200802707872008�~6��3��2008�~10��30��Bio-Key International, Inc.Biometric identification network securityUS201101384502010�~6��3��2011�~6��9��Validity Sensors, Inc.Secure Transaction Systems and Methods using User Authenticating Biometric InformationUS201102194462010�~3��5��2011�~9��8��Successfactors, Inc.Input parameter filtering for web application securityUS201200667582011�~9��12��2012�~3��15��Barclays Bank PlcOnline User Authentication������l�Ϥ�Google ���� - Sitemap - USPTO �j�q�U�� - ���p�v�F�� - �A�ȱ�� - ���� Google �M�Q - �N���^�X��ƬO�Ѭ��ӷ~�M�Q��Ʈw (IFI CLAIMS Patent Services) ����©2012 Google