System and method for selectively initiating biometric authentication for enhanced security of financial transactions

Information

  • Patent Grant
  • 10275768
  • Patent Number
    10,275,768
  • Date Filed
    Friday, March 20, 2015
    9 years ago
  • Date Issued
    Tuesday, April 30, 2019
    5 years ago
Abstract
A method and system of selectively initiation biometric security based on thresholds is described. The method includes determining a transaction amount of a current transaction involving an electronic portable transaction device, retrieving a threshold amount from a data storage device, comparing the transaction amount and threshold amount, and, if the transaction amount matches or exceeds the threshold amount, initiating a biometric authentication process.
Description
CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is related to co-pending U.S. patent application Ser. No. 14/596,508, filed Jan. 14, 2015, entitled “System and Method for Requesting Reconciliation of Electronic Transaction Records for Enhanced Security”: U.S. patent application Ser. No. 14/596,472, filed Jan. 14, 2015, entitled “System and Method for Comparing Electronic Transaction Records for Enhanced Security”; U.S. patent application Ser. No. 14/596,420, filed Jan. 14, 2015, entitled “System and Method for Reconciling Electronic Transaction Records for Enhanced Security”; U.S. patent application Ser. No. 14/596,572, filed Jan. 14, 2015, entitled “Smart Card Systems Comprising a Card and a Carrier”; U.S. patent application Ser. No. 14/603,703, filed Jan. 23, 2015, entitled “Biometric Device Utilizing Finger Sequence for Authentication”; U.S. patent application Ser. No. 14/616,069 filed Feb. 6, 2015, entitled “Smart Card Systems and Methods Utilizing Multiple AIR Messages”; and U.S. patent application Ser. No. 14/664,573, filed Mar. 20, 2015, entitled “System and Method for Selectively Initiating Biometric Authentication for Enhanced Security of Access Control Transactions,” which are all incorporated herein by reference in their entirety.


FIELD OF THE INVENTION

The present invention relates to electronic transactions. More specifically, the present invention relates to system and method for selectively initiating biometric authentication for enhanced security of electronic transactions.


BACKGROUND

Electronic transactions—such as for payments or access to a facility or computer—can be conducted using electronic portable transaction devices, such as smart cards or mobile devices. A smart card is a device that includes an embedded integrated circuit chip that can be either a secure processing module (e.g., microprocessor, microcontroller or equivalent intelligence) operating with an internal or external memory or a memory chip alone. Smart cards can provide identification, authentication, data storage, and application processing, Smart cards can serve as credit or ATM debit cards, phone or fuel cards, and high-security access-control cards for granting access to a computer or a physical facility. Smart cards can authenticate identity of the user by employing a token, such as public key infrastructure (PKI) and one-time-password (OTP). In addition, smart cards can be configured for a biometric authentication to provide an additional layer of security.


Similarly, mobile devices such as smartphones, PDAs, tablets, and laptops can provide a platform for electronic transactions. For example, a user of a mobile device can conduct an electronic transaction for purchase of a product or service using an application that communicates with a mobile payment service. Mobile devices can be configured for a token-based authentication and/or a biometric authentication.


Additional layers of security, however, may not always be necessary, or desired. For example, biometric authentication may not need to occur for low-value or routine transactions, such as purchases below a certain amount. What is needed is a method of enhanced security that may be selectively applied based on the nature of the transaction.


BRIEF SUMMARY OF THE INVENTION

Various embodiments of the present disclosure are directed to selectively enhancing security of electronic transactions through the use of authentication thresholds.


In accordance with the technology described herein, a method of selectively initiating biometric authentication for financial transactions comprises identifying a transaction amount associated with an electronic transaction involving an electronic portable transaction device; retrieving a threshold amount from a data storage device; comparing the transaction amount from a data storage device; and initiating a biometric authentication process if the transaction amount matches or exceeds the threshold amount.


In accordance with the technology described herein, a device for selectively initiating biometric authentication for financial transactions comprises a processing module configured to execute a program configured to: identify a transaction amount associated with an electronic transaction involving an electronic portable transaction device; retrieve a threshold amount from a data storage device; compare the transaction amount and the threshold amount; and initiate a biometric authentication process if the transaction amount exceeds the threshold amount; and a memory configured to store the program.


Other features and aspects of the disclosed technology will become apparent from the following detailed description, taken in conjunction with the accompanying drawings, which illustrate, by way of example, the features in accordance with embodiments of the disclosed technology. The summary is not intended to limit the scope of any inventions described herein, which are defined solely by the claims attached hereto.





BRIEF DESCRIPTION OF SEVERAL VIEWS OF THE DRAWINGS

The technology disclosed herein, in accordance with one or more various embodiments, is described in detail with reference to the following figures. The drawings are provided for purposes of illustration only and merely depict typical or example embodiments of the disclosed technology. These drawings are provided to facilitate the reader's understanding of the disclosed technology and shall not be considered limiting of the breadth, scope, or applicability thereof. It should be noted that for clarity and ease of illustration these drawings are not necessarily made to scale.



FIG. 1 is a block diagram of an example electronic transaction system within which various embodiments of the technology disclosed herein may be implemented.



FIG. 2 is another block diagram of an example electronic transaction system within which various embodiments of the technology disclosed herein may be implemented.



FIG. 3 is a block diagram of an example electronic transaction system implementing biometric security utilizing thresholds according to certain aspects of the present disclosure.



FIG. 4 is a block diagram of another example electronic transaction system implementing biometric security utilizing thresholds according to certain aspects of the present disclosure.



FIG. 5 is a block diagram of another example electronic transaction system implementing biometric security utilizing thresholds according to certain aspects of the present disclosure.



FIG. 6 is a block diagram of an example computer access control system implementing biometric security utilizing thresholds according to certain aspects of the present disclosure.



FIG. 7 is a block diagram of an example facility within which a facility access control system according to certain aspects of the present disclosure may be implemented.



FIG. 8 is a block diagram of an example facility access control system implementing biometric security utilizing thresholds according to certain aspects of the present disclosure.



FIG. 9 is a flowchart illustrating an example biometric security utilizing thresholds for financial transactions according to certain aspects of the present disclosure.



FIG. 10 is a flowchart illustrating an example biometric security utilizing thresholds for access control transactions according to certain aspects of the present disclosure.



FIG. 11 is a flowchart illustrating an example of biometric security utilizing thresholds implemented in a portable access control device according to certain aspects of the present disclosure.



FIG. 12 is a flowchart illustrating an example of biometric security utilizing threshold implemented in a portable access control device according to certain aspects of the present disclosure.





DETAILED DESCRIPTION

The present disclosure addresses this and other problems associated with enhanced layers of security for electronic transactions by providing a procedure for selectively initiating biometric authentication of an electronic portable transaction device. In certain aspects of the present disclosure, the selective initiation of biometric authentication can be based on thresholds associated with the need for biometric authentication (hereinafter “threshold-based authentication procedure”). For financial transactions, biometric authentication can be initiated based on a comparison between a transaction amount of a transaction involving an electronic portable transaction device and a threshold amount associated with the user's account. For access control transactions, biometric authentication can be initiated based on a comparison between an access security level associated with an access domain and an access permission level associated with an electronic portable transaction device.


In the following detailed description, numerous specific details are set forth to provide a full understanding of various aspects of the subject disclosure. It will be apparent, however, to one ordinarily skilled in the art that various aspects of the subject disclosure may be practiced without some of these specific details. In other instances, well-known structures and techniques have not been shown in detail to avoid unnecessarily obscuring the subject disclosure.



FIG. 1 is a block diagram of an example electronic transaction system 100 that can implement a threshold-based authentication procedure according to certain aspects of the present disclosure. The system 100 includes an electronic portable transaction device (PTD) 110, a transaction processing system (TPS) 130, and an interface device 120 that facilitates communications between the PTD 110 and the TPS 130. The PTD 110 can be, for example, a smart card, a smart key, a smart fob, or a mobile device. In some embodiments, the PTD 110 can include a biometric authentication module (not shown) for biometric authentication.


The PTD 110 can conduct various types of electronic transactions with the TPS 130 via the interface device 120. For financial transaction applications, the PTD 110 can be a smart payment card such as a smart credit, debit, and/or prepaid card, or a smartphone with a payment transaction application. The TPS 130 can be a payment processing system of a merchant (e.g., Target®), a bank (e.g., Bank of America®), or a card issuer (e.g., Vise). The interface device 120 can be a point of sale (POS) terminal that can communicate with the PTD 110 using a contact method (e.g., matching male and female contact pads) or a contactless method (e.g., RFID, Bluetooth, NFC, Wi-Fi, ZigBee).


For access control applications, the PTD 110 can be a smart access card for providing access to a facility or computer. The TPS 130 can be a server in a central computer system, or a dedicated access controller that controls an access to a facility or computer. Interface device 120 can be a card reader that can communicate with the PTD 110 using a contact method (e.g., contact pads) or a contactless method (e.g., RFID, Bluetooth, NFC, Wi-Fi, ZigBee).


In the illustrated example of FIG. 1, the PTD 110 includes a processing module 112 and a data storage device 114; the interface device 120 includes a processing module 122 and a data storage device 124; and the TPS 130 includes a processing module 132 and a data storage device 134. In some embodiments, the PTD 110 can include a biometric authentication module (not shown) that includes a biometric sensor and a controller. The processing modules 112, 122, and 132, depending on the application, may be a microprocessor, microcontroller, application-specific integrated circuit (ASIC), field-programmable gate array (FPGA), computer, server, or any combination of components or devices configured to perform and/or control the functions of the PTD 110, interface device 120, and TPS 130, respectively. The data storage devices 114, 124, and 134, depending on the application, may be a read-only memory (ROM), such as EPROM or EEPROM, flash, a hard disk, a database, or any other storage component capable of storing executory programs and information for use by the processing modules 112, 122, and 132, respectively.



FIG. 2 is a block diagram of an example electronic transaction system 200 that implements a threshold-based authentication procedure according to certain aspects of the present disclosure As illustrated in FIG. 2, electronic transactions occur between a portable transaction device (PTD) 110A and a transaction processing system (TPS) 130A without an interface device. By way of example, a shopper may use a smartphone equipped with a camera to capture an image of a code (e.g., bar or QR code) to make a payment for a product or service by transmitting payment information to a card payment processing system via a cellular network. By way of another example, an access card reader at a facility may store information (e.g., passwords and/or security tokens) associated with employees authorized to enter the facility and, upon reading an access card, may compare security information received from the card with the stored information and grant or deny access depending on the outcome of the comparison.



FIG. 3 is a block diagram of an example electronic transaction system 300 that can implement a threshold-based authentication procedure according to certain aspects of the present disclosure. In the illustrated example, the system 300 includes an electronic portable transaction device (PTD) 310, an interface device 320, and a transaction processing system (TPS) 330. In some embodiments, the PTD 310 is a smart card, in which case the interface device 320 can be a card reader. In some embodiments, the PTD 310 is a mobile device such as a smart phone, PDA, or tablet, in which case the interface device 320 can be an optical scanner or camera that can read a code presented on a display of the mobile device, or a Bluetooth, Wi-Fi or a near field communication (NFC) device that can communicate authentication- and/or transaction-related data between the mobile device and the TPS 330. In some embodiments, the PTD 310 is a smart card and the interface device 320 is a mobile device, in which case the smart card can perform authentication-related functions and the mobile device can provide a communication link between the smart card and the TPS 330.


In the illustrated embodiment of FIG. 3, the PTD 310 includes a processor 112, a memory 114, and an interface 116. In certain embodiments, the memory 114 can store a program that performs various communication and transaction functions of the PTD 310. The memory 114 can also store a password, token, and/or other identification information unique to the PTD 310. In some embodiments, the memory 114 can be part of the processor 112. In various embodiments, the PTD 310 may include a second memory. In such embodiments, the second memory may store one or more of the data items discussed above with regard to memory 114. In other embodiments, the second memory can store a record of previous transactions involving the PTD 310 and implement a reconciliation-based authentication for extra security of the PTD 310, such as the process disclosed in U.S. patent application Ser. No. 14/596,508, U.S. patent application Ser. No. 14/596,472, and U.S. patent application Ser. No. 14/596,420, the disclosures of which are herein incorporated by reference in their entirety. In various embodiments, the more than one memory may be a single memory component. The interface device 320 includes a processor 122, a memory 124, and an interface 126. The TPS 330 includes one or more processing modules including a server 132, one or more data storage devices including a user database 134, and an interface 136 for communicating with the interface device 320 via a communication network 302. In some embodiments, the user database 134 can store various data items relating to the PTD 310, including a password and data items relating to previously completed transactions involving the PTD 310.


The interface 116 and the interface 126 provide a communication link between the PTD 310 and the interface device 320. Using this communication link, the PTD 110 can communicate authentication- and/or transaction-related data with the interface device 120 and/or the TPS 130. In some embodiments, the PTD 110 can also receive power in the form of a voltage and/or current from the interface device 120 via the interfaces 116, 126. In certain embodiments, the interfaces 116, 126 can include a pair of male and female contact pads provided in the PTD (e.g., a smart card) and the interface device (e.g., a POS terminal). In some embodiments, the interfaces 116, 126 can include a pair of transceivers supporting wireless standards such as RFID, Bluetooth, Wi-Fi, NFT, and ZigBee. In some embodiments, the interface 116 can be a display of the mobile terminal that presents a code (e.g., a bar code or QR code) and the interface 126 can be an optical/infrared code scanner coupled to a POS terminal. In some embodiments, the interfaces 116,126 are a pair of wireless transceivers in a mobile device (e.g., a smartphone) and a POS terminal, respectively. In some embodiments, where the PTD 110 is a contactless smart card and the interface device 120 is a mobile device (e.g., a smartphone), the interfaces 116, 126 can include a pair of wireless transceivers in the contactless smart card and the mobile device, respectively.


In some embodiments, the PTD 110 is a mobile device that communicates with the TPS 130 via a wide area wireless network, such as a 3G UMTS or 4G LTE network, without the need for an interface device 120. In some embodiments, the PTD 110 is a smart card having a wireless capability that allows the card to communicate with the TPS 130 via a cellular network, such as a 3G UMTS or 4G LTE network, without the need for an interface device 120.


In certain embodiments, the processor 112 is configured to perform an authentication procedure using a security token stored in the memory 114. Such a token-based authentication procedure is known in the art, and an exemplary procedure is described in “EMV® Payment Tokenisation Specification, Technical Framework” version 1.0, March 2014, which is incorporated herein by reference for all purposes.


In certain embodiments, the PTD 110 can include a biometric authentication module 350 that includes a control 352 and a biometric sensor 355. In other embodiments, the biometric authentication module 350 can be in the interface device (e.g., a POS terminal) instead of in the PTD 110. Biometric authentication can begin with the collection of a digital biometric sample (e.g., bitmap image of user's fingerprint) using the biometric sensor 355. Useful features contained in the collected sample are then extracted and formatted into a template record that can be matched against other template records. In various embodiments, the template is stored at registration (and when combined with identity vetting, establishes an identity) in a memory (not shown) inside the biometric authentication module 350 or in one of the first and second memories 113, 114. When a transaction takes place, the biometric sensor 355 can measure the same biometric characteristic and the control 352 can process the measured biometric characteristic into a template format, and compare the template to the previously registered template.


Biometric measurements may vary slightly from one measurement to the next. This variation is not typically due to changes in the biometric feature being measured but to the mechanism and environment in which the data are captured. Therefore, a biometric sample measured at registration may not precisely match the results of the live sample measurement. As a result of this variability, in various embodiments a similarity score is generated and this score is compared against a pre-determined threshold value to determine what constitutes an acceptable match.


Enhanced security may be applied to electronic transactions only when the nature of the electronic transaction breaches a certain threshold associated with electronic transactions, such as financial transactions or access control transactions. With a reference to the embodiment of FIG. 3, in a threshold-based authentication procedure for a financial transaction, the threshold may be a threshold amount related to a PTD 310 can be stored in memory 114 of the PTD 310, memory 124 of the interface device 320, or the memory 134 of the TPS 330. When a user attempts a new financial transaction involving the PTD 310, a transaction amount associated with the transaction is determined. The transaction amount is the total value of all the goods and/or services a user is purchasing at a given time. In addition, the threshold amount is retrieved from the memory 114, 124, or 134, and compared with the determined transaction amount. In various embodiments, the comparison is performed by the processing module 132 at the TPS 330. In other embodiments, the comparison is performed by the processing module 122 at the interface device 120. In some embodiments, the comparison is performed by the processing module 112 at the PTD 310. In some embodiments, the comparison can be performed by more than one device. For example, in an embodiment where the PTD 310 is a smart card (e.g., a smart card payment), the TPS 330 is a payment processing system, and the interface device is a mobile terminal (e.g., a smartphone) that communicates with the smart card (using e.g., RFID, Bluetooth, NFC, Wi-Fi, or ZigBee) and the TPS 330 (using e.g., a cellular network), the smart card can perform one comparison and the mobile terminal can perform another comparison as described further below with respect to FIG. 5.


For access transactions, the threshold may be an access security level. The access security level is a value indicative of a security level associated with an access control domain (e.g., a lab in a facility). When a user attempts new access transaction involving the PTD 310, the access security level associated with an access control domain is compared with an access permission level associated with the PTD 310. In some embodiments, the access permission level, access security level, or both may be stored in one of the memory 114, 124, and 134. In various embodiments, the comparison is performed by the processing module 132 at the TPS 330. In other embodiments, the comparison is performed by the processing module 122 at the interface device 120. In some embodiments, the comparison is performed by the processing module 112 at the PTD 310. In some embodiments, the comparison can be performed by more than one device. For example, in an embodiment where the PTD 310 is a smart card (e.g., a smart card payment), the TPS 330 is a payment processing system, and the interface device is a mobile terminal (e.g., a smartphone) that communicates with the smart card (using e.g., RFID, Bluetooth, NFC, Wi-Fi, or ZigBee) and the TPS 330 (using e.g., a cellular network), the smart card can perform one comparison and the mobile terminal can perform another comparison as described further below with respect to FIG. 5.


In some embodiments, a threshold-based authentication procedure can be requested by a device that is different from a device that performs the threshold-based authentication procedure (e.g., comparison of the threshold amount and transaction amount). For example, the TPS 330 can send a request for a threshold-based authentication procedure in connection with a new financial transaction involving the PTD 310. In some embodiments, the TPS 330 can also send the threshold amount associated with PTD 310 stored in database 134. The processor 122 at the interface device 320 can receive the request and the threshold amount from the TPS 330, determine a transaction amount for the current transaction involving the PTD 310, and compare the threshold amount and the transaction amount for a match. In other embodiments, the interface device 320 passes the request and the threshold amount received from the TPS 330 to the PTD 310, and the processor 112 at the PTD 310 receives the request and the threshold amount from the interface device 320, determine a transaction amount for the current transaction involving the PTD, and compare the threshold amount and the transaction amount for a match. In some embodiments where the PTD 310 (e.g., a smartphone) has the capability to communicate with a cellular network, such as a 3G UMTS or 4G LTE network, the PTD 310 can receive the request and the threshold amount from the TPS 330 via the cellular network without involving an interface device such as a POS terminal.


In some embodiments, the PTD 310 can send a request for a threshold-based authentication procedure in connection with a new financial transaction involving the PTD 310. In some embodiments, the PTD 310 can also send a threshold amount involving the PTD 310 that are stored in the memory 114. The processor 122 at the interface device 320 can receive the request and the threshold amount from the PTD 310, determine a transaction amount associated with the current transaction, and compare the threshold amount and transaction amount for a match. In other embodiments, the interface device 320 passes the request and the threshold amount received from the PTD 310 to the TPS 330, and the processor (e.g., server) 132 at the TPS 330 receives the request and the threshold from the interface device 320, determines a transaction amount associated with the current transaction involving the PTD 310, and compares the threshold amount and the transaction amount for a match. In some embodiments where the PTD 310 (e.g., a smartphone) has the capability to communicate with a cellular network, such as a 3G UMTS or 4G LTE network, the PTD 310 can send the request and the first record to the TPS 330 via the cellular network without involving an interface device such as a POS terminal.


In some embodiments, the interface device 320 can request a threshold-based authentication procedure related to a financial transaction by sending a request to either the PTD 310 or the TPS 330. If the request is sent to the PTD 310, the processing module 122 at the interface device 320 can retrieve a threshold amount for transactions involving the PTD 310 from the user database 134 at the TPS 330 and send the threshold amount to the PTD 310. The processing module 112 at the PTD 310 can receive the request and the threshold amount from the interface device 320, determine a transaction amount for the current transaction involving the PTD 310, and perform a comparison between the threshold amount and the transaction amount for a match. In various embodiments, if the request is sent to the TPS 330, the processing module 122 at the interface device 320 can retrieve a threshold amount involving the PTD 310 from the memory 114 at the PTD 310 and send the threshold amount to the TPS 330. The server 132 at the TPS 330 can receive the request and the threshold amount from the interface device 320, determine a transaction amount for the current transaction involving the PTD 310, and perform a comparison between the threshold amount and the transaction amount for a match. In other embodiments, the TPS 330 may already store the threshold amount in memory 134


Although the above threshold-based authentication procedure has been described in regards to financial transactions, the same embodiments are applicable to access transactions. Instead of determining a transaction amount associated with the current transaction, the PTD 310, TPS 330, or interface device 320 may retrieve an access permission level associated with the PTD 310, described above. The same comparison process would occur.


Various example arrangements of electronic transaction systems implementing a threshold-based authentication procedure are described below with respect to FIGS. 4-7. FIG. 4 depicts an example electronic payment transaction system 400 that implements a threshold-based authentication procedure according to certain aspects of the present disclosure. The system 400 includes a payment processing system 430 that includes one or more servers 432 and a user database 434 coupled to the servers 432. In some embodiments, the user database 434 can store various data items relating to card holders, including passwords, threshold amounts, and records of previously completed payment transactions. In various embodiments, the system 400 may include an internal or proprietary payment transaction system 401 of a merchant (e.g., Target®). Payment transaction system 401 may include various types of interface devices 420A-E that facilitate transaction-related communications between various types of portable payment transaction devices 410A-E and the server(s) 432 at the payment processing system 430. In the illustrated example, the portable payment transaction devices 410A-E are smart payment cards that can communicate with the interface devices 420A-E. Each of the portable payment transaction devices 410A-E can include all or some of the components 112, 114, 116, 350, 352, and 355 of the PTD 310 depicted in FIG. 3. Each of the interface devices 420A-E can include all or some of the components 122, 124, and 126 of the interface device 320 depicted in FIG. 3. In the illustrated embodiment, the merchant's internal payment transaction system 401 further includes a server 442 and a database 444 that can store data items relating to the merchant's customers including threshold amounts, passwords, tokens, and transaction records.


To enable communication between the payment processing system 430 and the merchant's internal payment transaction system 401, the interface devices 420A-E and the server 442 in the internal payment transaction system 401 have wired or wireless connections to an internal communication network 404 (e.g., Intranet), which is in turn connected a wide area network 406 (e.g., Internet). In this manner, the POS terminals 420A-E, the smart payment cards 410A-E, and the server 442 can engage in data communication with the server(s) 432 at the payment processing system 430.


In the illustrated example of FIG. 4, the interface device 420A is a fixed point of sale (POS) terminal that is configured to operate with a contact smart payment card 410A and has a wired connection (e.g., wired Ethernet) to the internal communication network 404. During a payment transaction, the contact smart payment card 410A is inserted into the POS terminal 420A for data communication. For this purpose, the contact smart payment card 410A can be equipped with male contact pads and the POS terminal 420A can be equipped with corresponding female contact pads or vice versa. Other methods of providing contact-based communication coupling between the contact smart payment card 410A and the POS terminal 420A, including micro connectors, can be utilized.


The interface device 420B is a fixed POS terminal that is configured to operate with a contactless smart payment card 410B and has a wired connection (e.g., wired Ethernet) to the internal communication network 404. During a payment transaction, the contactless smart payment card 410B is placed adjacent to the POS terminal 420B for wireless data communication. For this purpose, the contactless smart payment card 410B and the POS terminal 420B can be equipped with transceivers based on a wireless standard or technology, such as RFID, Bluetooth, NFC, Wi-Fi, and ZigBee.


The interface device 420C is a portable POS terminal that is configured to operate with a contact smart payment card 410C, and the portable POS terminal 420C has a wireless connection (e.g., wireless Ethernet) to the internal communication network 404. During a payment transaction, the contact smart payment card 410C is inserted into the portable POS terminal 420C for data communication. In various embodiments, the contact smart payment card 410C can be equipped with male contact pads and the POS terminal 420C can be equipped with corresponding female contact pads or vice versa. Other methods of providing contact-based communication coupling between the contact smart payment card 410C and the POS terminal 420C including, micro connectors, can be utilized.


The interface device 420D is a portable POS terminal that is configured to operate with a contactless smart payment card 410D, and POS terminal 420D has a wireless connection (e.g., wireless Ethernet) to the internal communication network 404. During a payment transaction, the contactless smart payment card 410D is placed adjacent to the portable POS terminal 420D for wireless data communication. For this purpose, the contactless smart payment card 410D and the POS terminal 420D can be equipped with transceivers based on a wireless standard or technology, such as RFID, Bluetooth, NFC, Wi-Fi, and ZigBee.


The interface device 420E is a fixed POS terminal that is configured to operate with a mobile device (e.g., a smartphone, PDA, tablet), and has either a wired connection (e.g., wired Ethernet) or a wireless connection (e.g., Wi-Fi) to the internal communication network 404. During a payment transaction, the mobile terminal 410E is placed adjacent to the POS terminal 420E for wireless data communication. For this purpose, the mobile terminal 410E and the POS terminal 420E can be equipped with transceivers based on a wireless standard or technology such as RFID, Bluetooth, NFC, Wi-Fi, and ZigBee. In certain alternative embodiments, the POS terminal 420E can have a wireless connection (e.g., wireless Ethernet) to the internal communication network 404. In some embodiments, the POS terminal 420E can be equipped with an optical scanner or camera that can read a code (e.g., bar code or QR code) displayed on a display of the mobile terminal 410E.


For ease of illustration only, without any intent to limit the scope of the present disclosure in any way, various aspects of operation of the electronic payment transaction system 400 will be described with respect to a financial transaction involving the contact smart payment card 410A and the POS terminal 420A. It shall be appreciated by those skilled in the art in view of the present disclosure that the described operation is applicable to other portable transaction devices (e.g., 410B-E) and interface devices (e.g., 420B-E), and for different types of transactions, such as access transactions (e.g., access to a facility or computer).


In operation, a new transaction is initiated when a user presents the smart payment card 410A at the POS terminal 420A to pay for products and/or services by, for example, inserting the card 410A into the POS terminal 421 as shown in FIG. 4. Before authorizing the new transaction, a threshold-based authentication procedure may be performed to determine whether the transaction is of sufficient worth and importance to require additional authentication of the user. For example, card 410A in coordination with the POS terminal 420A and/or the payment processing system 432 can determine whether the nature of the transaction required additional security and, if so, initiate a token-based authentication procedure. Optionally, the card 410A, a biometric authentication procedure may be initiated. To further enhance security of the transaction, a reconciliation-based authentication procedure may be performed before, during, or after a token-based authentication and/or a biometric based-authentication.


In certain embodiments, such additional authentication procedures may not be needed or desired. In various embodiments, a threshold-based authentication procedure is performed at the payment processing system 430. By way of example, after making a data connection with the card 410A, the POS terminal 420A can retrieve (e.g., request and receive) a threshold amount from the card 410A. The POS terminal 420A can also determine a transaction amount for the current transaction involving the card 410A. The POS terminal 420A can send a request for approval of the new transaction to the payment processing system 430 along with the threshold amount retrieved from the card 410A and the determined transaction amount. The server(s) 432 at the payment processing system 420 receives the request, the threshold amount, and the transaction amount, and performs a comparison of the threshold amount and the transaction amount.


In certain embodiments, the threshold-based authentication procedure is performed at the POS terminal 420A. By way of example, after making a data connection with the card 410A, the POS terminal 420A can retrieve a threshold amount and a transaction amount from the card 410A. The processor 122 at the POS terminal 420A performs a threshold-based authentication by determining whether the transaction amount received from the card 410A matches or exceeds the threshold amount. In some embodiments, the POS terminal 420A can determine the transaction amount instead of receiving the transaction amount from card 410A.


In certain embodiments, the threshold-based authentication is performed at the smart payment card 410A. By way of example, after making a data connection with the card 410A, the POS terminal 420A can retrieve a threshold amount from server(s) 432 at the payment processing system 420. The POS terminal 420A, upon receiving the threshold amount from the payment processing system, sends the threshold amount to the card 410A. The processor 112 at the card 410A performs a threshold-based authentication by comparing a transaction amount associated with the current transaction determined by the card 410A with the threshold amount received from the payment processing system 430 via the POS terminal 420A.



FIG. 5 depicts another example electronic payment transaction system 500 that implements a threshold-based authentication procedure according to certain aspects of the present disclosure. The system 500 includes a payment processing system 530 that includes one or more servers 532 and a user database 534 coupled to the server(s) 532. The sever(s) 532 conduct different types of electronic payment transactions 501, 502, 503 with mobile terminals 520A-C via a cellular network 506.


The first electronic payment transaction 501 involves a contact smart payment card 510A coupled to the mobile terminal 520A via a smart card reader 525 and conducting a payment transaction with the payment processing system 530 via the cellular network 506. The second electronic payment transaction 502 involves a contactless smart payment card 510B wirelessly coupled to the mobile terminal 520B and conducting a payment transaction with the payment processing system 530 via the cellular network 506. The third electronic payment transaction 503 involves the mobile terminal 510C as a portable transaction device and an interface device. In some embodiments, mobile terminal 510 can capture an image of a code (e.g., a bar or QR code) associated with a product printed on a package of the product, in a catalog, or advertisement using an image capture device (e.g., a camera) and conducting a payment transaction for the product with the payment processing system 530 via the cellular network 506.


In each of these payment transactions 501, 502, 503, a threshold-based authentication procedure similar to the threshold-based authentication procedures described above with respect to FIGS. 1-4 can be performed prior to initiating token-based or biometric-based authentication procedures. In the first payment transaction 501, a comparison of a threshold amount and a transaction amount involving the smart payment card 510A can be performed by the server(s) 532 at the payment processing system 530, a processor in the mobile terminal 520A, or a processor in the smart payment card 510A. The threshold amount can be stored in a memory in the smart payment card 510A, in the database 534 at the payment processing system 530, or in a memory in the mobile terminal 520A.


For the second payment transaction 502 a comparison of a threshold amount and a transaction amount involving the smart payment card 510B can be performed by server(s) 532 at the payment processing system 530, a processor in the mobile terminal 520B, or a processor in the smart payment card 510B. The first record can be stored in a memory in the smart payment card 510B, the database 534 at the payment processing system 530, or in a memory in the mobile terminal 520B.


For the third payment transaction 503, a comparison of a threshold amount and a transaction amount involving the mobile terminal 510C can be performed by server(s) 532 at the payment processing system 530 or a processor in the mobile terminal 510C. The first record can be stored in a memory in the mobile terminal 510C, and the second record can be stored in the database 534.


The threshold-based authentication procedure may be implemented in an access control system. The access control system may be implemented for access to a facility, one or more rooms within the facility, a computing device, a computer network, or a combination thereof. FIG. 6 illustrates an example facility implementing a threshold-based authentication procedure in accordance with the present disclosure. As illustrated in FIG. 6, each access domain within the facility is assigned an access security level. In various embodiments, the access domain may be an entry way to a lab or office within a facility and/or the exterior doors of the facility. For example, a facility that includes work under government contracts with varying levels of security may designate labs for each level of security applicable (e.g., confidential, secret, top secret). In the illustrated embodiment, each security level is given a numerical value to indicate the level of security required. In other embodiments, the access security level may be text-based.


In other embodiments, the access domain may include one or more computing device, such as a desktop, laptop, or other computing equipment implemented in a facility. In other embodiments, the access domain may be one or more computing networks implemented within an access control system. For example, a facility operator may employ multiple computer networks, one for each of various security levels.



FIG. 7 depicts an exemplary facility access control system 700 that implements a threshold-based authentication procedure according to certain aspects of the present disclosure. FIG. 7 illustrates a first facility access transaction 710 involving a smart access card 710A and a card reader 720A, and a second facility access transaction 720 involving a smart access fob 710B and a fob reader 720B. In the illustrated example, the system 700 further includes a central facility access controller 730 that includes a processing module 732 and a data storage 734 coupled to the processing module 732. The processing module 732 is communicatively connected to the card reader 720A and the fob reader 620B via a communication network 708, which can be a local area network (LAN) or a wide area network (WAN).


In the first facility access transaction 701, a user presents the smart access card 710A to the card reader 720B to gain access to a facility. The card reader 720B can communicate with the card 710A using one of various contact or contactless methods, including non-limiting examples described above. In the second facility access transaction 702, a user presents the smart access fob 710A to the fob reader 720B to gain access to the facility.


In each of these facility access transactions 701, 702, a threshold-based authentication procedure similar to the threshold-based authentication procedures described above with respect to FIGS. 1-4 can be performed to determine if a token-based authentication and/or a biometric-based authentication is required. For the first facility access transaction 701, a comparison of an access security level associated with an access domain and an access permission level associated with the smart access card 710A can be performed by the processing module 732 at the central facility access controller 730, a processor in the card reader 720A, or a processor in the smart access card 710A. The access security level and the access permission level can be stored in a memory in the smart access card 710A, the databased 734, in a memory in the card reader 730A, or a combination thereof. For the second facility access transaction 702, a comparison of an access security level associated with an access domain and an access permission level associated with the smart access fob 710B can be performed by the processing module 732 at the central facility access controller 730, a processor in the fob reader 720B, or a processor in the smart access fob 710B. The access security level and the access permission level can be stored in a memory in the smart access fob 710B, the database 734, in a memory in the fob reader 720B, or a combination thereof.



FIG. 8 depicts an exemplary computer access control system 800 that implements a threshold-based authentication procedure according to certain aspects of the present disclosure. FIG. 8 illustrates a first computer access transaction 801 involving a contact smart access card 810A and a card reader 820A, and a second computer access transaction 802 involving a contactless smart access card 810B and a card reader 820B. In the illustrated example, the system 800 further includes a central computer system 830 that includes one or more servers 832 and a database 834 coupled to the server(s) 832. The sever(s) 832 is connected to the computers 850A, 820B via a network 808, which can be a local area network (LAN) or a wide area network (WAN). In certain embodiments, the system 800 can allow a first group of users to access files and applications stored in and running on the computers 850A, 850B and allow a second group of users to access files and applications stored in and running on the computers 850A, 850B and the server(s) 832 and the database 834 in the central computer system 830.


In the first computer access transaction 801, a user can insert a contact smart access card 810A into a card reader 820A coupled to the desktop computer 850A for access to the desktop computer 850A and/or the central computer system 832. In the illustrated example, the desktop computer 850A is coupled to the network 808 via a wired connection. In the second computer access transaction 802, a user can place a contactless smart access card 810B adjacent to a card reader 820B coupled to a laptop computer 850B for access to the laptop computer 850B and/or the server(s) 832 and the database 834 in the central computer system 830. The laptop computer 850B is coupled to the network 808 via a wireless connection.


In each of these computer access transactions 801, 802, a threshold-based authentication procedure similar to the threshold-based authentication procedures described above with respect to FIGS. 1-4 can be performed to determine whether a token-based authentication and/or a biometric-based authentication is required. For the first computer access transaction 801, a comparison of an access security level associated with an access domain and an access permission level associated with the smart access card 810A can be performed by server(s) 832 at the central computer system 830, a processor in the card reader 820A, a processor in the smart access card 810A, or a processor in the desktop computer 850A. The access security level and the access permission level can be stored in a memory in the smart access card 810A, the database 834, in a memory in a desktop computer 850A, or a combination thereof. For the second computer access transaction 802, a comparison of an access security level associated and access domain and an access permission level associated with the smart access card 810B can be performed by server(s) 832 at the central computer system 830, a processor in the card reader 820B, a processor in the smart access card 810B, or a processor in the laptop computer 850B. The access security level and the access permission level can be stored in a memory in the smart access card 610B, the database 834, in a memory in the laptop computer 850B, or a combination thereof. In certain embodiments, a dedicated computer access controller (not shown) can be employed to control access to the computers 850A, 850B and/or the central computer system 830, a processing module (e.g., a processor) in the controller can perform one or more of a token-based authentication, a biometric-based authentication, and a reconciliation-based authentication, and a data storage device (e.g., a memory) in the controller can store records of computer access transactions for different users.


Although financial transactions and access control transactions have been described separately, the same basic threshold-based authentication process applies. A parameter associated with the electronic transaction involving an electronic portable transaction device (transaction amount/access security level) is compared with a threshold (threshold amount/access permission level). If the parameter exceeds the threshold, additional authentication procedures may be initiated. If the parameter does not exceed the threshold, the transaction may be completed without further authentication of the user.



FIG. 9 is a flowchart illustrating an example process 900 for a threshold-based authentication procedure for financial transactions according to certain aspects of the present disclosure.


The process 900 starts at state 901 and proceeds to operation 910, in which a processing module in a device identifies a transaction amount associated with an electronic transaction involving an electronic portable transaction device. The transaction amount is a total of all the goods and/or services a user is requesting to purchase during the transaction. The identification may be performed by an electronic portable transaction device, a transaction processing system configured to process financial transactions involving the electronic portable transaction device, or an interface device configured to facilitate communications between the electronic portable transaction device and the transaction processing system. Non-limiting examples of the electronic portable transaction device a smart payment card or a mobile terminal configured for payment transactions. Non-limiting examples of the interface device include a fixed or portable POS terminal, a mobile terminal, and a contract or contactless smart card or smart fob readers.


The process 900 proceeds to operation 920, in which a processing module in the authentication device retrieves a threshold amount from a data storage device. The data storage device can be a memory (e.g., database) at the transaction processing system, a memory in the electronic portable transaction device, or a memory in the interface device. The data storage device may be in the authentication device or in another device in the electronic transaction system. The threshold amount may be a predetermined amount above which biometric authentication is required before the transaction is allowed to be completed.


The process 900 proceeds to operation 930, in which a processing module in the authentication device compares the identified transaction amount and the threshold amount.


The process 900 proceeds to query state 940, in which a processing module in the authentication device determines if the transaction amount matches or exceeds the threshold amount. If the answer to the query is “yes” (i.e., the transaction amount exceeds the threshold), the process 900 proceeds to operation 850, in which the processing module initiates biometric authentication. In various embodiments, the authentication device may include a biometric authentication module, such as the module discussed above with regards to FIG. 3, and initiating biometric authentication includes requesting the user to enter biometric data through the biometric sensor. In other embodiments, the biometric authentication module may be included in a device other than the authentication device, and initiating biometric authentication includes sending a request to another device to obtain biometric data through the biometric sensor.


On the other hand, if the answer to the query at the state 940 is “no” (i.e., the transaction amount is less than the threshold amount), the process 900 proceeds to operation 960, in which a processing module in the authentication device allows the transaction to continue without requiring additional biometric authentication. The process 900 ends a state 970.



FIG. 10 is a flowchart illustrating an example process 1000 for a threshold-based authentication procedure for access control transactions according to certain aspects of the present disclosure. The process 1000 starts at state 1001 and proceeds to operation 101, in which a processing module in a device compares an access permission associated with an electronic portable transaction device and an access security level associated with an access domain. The process 1000 proceeds to query state 1020, in which the device determined if the access security level associated with the access domain is higher than the access permission level associated with the electronic portable transaction device. If the answer to the query is “yes” (i.e., the access security level exceeds the access permission level), the process 1000 proceeds to operation 1030, in which the processing module initiates biometric authentication. In various embodiments, the device may include a biometric authentication module, such as the module discussed above with regards to FIG. 3, and initiating biometric authentication includes requesting the user to enter biometric data through the biometric sensor. In other embodiments, the biometric authentication module may be included in a device other than the device performing the threshold-based authentication procedure, and initiating biometric authentication includes sending a request to the other device to obtain biometric data through the biometric sensor.


On the other hand, if the answer to the query at the state 1020 is “no” (i.e., access security level is less than the access permission level), the process 1000 proceeds to operation 1040, in which a processing module in the device permits access to the access domain without requiring additional biometric authentication. The process 1000 ends a state 1050.


It shall be appreciated by those skilled in the art in view of the present disclosure that there are numerous possible pairs of a requesting device and an authentication device. In the electronic payment system 400 of FIG. 4, for example, the requesting device can be one of the interface devices 420A-E and the authentication device can be the corresponding one of the portable transaction devices 410A-E, or vice versa. Alternatively, the requesting device can be one of the portable transaction devices 410A-E and the authentication device can be server(s) 432 at the payment processing system 430, or vice versa. Alternatively, the requesting device can be the server(s) 432 at the payment processing system 430 and the authentication device can be one of the interface devices 420A-E, or vice versa. In the electronic payment system 500 of FIG. 5, the requesting device can be one of the mobile terminals 520A-B and the authentication device can be one of the smart payment cards 510A-B, or vice versa. Alternatively, the requesting device can be one of the mobile terminals 520A-C and the authentication device can be the server(s) 532 at the payment processing system 530, or vice versa. Alternatively, the requesting device can be the server(s) 532 at the payment processing system 530 and the authentication device can be one of the smart payment cards 510A-B, or vice versa.



FIG. 11 is an example embodiment the access transaction threshold-based authentication procedure of FIG. 10 where the authentication device is an electronic portable transaction device. The process 1100 begins at 1101 and proceeds to 1110, where the electronic portable transaction device receives an indication of the access security level from a fixed access control device associated with the access domain. In various embodiments, the fixed access control device may be a smart access card or smart fob reader connected to the locking mechanism of an entry way to a facility or area of a facility, or connected to a computer or computing system. In various embodiments, the fixed access control device may be connected with an access control system and have access to a database of the access control system. The process 1100 proceeds to operation 1120, where the access security level and the access permission level are compared to determine if biometric authentication is required. Operations 1120, 1130, 1140, and 1150 operate in a similar fashion as operations 1010, 120, 1030, and 1040 of FIG. 10.



FIG. 12 is an example embodiment the access transaction threshold-based authentication procedure of FIG. 10 where the authentication device is a fixed access control device. The process 1200 begins at 1201 and proceeds to 1210, where the fixed access control device receives a request to access an access domain from a portable access control device. In various embodiments, the fixed access control device may be a smart access card or smart fob reader connected to the locking mechanism of an entry way to a facility or area of a facility, or connected to a computer or computing system. In various embodiments, the fixed access control device may be connected with an access control system and have access to a database of the access control system.


The process 1200 proceeds to operation 1220, where the fixed access control device receives an indication of an access permission level associated with the electronic portable transaction device from the electronic portable transaction device. The access permission level may be stored in a memory within the electronic portable transaction device. The process 1200 proceeds to operations 1230, 1240, 1250, and 1260, which operate in a similar way to operations 1010, 1020, 1030, and 1040 of FIG. 10.


It shall be appreciated by those skilled in the art in view of the present disclosure that various described operations of the exemplary processes 900, 1000, 1100, and 1200 may be performed in different orders, optionally skipped, and/or removed.


The description of the technology is provided to enable any person skilled in the art to practice the various embodiments described herein. While the technology has been particularly described with reference to the various figures and embodiments, it should be understood that these are for illustration purposes only and should not be taken as limiting the scope of the various embodiments.


There may be many other ways to implement the various embodiments. Various functions and elements described herein may be partitioned differently from those shown without departing from the spirit and scope of the technology disclosed. Various modifications to these embodiments will be readily apparent to those skilled in the art, and generic principles defined herein may be applied to other embodiments. Thus, many changes and modifications may be made to the various embodiments, by one having ordinary skill in the art, without departing from the spirit and scope of the various embodiments.


A reference to an element in the singular is not intended to mean “one and only one” unless specifically stated, but rather “one or more.” The term “some” refers to one or more. Underlined and/or italicized headings and subheadings are used for convenience only, do not limit the scope of the various embodiments, and are not referred to in connection with the interpretation of the description of the embodiment. All structural and functional equivalents to the elements of the various embodiments of the technology described throughout this disclosure that are known or later come to be known to those of ordinary skill in the art are expressly incorporated herein by reference and intended to be encompassed by the technology disclosed. Moreover, nothing disclosed herein is intended to be dedicated to the public regardless of whether such disclosure is explicitly recited in the above description.

Claims
  • 1. A method of selectively initiating biometric authentication for financial transactions involving an electronic portable transaction device comprising a smart card, the electronic portable transaction device including a processing module comprising a physical processor and a biometric authentication module comprising a biometric sensor and a controller, the method comprising: (a) collecting a first biometric sample from a user using the biometric sensor;(b) formatting by the controller the user's first biometric sample into a template;(c) storing the template in a memory inside the biometric authentication module;(d) identifying by the physical processor a transaction amount associated with an electronic transaction involving the electronic portable transaction device;(e) retrieving by the physical processor a fixed threshold amount associated with the electronic portable transaction device;(f) comparing by the physical processor the transaction amount and the fixed threshold amount;(g) determining by the physical processor whether the transaction amount matches or exceeds the fixed threshold amount; and(h) when the transaction amount matches or exceeds the fixed threshold amount, initiating by the physical processor a biometric authentication process involving the biometric authentication module, wherein the initiating a biometric authentication comprises requesting a user of the electronic portable transaction device to provide a second biometric sample, via the biometric sensor and comparing the second biometric sample to the template stored within the biometric authentication module.
  • 2. The method of claim 1, wherein initiating a biometric authentication comprises requesting biometric data associated with a user from an interface device for facilitating communication between the electronic portable transaction device and payment processing system, wherein the interface device comprises a biometric scanner.
  • 3. The method of claim 1, further comprising receiving by the physical processor a request to conduct an electronic financial transaction.
  • 4. The method of claim 1, wherein a data storage device is located at the electronic portable transaction device, at a payment processing system, or at an interface device for facilitating communication between the electronic portable transaction device and a payment processing system.
  • 5. An electronic portable transaction device comprising a smart card for selectively initiating biometric authentication for financial transactions, comprising: a biometric authentication module comprising a biometric sensor and a controller;a processing module comprising a physical processor, configured to execute a program configured to: (a) identify a transaction amount associated with an electronic transaction involving the electronic portable transaction device,(b) retrieve a fixed threshold amount associated with the electronic portable transaction device from a data storage device,(c) compare the transaction amount and the fixed threshold amount,(d) determine whether the transaction amount matches or exceeds the fixed threshold amount, and(e) when the transaction amount matches or exceeds the fixed threshold amount, request a user of the electronic portable transaction device to provide a biometric sample via the biometric sensor; anda memory configured to store the program.
  • 6. The device of claim 5, wherein the data storage device comprises a read only memory unit of the smart card.
  • 7. The device of claim 6, wherein the data storage device and the memory comprise the same component.
  • 8. The device of claim 5, wherein the smart card further comprises a set of contact pads configured to engage with a set of contact pads at an interface device for facilitating communication between the smart card and a payment processing system.
  • 9. The smart card of claim 5, wherein the smart card further comprises a biometric authentication module, comprising a biometric sensor configured to collect a user's first biometric sample to be stored in the memory, and a controller configured to process the measured biometric characteristics of the user's first biometric sample into a template format and compare the template to a second biometric sample entered through the biometric sensor during authentication.
  • 10. The device of claim 5 further comprising a transceiver configured to engage in wireless data communication with an interface device for facilitating communication between the electronic portable transaction device and a payment processing system.
  • 11. The device of claim 5, wherein the fixed threshold amount is stored in the data storage device located at the interface device, and the processing module is further configured to retrieve the fixed threshold amount from the data storage device.
  • 12. The device of claim 5, wherein the fixed threshold amount is stored in the data storage device located at the payment processing system, and the processing module is further configured to retrieve the fixed threshold amount from the data storage device.
  • 13. The method of claim 1, further comprising: (i) identifying by the physical processor a second transaction amount associated with a second electronic transaction involving the electronic portable transaction device;(j) retrieving by the physical processor the fixed threshold amount associated with the electronic portable transaction device;(k) comparing by the physical processor the second transaction amount and the fixed threshold amount;(l) determining by the physical processor whether the second transaction amount matches or exceeds the fixed threshold amount; and(m) when the second transaction amount matches or exceeds the fixed threshold amount, initiating by the physical processor a second biometric authentication process involving the biometric authentication module, wherein the initiating a biometric authentication comprises requesting the user of the electronic portable transaction device to provide a third biometric sample, via the biometric sensor and comparing the third biometric sample to the template stored within the biometric authentication module.
  • 14. The device of claim 5, wherein the physical processor is further configured to execute the program configured to: (f) identify a second transaction amount associated with a second electronic transaction involving the electronic portable transaction device,(g) retrieve the fixed threshold amount associated with the electronic portable transaction device from the data storage device,(h) compare the second transaction amount and the fixed threshold amount,(i) determine whether the second transaction amount matches or exceeds the fixed threshold amount, and(j) when the second transaction amount matches or exceeds the fixed threshold amount, request the user of the electronic portable transaction device to provide a second biometric sample via the biometric sensor.
US Referenced Citations (353)
Number Name Date Kind
4453074 Weinstein et al. Jun 1984 A
4582985 Loefberg Apr 1986 A
4725719 Oncken et al. Feb 1988 A
4747147 Sparrow May 1988 A
4910521 Mellon Mar 1990 A
4993068 Piosenka et al. Feb 1991 A
5175416 Mansvelt et al. Dec 1992 A
5180901 Hiramatsu Jan 1993 A
5180902 Schick et al. Jan 1993 A
5193114 Moseley et al. Mar 1993 A
5245329 Gokcebay Sep 1993 A
5259649 Shomron Nov 1993 A
5321751 Ray et al. Jun 1994 A
5438184 Roberts et al. Aug 1995 A
5461217 Claus et al. Oct 1995 A
5513272 Bogosian et al. Apr 1996 A
5521363 Tannenbaum May 1996 A
5521966 Friedes et al. May 1996 A
5534857 Laing et al. Jul 1996 A
5539825 Akiyama et al. Jul 1996 A
5541985 Ishii Jul 1996 A
5559504 Itsumi et al. Sep 1996 A
5559887 Davis et al. Sep 1996 A
5577121 Davis et al. Nov 1996 A
5578808 Taylor et al. Nov 1996 A
5581630 Bonneau et al. Dec 1996 A
5590038 Pitroda Dec 1996 A
5590197 Chen et al. Dec 1996 A
5602918 Chen et al. Feb 1997 A
5604801 Dolan et al. Feb 1997 A
5613001 Bakhoum Mar 1997 A
5677953 Dolphin Oct 1997 A
5703753 Mok Dec 1997 A
5721781 Deo et al. Feb 1998 A
5737439 Lapsley et al. Apr 1998 A
5739512 Tognazzini Apr 1998 A
5742756 Dillaway et al. Apr 1998 A
5742845 Wagner Apr 1998 A
5757917 Rose et al. May 1998 A
5764789 Pare, Jr. et al. Jun 1998 A
5778173 Apte et al. Jul 1998 A
5796831 Paradinas et al. Aug 1998 A
5799087 Rosen Aug 1998 A
5806045 Biorge et al. Sep 1998 A
5815252 Price et al. Sep 1998 A
5815657 Williams et al. Sep 1998 A
5826241 Stein et al. Oct 1998 A
5826243 Musmanno et al. Oct 1998 A
5835894 Adcock et al. Nov 1998 A
5838818 Herley et al. Nov 1998 A
5857079 Claus et al. Jan 1999 A
5869822 Meadows et al. Feb 1999 A
5875432 Sehr Feb 1999 A
5884271 Pitroda Mar 1999 A
5884292 Baker et al. Mar 1999 A
5889941 Tushie Mar 1999 A
5892211 Davis et al. Apr 1999 A
5898838 Wagner Apr 1999 A
5901239 Kamei May 1999 A
5905908 Wagner May 1999 A
5907620 Klemba et al. May 1999 A
5912446 Wong et al. Jun 1999 A
5915973 Hoehn et al. Jun 1999 A
5917913 Wang et al. Jun 1999 A
5917925 Moore et al. Jun 1999 A
5920058 Weber et al. Jul 1999 A
5920629 Rosen Jul 1999 A
5920847 Kolling et al. Jul 1999 A
5930767 Reber et al. Jul 1999 A
5931917 Nguyen et al. Aug 1999 A
5936226 Aucsmith Aug 1999 A
5942761 Tuli Aug 1999 A
5978495 Thomopoulos Nov 1999 A
5987155 Dunn et al. Nov 1999 A
5988497 Wallace et al. Nov 1999 A
5991411 Kaufman Nov 1999 A
5995014 DiMaria Nov 1999 A
6012039 Hoffman et al. Jan 2000 A
6012636 Smith et al. Jan 2000 A
6016476 Maes et al. Jan 2000 A
6018739 McCoy et al. Jan 2000 A
6041410 Shi et al. Mar 2000 A
6045956 Kato Apr 2000 A
6047281 Wilson et al. Apr 2000 A
6047282 Wilson et al. Apr 2000 A
6060815 Nysen May 2000 A
6070159 Wilson et al. May 2000 A
6091835 Smithies et al. Jul 2000 A
6095413 Tetro et al. Aug 2000 A
6095519 Shoemaker, Jr. Aug 2000 A
6101477 Hohle et al. Aug 2000 A
6104311 Lastinger Aug 2000 A
6104922 Baumann et al. Aug 2000 A
6116736 Stark et al. Sep 2000 A
6120461 Smyth Sep 2000 A
6130623 MacLellan et al. Oct 2000 A
6148093 McConnell et al. Nov 2000 A
6154879 Pare, Jr. et al. Nov 2000 A
6175656 Hoang Jan 2001 B1
6182892 Angelo et al. Feb 2001 B1
6199079 Gupta et al. Mar 2001 B1
6199762 Hohle Mar 2001 B1
6219639 Bakis et al. Apr 2001 B1
6223984 Renner et al. May 2001 B1
6233348 Fujii et al. May 2001 B1
6256690 Carper Jul 2001 B1
6257486 Teicher et al. Jul 2001 B1
6257620 Kenney Jul 2001 B1
6263446 Kausik et al. Jul 2001 B1
6265977 Vega et al. Jul 2001 B1
6268788 Gray Jul 2001 B1
6269348 Pare, Jr. et al. Jul 2001 B1
6270011 Gottfried Aug 2001 B1
6272562 Scott et al. Aug 2001 B1
6275353 Briggs Aug 2001 B1
6282649 Lambert Aug 2001 B1
6298146 Ilan et al. Oct 2001 B1
6307956 Black Oct 2001 B1
6325285 Baratelli Dec 2001 B1
6327578 Linehan Dec 2001 B1
6332193 Glass et al. Dec 2001 B1
6338048 Mori Jan 2002 B1
6338435 Carper Jan 2002 B1
6345761 Seelbach et al. Feb 2002 B1
6357663 Takahashi et al. Mar 2002 B1
6360953 Lin et al. Mar 2002 B1
6390374 Carper et al. May 2002 B1
6424249 Houvener Jul 2002 B1
6442286 Kramer Aug 2002 B1
6446862 Mann Sep 2002 B1
6480825 Sharma et al. Nov 2002 B1
6480935 Carper et al. Nov 2002 B1
6483929 Murakami et al. Nov 2002 B1
6483932 Martinez et al. Nov 2002 B1
6490443 Freeny, Jr. Dec 2002 B1
6496594 Prokoski Dec 2002 B1
6507662 Brooks Jan 2003 B1
6519565 Clements et al. Feb 2003 B1
6539101 Black Mar 2003 B1
6560581 Fox et al. May 2003 B1
6588660 Buescher et al. Jul 2003 B1
6588673 Chan et al. Jul 2003 B1
6591249 Zoka Jul 2003 B2
6601759 Fife et al. Aug 2003 B2
6601762 Piotrowski Aug 2003 B2
6609656 Elledge Aug 2003 B1
6615191 Seeley Sep 2003 B1
6628813 Scott et al. Sep 2003 B2
6629591 Griswold et al. Oct 2003 B1
6631201 Dickinson et al. Oct 2003 B1
6636620 Hoshino Oct 2003 B1
6655585 Shinn Dec 2003 B2
6657614 Ito et al. Dec 2003 B1
6658164 Irving et al. Dec 2003 B1
6662166 Pare, Jr. et al. Dec 2003 B2
6669086 Abdi et al. Dec 2003 B2
6681328 Harris et al. Jan 2004 B1
6687391 Scott et al. Feb 2004 B1
6697947 Matyas, Jr. et al. Feb 2004 B1
6703918 Kita Mar 2004 B1
6719200 Wiebe Apr 2004 B1
6732919 Macklin et al. May 2004 B2
6734887 Field May 2004 B2
6744909 Kostrzewski et al. Jun 2004 B1
6744910 McClurg et al. Jun 2004 B1
6765470 Shinzaki Jul 2004 B2
6776332 Allen et al. Aug 2004 B2
6799726 Stockhammer Oct 2004 B2
6816058 McGregor et al. Nov 2004 B2
6819219 Bolle et al. Nov 2004 B1
6826000 Lee et al. Nov 2004 B2
6828299 Yang et al. Dec 2004 B2
6828960 Parry Dec 2004 B2
6834795 Rasmussen et al. Dec 2004 B1
6867850 McClurg Mar 2005 B2
6870946 Teng Mar 2005 B1
6873974 Schutzer Mar 2005 B1
6877097 Hamid et al. Apr 2005 B2
6886104 McClurg et al. Apr 2005 B1
6892940 Kocarev et al. May 2005 B2
6901154 Dunn May 2005 B2
6914517 Kinsella Jul 2005 B2
6917695 Teng et al. Jul 2005 B2
6925439 Pitroda Aug 2005 B1
6925565 Black Aug 2005 B2
6928181 Brooks Aug 2005 B2
6928195 Scott et al. Aug 2005 B2
6929413 Schofield Aug 2005 B2
6931538 Sawaguchi Aug 2005 B1
6934861 Haala Aug 2005 B2
6944768 Siegel et al. Sep 2005 B2
6954260 Arnold et al. Oct 2005 B2
6968453 Doyle et al. Nov 2005 B2
6970582 Langley Nov 2005 B2
6971031 Haala Nov 2005 B2
6983062 Smith Jan 2006 B2
6988665 Schofield Jan 2006 B2
6996259 Cannon et al. Feb 2006 B2
6997381 Arnouse Feb 2006 B2
7010148 Irving et al. Mar 2006 B2
7028893 Goodman et al. Apr 2006 B2
7049962 Atherton et al. May 2006 B2
7051925 Schwarz, Jr. May 2006 B2
7059159 Lanigan et al. Jun 2006 B2
7059531 Beenau et al. Jun 2006 B2
7068822 Scott Jun 2006 B2
7073711 Fernandez et al. Jul 2006 B2
7079007 Siegel et al. Jul 2006 B2
7095880 Martinez et al. Aug 2006 B2
7102523 Shanks et al. Sep 2006 B2
7103201 Scott et al. Sep 2006 B2
7127088 Grajewski et al. Oct 2006 B1
7132946 Waldner et al. Nov 2006 B2
7155039 Lo Dec 2006 B1
7162060 Barton et al. Jan 2007 B1
7164440 Cannon Jan 2007 B2
7165716 Mödl et al. Jan 2007 B1
7171662 Misra et al. Jan 2007 B1
7181017 Nagel et al. Feb 2007 B1
7203344 McClurg et al. Apr 2007 B2
7218202 Bacchiaz et al. May 2007 B2
7239227 Gupta et al. Jul 2007 B1
7266848 Moyer et al. Sep 2007 B2
7271881 Arnold et al. Sep 2007 B2
7278025 Saito et al. Oct 2007 B2
7289649 Walley et al. Oct 2007 B1
7303120 Beenau Dec 2007 B2
7305563 Bacchiaz et al. Dec 2007 B2
7308122 McClurg et al. Dec 2007 B2
7314164 Bonalle et al. Jan 2008 B2
7314165 Bonalle et al. Jan 2008 B2
7319565 Arnold et al. Jan 2008 B2
7325724 Bonalle et al. Feb 2008 B2
7364071 Esplin Apr 2008 B2
7466348 Morikawa et al. Dec 2008 B2
7506172 Bhakta Mar 2009 B2
7543337 D'Agnolo Jun 2009 B2
7724137 Page May 2010 B2
7730526 Lamplough Jun 2010 B2
7751593 Hombo Jul 2010 B2
7938329 Tran May 2011 B2
7946501 Borracci May 2011 B2
7992789 Borracci Aug 2011 B2
8045956 Sun Oct 2011 B2
8095519 Delia Jan 2012 B2
8186580 Cannon et al. May 2012 B2
8253531 Davis et al. Aug 2012 B2
8275353 Sun Sep 2012 B2
8276816 Gardner Oct 2012 B2
8307207 Bacchiaz et al. Nov 2012 B2
8360322 Bonalle et al. Jan 2013 B2
8485442 McNeal Jul 2013 B2
8490872 Kim Jul 2013 B2
8499164 Ortiz et al. Jul 2013 B2
8553251 Iizuka Oct 2013 B2
8572395 Ito Oct 2013 B2
8598981 Idsøe et al. Dec 2013 B2
8607063 Ikeuchi Dec 2013 B2
8708230 Cannon et al. Apr 2014 B2
8713660 Carper Apr 2014 B2
8756680 Shashidhar Jun 2014 B2
8782427 Fedronic et al. Jul 2014 B2
8783578 Kim Jul 2014 B2
8786033 Saito Jul 2014 B2
8799167 Carper Aug 2014 B2
9697388 Jacobson Jul 2017 B1
20010049785 Kawan Dec 2001 A1
20020059523 Bacchiaz et al. May 2002 A1
20020095587 Doyle et al. Jul 2002 A1
20020153424 Li Oct 2002 A1
20030046554 Leydier Mar 2003 A1
20030159044 Doyle Aug 2003 A1
20040039909 Cheng Feb 2004 A1
20040129787 Saito et al. Jul 2004 A1
20040188519 Cassone Sep 2004 A1
20040266267 Inaba Dec 2004 A1
20050035200 Hendrick Feb 2005 A1
20050125674 Nishiki Jun 2005 A1
20050139685 Kozlay Jun 2005 A1
20050144354 Murashita Jun 2005 A1
20050161503 Remery Jul 2005 A1
20050182947 Bacchiaz et al. Aug 2005 A1
20050240778 Saito Oct 2005 A1
20060032905 Bear Feb 2006 A1
20060070114 Wood Mar 2006 A1
20060113381 Hochstein et al. Jun 2006 A1
20060161789 Doughty Jul 2006 A1
20060208066 Finn Sep 2006 A1
20070033150 Nwosu Feb 2007 A1
20070040017 Kozlay Feb 2007 A1
20070043594 Lavergne Feb 2007 A1
20070073619 Smith Mar 2007 A1
20070124536 Carper May 2007 A1
20070154018 Watanabe Jul 2007 A1
20070186106 Ting Aug 2007 A1
20070194131 Brown Aug 2007 A1
20070220273 Campisi Sep 2007 A1
20070228154 Tran Oct 2007 A1
20070251997 Brown Nov 2007 A1
20080005425 Saito Jan 2008 A1
20080016370 Libin Jan 2008 A1
20080019578 Saito et al. Jan 2008 A1
20080040615 Carper et al. Feb 2008 A1
20080054875 Saito Mar 2008 A1
20080072065 Bonalle et al. Mar 2008 A1
20080097924 Carper et al. Apr 2008 A1
20080126260 Cox May 2008 A1
20080148059 Shapiro Jun 2008 A1
20080164325 Borracci Jul 2008 A1
20080201658 Saito et al. Aug 2008 A1
20080223921 Salazar Sep 2008 A1
20080223925 Saito et al. Sep 2008 A1
20080230613 Leibenguth Sep 2008 A1
20080282334 Yves Nov 2008 A1
20090084858 Borracci Apr 2009 A1
20090094125 Killian Apr 2009 A1
20090313493 Ide Dec 2009 A1
20090322477 Celorio Dec 2009 A1
20100039234 Soliven et al. Feb 2010 A1
20100080425 Bebis Apr 2010 A1
20100148312 Jung Jun 2010 A1
20100153451 Delia Jun 2010 A1
20100161488 Evans Jun 2010 A1
20100215224 Saito Aug 2010 A1
20100257359 Currie Oct 2010 A1
20100260388 Garrett Oct 2010 A1
20100275259 Adams Oct 2010 A1
20110238540 Carrington Sep 2011 A1
20110256832 Park Oct 2011 A1
20120016798 Carper Jan 2012 A1
20120022957 Sun Jan 2012 A1
20120079273 Bacchiaz et al. Mar 2012 A1
20120120013 Kurz May 2012 A1
20120218079 Kim Aug 2012 A1
20120241524 Blot et al. Sep 2012 A1
20120297467 Carper Nov 2012 A1
20120313754 Bona Dec 2012 A1
20130026230 Cannon et al. Jan 2013 A1
20130036463 Shashidhar Feb 2013 A1
20130056540 Blot et al. Mar 2013 A1
20130080788 Bacchiaz et al. Mar 2013 A1
20130290136 Sheets Oct 2013 A1
20140006277 Rao Jan 2014 A1
20140046785 Jenkins Feb 2014 A1
20140232526 Carper Aug 2014 A1
20140251997 Bitton Sep 2014 A1
20150067348 Webber Mar 2015 A1
20150127553 Sundaram May 2015 A1
20150262170 Bouda Sep 2015 A1
20150379033 Agarwal Dec 2015 A1
20160191512 Tatourian Jun 2016 A1
20170170513 Sakamoto Jun 2017 A1
20170323130 Dickinson Nov 2017 A1
Foreign Referenced Citations (77)
Number Date Country
200238203 Nov 2002 AU
757159 Feb 2003 AU
2003274967 Apr 2004 AU
2004218720 Nov 2004 AU
784438 Apr 2006 AU
2006311596 May 2007 AU
2007229728 Oct 2007 AU
2010224455 Jan 2011 AU
2346592 Nov 2001 CA
2498288 Mar 2004 CA
2564707 Nov 2005 CA
2629435 May 2007 CA
2748563 Mar 2012 CA
2844003 Feb 2013 CA
60111892 Aug 2005 DE
10393215 Sep 2005 DE
994439 Apr 2000 EP
1256908 Nov 2002 EP
1418486 May 2004 EP
1537526 Jun 2005 EP
1157906 Jul 2005 EP
1647942 Apr 2006 EP
1716660 Nov 2006 EP
1759337 Mar 2007 EP
1840788 Oct 2007 EP
1924976 May 2008 EP
1952244 Aug 2008 EP
2290625 Mar 2011 EP
2434462 Mar 2012 EP
2569735 Mar 2013 EP
2953619 Jun 2011 FR
2959847 Nov 2011 FR
2473283 Mar 2011 GB
02088859 Mar 1990 JP
H0288859 Mar 1990 JP
02118790 May 1990 JP
11039483 Feb 1999 JP
2001250064 Sep 2001 JP
2001323691 Nov 2001 JP
2002183706 Jun 2002 JP
2005242650 Sep 2005 JP
2005326995 Nov 2005 JP
2006257871 Sep 2006 JP
200748118 Feb 2007 JP
2007048118 Feb 2007 JP
2007058649 Mar 2007 JP
2007156785 Jun 2007 JP
2007265321 Oct 2007 JP
2008078820 Apr 2008 JP
2010262586 Nov 2010 JP
2011090686 May 2011 JP
2012074011 Apr 2012 JP
2014134845 Jul 2014 JP
20030042639 Jun 2003 KR
9718653 May 1997 WO
2001016707 AL Mar 2001 WO
2001016759 Mar 2001 WO
2001016865 Mar 2001 WO
2001016873 Mar 2001 WO
2001016874 Mar 2001 WO
2001039427 Mar 2001 WO
2004025545 Mar 2004 WO
2005104704 Nov 2005 WO
2006102625 Sep 2006 WO
2007022423 Feb 2007 WO
2007056476 May 2007 WO
2007064429 Jun 2007 WO
2007143670 Dec 2007 WO
2007146681 Dec 2007 WO
2008010899 Jan 2008 WO
2008079491 Jul 2008 WO
2010019961 Feb 2010 WO
2010077999 Jul 2010 WO
2010133469 Nov 2010 WO
2010133496 Nov 2010 WO
2011067543 Jun 2011 WO
2011141659 Nov 2011 WO
Non-Patent Literature Citations (24)
Entry
Anonymous: “ISO/IEC 7816-3 Identification cards—Integrated circuit cards—Part 3: Cards with contacts—Electrical interface and transmission protocols”, Nov. 1, 2006 (Nov. 1, 2006), XP055438640, Retrieved from the Internet: URL:http://read.pudn.com/downloads132/doc/comm/563504/ISO-IEC 7816/ISO+IEC7816-3-2006.pdf [retrieved on Jan. 8, 2018].
Jung, Stefan, “A Low-Power and High-Performance CMOS Fingerprint Sensing and Encoding Architecture,” IEEE Journal of Solid-State Circuits, Jul. 1999, pp. 978-984, vol. 34, No. 7.
Noore, Afzel, “Highly Robust Biometric Smart Card Design,” IEEE Transactions on Consumer Electronics, Nov. 2000, pp. 1059-1063, vol. 46, No. 4.
Sanchez-Reillo, Raul, et al., “Fingerprint Verification Using Smart Cards for Access Control Systems,” 2001, pp. 250-253.
Sanchez-Reillo, Raul, et al., “Microprocessor Smart Cards with Fingerprint User Authorization,” IEEE AESS Systems Magazine, Mar. 2003, pp. 22-24.
Sung, Bum Pan, et al., “An Ultra-Low Memory Fingerprint Matching Algorithm and Its Implementation on a 32-bit Smart Card,” IEEE, Mar. 26, 2003, pp. 453-459.
Kim, Dong-Sun, “On the Design of an Embedded Biometric Smart Card Reader,” IEEE, Apr. 16, 2008, pp. 573-577.
Kim, Seong-Jin, “A CMOS Fingerprint System-on-a-Chip With Adaptable Pixel Networks and Column-Parallel Processors for Image Enhancement and Recognition,” IEEE Journal of Solid-State Circuits, Nov. 2008, pp. 2558-2567, vol. 43, No. 11.
Nixon, Jenny, “Reconciling your Quicken Account with the Bank Statement,” University of Nebraska, Lincoln, 2005.
“Biometric Technology for Secure Access,” Sep. 18, 2007, Biometric Associates, Inc., Baltimore, MD, USA.
Patent Cooperation Treaty, International Search Report for PCT/IB2016/000026, dated May 17, 2016, pp. 4-5.
Patent Cooperation Treaty, International Search Report for PCT/US2016/000020, dated May 24, 2016, pp. 4-5.
Patent Cooperation Treaty, International Search Report for PCT/IB2016/000048, dated Apr. 15, 2016, p. 5.
ISO 7816 Part 3: Electronic Signals and Transmission Protocols, www.cardwerk.com/smartcards/smartcard_standard_IS07816-3.aspx, Jan. 12, 2015 (11 pages).
John Fenske, “Biometrics Move to Smart Cards and Smartphones for Access Control”, John Fenske, Jul. 30, 2013 (4 pages).
Patent Cooperation Treaty, International Search Report for PCT/IB2016/000324, dated Oct. 18, 2016, pp. 4-5.
Patent Cooperation Treaty, International Preliminary Report on Patentability PCT/IB2016/000020, dated Jul. 18, 2017, p. 4.
Patent Cooperation Treaty, International Preliminary Report on Patentability for PCT/IB2016/000048, dated Apr. 26, 2016, p. 4.
Patent Cooperation Treaty, International Search Report for PCT/IB2016/00093, dated Sep. 5, 2017, p. 7.
Patent Cooperation Treaty, International Preliminary Report on Patentability for PCT/IB2016/000093, dated Sep. 26, 2017, p. 4.
Patent Cooperation Treaty, International Preliminary Report on Patentability for PCT/IB2016/000026, dated Jul. 18, 2017, p. 4.
Patent Cooperation Treaty, International Preliminary Report on Patentability for PCT/IB2016/000324, dated Sep. 26, 2017, p. 4.
Patent Cooperation Treaty, International Preliminary Report on Patentability for PCT/IB2016/000048, dated Jul. 15, 2017, p. 4.
Patent Cooperation Treaty, International Search Report for PCT/IB2016/00020, dated May 24, 2017, pp. 2-3.
Related Publications (1)
Number Date Country
20160275499 A1 Sep 2016 US