Tokenless biometric electronic transactions using an audio signature to identify the transaction processor

Abstract

The invention discloses a tokenless biometric identification computer system, comprising at least a database containing registered biometric samples of users. A comparator compares a bid biometric sample of a user to at least one registered biometric sample, the bid biometric sample obtained directly from the user during an identification process for conducting an electronic transaction by the user. A stored audio signature is associated with a transaction processor entity, which the transaction processor entity is responsible for conducting the electronic transaction. A sound generator generates an analog or digital signal from the stored audio signature, and a transducer converts the analog or digital signal to a play back audio signature. This invention generates a play back audio signature from the stored audio signature that is associated with the transaction processor entity and the play back audio signature is played back to the user to identify the transaction processor entity that conducted the electronic transaction, wherein no man made personal devices such as credit cards, identity cards or the like is used during the identification process for conducting the electronic transaction.

Description

BACKGROUND OF THE INVENTION

[0002] This invention relates to the field of tokenless biometric financial and rewards transactions. Specifically, this invention is directed towards a system and method of producing an audio wave or sound to inform a system user of the identity of the party that has processed an electronic transaction for the user.

[0003] The use of a token, an inanimate object which confers a capability to the buyer presenting it, is pervasive in today's electronic financial or consumer rewards systems. Whether a consumer is buying groceries with a debit card, shopping in a department store with a credit card or earning free frequent flyer miles over the internet, at the heart of that transaction is an electronic transfer of funds or benefits enabled by a token, which acts to identify both the consumer as well as the financial account being accessed.

[0004] Traditionally, a person must possess a man-made personalized token to gain access or authorization for an electronic financial or rewards transaction. Tokens such as magnetic ink encoded paper checks, smart cards, magnetic swipe cards, identification cards or even a personal computer programmed with resident user-specific account data, are “personalized” because they are each programmed or encoded with data that is unique and personalized to the authorized user. For example: at a retail point of sale, the user directly possesses and physically presents personalized credit, debit or rewards cards imprinted with text and graphics identifying the merchant or the transaction processor entity institution, along with having a magnetic stripe encoded with his unique account data to the merchant; or, over the internet, the user directly possesses and electronically presents his personal computer's resident user-unique account data to the remote merchant, while the computer's screen presents text or graphical displays identifying the merchant or transaction processor entity institution. By contrast, as the disclosed invention is completely tokenless, the user does not directly possess, carry or remember any personalized token that can be lost, stolen or damaged.

[0005] Therefore, the key function of such tokens is to identify both the user and the financial account being accessed to pay for the transaction, while textually or graphically notifying to the consumer which merchant or banking account they are accessing. While the biometric component of a tokenless transaction accomplishes the former, this invention creates a solution for tokenless transaction to also accomplishing the latter. Specifically, since there is no card or physical object on which to imprint the name or the graphical logo of the transaction processor entity institution, this invention uses an audio signature to identify the authentic transaction processor to the user.

[0006] Various token-based biometric technologies have been suggested which use smart cards, magnetic swipe cards, or paper checks in conjunction with fingerprints, hand prints, voice prints, retinal images, facial scans or handwriting samples. These biometrics are generally either: a) stored in electronic and reproducible form on the token itself and the verification process is not isolated from the hardware and software directly used by the user attempting access, or; b) used in tandem with the user directly using magnetic swipe cards, paper checks or a PC with the user's financial data stored resident therein. Examples are described in U.S. Pat. Nos. 4,821,118 to Lafreniere; 4,993,068 to Piosenka et al.; 4,995,086 to Lilley et al.; 5,054,089 to Uchida et al.; 5,095,194 to Barbanell; 5,109,427 to Yang; 5,109,428 to Igaki et al.; 5,144,680 to Kobayashi et al.; 5,146,102 to Higuchi et al.; 5,180,901 to Hiramatsu; 5,210,588 to Lee; 5,210,797 to Usui et al.; 5,222,152 to Fishbine et al.; 5,230,025 to Fishbine et al.; 5,241,606 to Horie; 5,265,162 to Bush et al.; 5,321,242 Heath, Jr.; 5,325,442 to Knapp; 5,351,303 Willmore.

[0007] A tokenless biometric identification system requires no cards or tokens, which present the identity of the transaction processor. Furthermore, various transaction processors from different entities may conduct various phases of an electronic transactions, therefore, there is a need for an electronic financial and rewards transaction system that provides an audio signature associated with the transaction processor to notify and authenticate to the user the identity of the party that has processed the user's transaction, while not requiring the user to present any personalized man-made memory tokens such as smart cards, magnetic swipe cards, encoded paper checks or personal computers for identification.

SUMMARY OF THE INVENTION

[0008] The invention discloses a tokenless biometric identification computer system comprising at least a database containing registered biometric samples of users. A comparator compares a bid biometric sample of a user to at least one registered biometric sample wherein the bid biometric sample is obtained directly from the user during an identification process for conducting an electronic transaction by the user. An audio signature is associated with a transaction processor entity and is stored in the computer system, where the transaction processor entity is responsible for conducting the electronic transaction. A sound generator generates an analog or digital signal from the stored audio signature, and a transducer converts the analog or digital signal to a play back audio signature. This invention generates a play back audio signature from the stored audio signature that is associated with the transaction processor entity and the play back audio signature is played back to the user to identify the transaction processor entity that conducted the electronic transaction. This system operates without any man made personal devices such as credit cards, identity cards or the like is used during the identification process for conducting the electronic transaction.

[0009] The identification computer system optionally comprises a stored audio signature data bank, wherein the audio signature databank contains at least two stored audio signatures. Each audio signature is preferably associated with a transaction processor entity. Optionally, the identification computer system has two or more stored audio signatures that are associated with a transaction processor entity. Furthermore, the identification computer system has at least two transaction processor entities. The play back audio signature is preferably in the form of an audio sound wave comprising of the group of a tone, a musical fragment, speech, phonation, or a song that is designed or meant to identify the transaction processor entity.

[0010] The method of identification of a transaction processor entity to a user of a tokenless biometric identification computer system, comprises of the following steps. The system obtains a bid biometric sample from the user's person and comparing the bid biometric sample to registered biometric samples to produce a successful or failed identification of the user. A stored audio signature associated with a transaction processor entity is registered with the identification computer system. An analog or digital signal from the stored audio signature is generated and converted to a play back audio signature. The play back audio signature converted from the audio signature associated with the transaction processor entity is played back to the user to identify the transaction processor that conducted the electronic transaction, wherein no man made personal devices such as credit cards, identity cards or the like are used during the identification process for conducting the electronic transaction.

[0011] The method of the invention further comprises an audio data bank containing at least two audio signatures, where each audio signature is associated with a different transaction processor entity. Optionally, a stored audio signature data bank contains at least two stored audio signatures, each audio signature associated with a transaction processor entity. Additionally, two or more stored audio signatures is associated with a transaction processor entity. It is understood that more than one transaction processor entity may be identified by the system. Optionally, at least two transaction processors are identified to the user of the computer system by playing back the audio signature associated with each transaction processor entity.

[0012] Further objects and advantages will become apparent from a consideration of the drawings and ensuing description.

BRIEF DESCRIPTION OF THE DRAWINGS

[0013] FIG. 1 shows the overall embodiment of the invention where the user submits biometric information to the computer identification system and played backs an audio signature that is associated with the transaction processor.

[0014] FIG. 2 is a flow chart of an alternative embodiment of the invention, where the third party audio data bank resides in the identification computer system data processing center.

[0015] FIG. 3 shows an embodiment of a biometric input apparatus.

[0016] FIG. 4 shows the construction of an embodiment of construction of a Transaction Response Message.

[0017] FIGS. 5 and 6 show preferred embodiments of Transaction Request and Transaction Response Messages.

DETAILED DESCRIPTION

[0018] The invention provides a user with a cardless biometric system and method for identification of a party that conducts an electronic transaction and identification of a transaction processor entity through an audio signature that is played back to the user. Examples of electronic transactions include, banking transactions using electronic credit or debit accounts, point of sale financial transactions, purchase of goods or services over the Internet, user identification process, or loyalty program transactions such as receiving coupons, frequent flyer miles, or free items, using a rewards account. It is the essence of this invention that the user is not required to directly use any man-made personalized tokens during the identification processes after the user has initially registered with the identification system.

[0019] An electronic credit account is defined as an account that allows authorization and settlement of electronic payments as issued by transaction processor entities such as VISA®, MasterCard®, Discover®, American Express®, or an in-house credit account issued by a retailer such as Macy's. These transaction processor entities lend money to users and charge interest on the money, often charge interchange fees to payees, and are responsible for approving or denying the financial transactions. Off-line debit accounts are also defined as credit accounts even though the funds are deposited by a user instead of a line of credit from a transaction processor entity.

[0020] An electronic debit account is defined as an account that holds money deposited by a user available for immediate debit in real time, also known in the industry as on-line debit. These are often checking accounts operated by transaction processor entities such as banks and credit unions. These transaction processor entities are responsible for approving or denying the debit financial transactions. On-line debit transactions require a PIN for identification of the user.

[0021] A rewards account is defined as an account that contains reward-units deposited by a rewards transaction processor entity. The rewards account is optionally managed by the rewards transaction processor entity, or by a third party such as an individual, a retail service provider, a retail product provider, that manages rewards accounts from various reward-units issuers. A rewards transaction is any electronic debiting or crediting of reward-units with respect to a recipient's or a user's rewards account.

[0022] The tokenless electronic transaction system or the identicator comprises the following components:

[0023] Terminal

[0024] Communication lines

[0025] Data Processing Center (DPC)

[0026] Audio Signatures that are associated with a transaction processor entity

[0027] These components together allow a user to originate an electronic transaction without requiring the user to carry driver's licenses, credit cards, check guarantee cards, or other forms of identity.

[0028] Terminal

[0029] The terminal is a device that gathers identity information and other transaction data for use in authorizing electronic transactions. Transaction data includes any data that is necessary for the consummation of the electronic transaction including an audio signature code, transaction processor identification code, hardware identification code, price information, number of units of rewards, date, time, or other electronic instructions.

[0030] Each terminal conducts one or more of the following operations:

[0031] gathers biometric input from a user through a biometric input apparatus

[0032] gathers a PIN code or password from a user

[0033] the terminal and the DPC use encryption to store and retrieve a unique transaction processor audio signature and audio signature code

[0034] display information, allow parties to approve or cancel an electronic payment

[0035] scan a magnetic stripe card

[0036] store, retrieve, and play back a transaction processor audio signature identified by a transaction processor identification code that is associated with a transaction processor entity.

[0037] allow parties to an electronic transaction to select among a choice of transaction processors.

[0038] A preferred embodiment 10 containing these components is shown in FIG. 1.

[0039] Biometric input is gathered using a biometric input apparatus 2 which is optionally housed within terminal 4. Biometric input apparatus 2 is a finger image sensor, however it is understood that other types of biometric sensors such as an iris scan or facial scan and others are optionally used.

[0040] For systems employing a PIN, PIN input is preferably gathered using a keypad or PIN pad 6. Communication security is provided by well known encryption methods such as DES and public key encryption.

[0041] Additionally, in an embodiment, terminal 4 has memory unit 12 that stores registered audio signatures. Each registered audio signature is associated with an audio signature code, and each transaction processor audio signature code is associate with a transaction processor entity. Alternatively, memory unit 12 is located within biometric input apparatus 2. A sound generator 5 generates an analog or digital signal from the stored audio signature, and a transducer 7 converts the analog or digital signal to a play back audio signature.

[0042] Each terminal preferably has a unique hardware identification code that is registered with the DPC 8. This makes the terminal uniquely identifiable to the DPC in all transmissions from that terminal.

[0043] Information such as the amount of a transaction, the identity of a payee, the list of credit/debit accounts for a user to select from, or other transaction-related information is preferably displayed back to the user using an integrated LCD screen such as 14. It is preferable that the LCD screen be connected securely to the other components in the terminal to maintain security. Approval or cancellation of an electronic payment by a user is done using the terminal keypad 6.

[0044] During initial registration of a user, a magnetic stripe reader (not shown) is used to read the account information that is encoded on the magnetic stripe of the user's credit or debit card to expedite linking a user's credit/debit account or rewards account number to a registration biometric sample identity of the user and to reduce errors associated with entry of financial data and account numbers.

[0045] Optionally, the terminal 4 also validates public key digital certificates. In one embodiment, public keys of a particular certifying authority are initially stored in the terminal at the time of construction. This provides the mechanism to verify a payee's digital certificates that are signed by the certifying authority.

[0046] The terminal also optionally displays a list of the user's credit/debit financial accounts on the LCD screen and provides for selection of accounts using the keypad. Specific logos provided by each transaction processor entity is optionally displayed back in place of the account number, so that the user can select which electronic account will be used for conducting the electronic transaction.

[0047] Although a preferred embodiment is described above, there are many different variations on specific terminal implementations. Fundamentally any device that is secure, can identify a person or entity, and can connect to the DPC via some form of communication line can serve as a terminal.

[0048] Communication Lines

[0049] Communication between the terminal and the DPC occur via many different communication methods. Most depend on the particular communication networks already deployed by transaction processors 24 that are linked to the electronic transaction biometric authorization system.

[0050] In an embodiment shown in FIG. 1, terminals 4, DPC 8, and transaction processors 24, are connected to terminals through ATM networks, cable networks, or other such networks.

[0051] In yet another embodiment, a terminal is connected via the Internet, as is at least one DPC. TCP/IP is used to transmit messages from the terminals 4 to the DPC. There are many different ways to connect terminal to DPC that are well understood in the art.

[0052] Terminals 4 communicate with the DPC through Transaction Request Messages 19 and Transaction Response Messages 20. A preferred embodiment of the Transaction Request and Transaction Response Messages is shown in FIGS. 5 and 6.

[0053] Data Processing Center

[0054] Data Processing Centers (DPC) primarily serve to identify the user and the transaction processor in an electronic transaction, retrieve credit/debit or other financial account information for identified parties, and performs the execution that will result in settlement of transactions and funds delivery for an electronic transaction. The identity of the user in an electronic transaction is determined using a comparator engine 30 which compares a bid biometric sample against registered biometric samples of users.

[0055] As seen in FIG. 1, in a preferred embodiment of the invention the DPC 8 is connected via communication network 22, such as the Internet or intranet using a firewall machine 26 that filters out all messages that are not from legitimate terminal devices.

[0056] Execution Module (EM)

[0057] Once the user chooses to execute a financial transaction, the terminal transmits the account and financial transaction detail, and a transaction processor entity identification code to the DPC. The EM determines the identity of the transaction processor entity by extracting the transaction processor entity identification code from the transaction request message. The instructions of the financial transaction, say debit transaction through an automated teller machine, or credit of an account is executed. The transaction processor entity either rejects or accepts the financial transaction and transmits that denial or acceptance back to the DPC. In turn, the EM of the DPC transmits that the acceptance or denial of the financial transaction processor entity to the terminal through a transaction response message. Through the same transaction response message or optionally another transaction response message, the EM transmits the transaction processor audio signature code to the terminal 4. The audio signature code is then matched against the registered audio signature codes residing on memory device 12. If a match occurs the terminal 4 triggers the play back of the audio signature of the transaction processor entity that conducted the financial transaction. For credit transactions, the EM obtains an authorization from the transaction processor, drawing down against the credit limit of the account but not resulting in a transfer of funds until settlement occurs. Settlement is defined as a resolution of a crediting or debiting instruction. For debit transactions, the EM transmits a debit instruction to a transaction processor, resulting in an immediate debit from the user's debit account. In either case, if insufficient resources are present in the user's account, the transaction is denied. Preferably, each transaction (successful or not) is logged in a logging facility.

[0058] The execution module 28 generates a message to an appropriate transaction processor depending on the type of the credit/debit account selected by the user. For credit accounts, the EM transmits the user credit account number, the transaction amount, and the payee transaction data to the credit transaction processor network. This information is forwarded to the transaction processor entity, which then either approves or denies the credit transaction.

[0059] If the transaction processor entity approves the credit transaction, it returns an authorization to the execution module, and restricts the credit limit of the user's account by the amount of the authorization. The EM 28 then transmits the credit authorization number received from the transaction processor back to the terminal, which stores the authorization prior to settlement. At the end of the day, or whenever the payee demands, the terminal transmits all stored authorizations to the credit network acquiring processor for settlement, whereupon the user's account is debited, and the payee's account is credited.

[0060] In another embodiment, the transaction processor entity is also the payee, such as is the case with a user using a Macy's credit account to purchase merchandise at a Macy's store. In this embodiment, the transaction processor entity approves the transaction and decreases available credit, but settlement is not required.

[0061] For debit accounts, the EM transmits the user debit account number, the transaction amount, and the payee transaction data to an on-line debit network. This information is forwarded to the transaction processor entity bank of the user, where the transaction is either approved or denied.

[0062] If the transaction processor entity bank approves the debit transaction, it preferably returns a transaction number, which aids in standard maintenance and bookkeeping record of transactions, to the EM, and immediately debits the user's debit account. The transaction number is returned to the terminal, which lists the transaction on a daily debit transaction summary. The payee need take no further action since debit transactions are automatically settled, at which point the payee's financial account is credited. In ATM banking transactions, execution module 28 optionally debits or credits the user's financial account.

[0063] For rewards transactions, the execution module 28 generates a message to a rule module to cause the rewards transaction to be settled. In one embodiment, upon successful identification of a rewards issuer transaction processor by the computer system, the EM invokes a rule module in a particular rewards transaction. In one embodiment, a recipient electronic registry which preferably contains at least one rewards account, a transaction processor entity rule registry, and a transaction processor entity electronic registry databases are within the DPC 8. In another embodiment, the DPC communicates with at least one external computer system containing any one of the recipient electronic registry, the transaction processor entity rule registry or the transaction processor entity electronic registry.

[0064] Once the rewards account of a user is located and the applicable rule module is invoked, the reward-units are credited to the rewards account or debited from the rewards account depending upon the criteria specified in the rule module pertinent to the particular transaction. In the event there is insufficient reward-units in the rewards account for a rewards debiting transaction to be settled, the transaction is “declined”.

[0065] Registration

[0066] User and transaction processors that wish to conduct an electronic transactions must first register with the tokenless authorization system. A user must register at least one biometric or a biometric-PIN. Transaction processors register at least one transaction processor audio signature that is associated with an audio signature code of the transaction processor, and preferably at least one terminal or hardware identification code. The terminal or hardware identification code uniquely identifies the terminal to the DPC. The users must also register the appropriate electronic account information, such as a checking, a rewards, or a credit card account, for crediting and debiting of their electronic accounts.

[0067] To register, a user submits a registration biometric sample obtained from their physical person by the terminal's biometric sensor. The terminal then translates and compresses that biometric sample scan into a format suitable for rapid transmission to the DPC. Optionally, the user then enters a PIN code into the terminal keypad for enhanced security or increased speed of biometric identification.

[0068] Next, the user associates at least one electronic account number with the registration biometric sample in the system. Preferably, this is accomplished by scanning a magnetic stripe card provided by the person through the magnetic stripe card reader attached to the terminal.

[0069] The terminal transmits the registration data to the DPC 8. The DPC then inserts the biometric (or biometric-PIN) into the appropriate biometric identification database, and enables the user to originate electronic transactions.

[0070] Transaction processor audio signature codes are unique numbers or codes assigned to the transaction processors audio signatures. In an embodiment, when an electronic transaction is completed, the audio signature code is transmitted from the DPC to the terminal. The terminal contains a data bank of audio signatures 12, where each audio signature code is associated with an audio signature. When an audio signature code is received by the terminal, the audio signature that is associated with the audio signature code is played back to the user.

[0071] In an alternative embodiment of the identification computer system, during user registration, the user registers at least one user debit/credit account and assigns an account index code to each user credit/debit account. During the identification process, when submitting a bid biometric sample, the user adds the account index code to the Transaction Request Message 19. The account index code will automatically choose the pre-designated electronic account for the electronic transaction. The account index code preferably comprises of one or more alphanumeric characters.

[0072] Transaction Request Message

[0073] FIG. 5 shows an embodiment of a Transaction Request Message. A transaction request message originates from the terminal and contains information and data that is required for the processing of an electronic transaction. Primarily, these data includes a bid biometric sample taken from an individual user, and the instructions for debiting or credit an electronic account.

[0074] Transaction Response Message

[0075] FIG. 6 shows an embodiment of a Transaction Response Message. A transaction request message originates from the DPC and contains information and data that confirms the success or failure of a requested electronic transaction, as well as information that identifies the identity of the transaction processor. Typically, this includes a transaction processor entity code if the transaction processor audio signature is already stored on memory unit 12, or a transaction processor audio signature, if a new transaction processor audio signature is to be stored on memory unit 12, and played back to the user.

[0076] Registered Audio Signature

[0077] An audio signature is a series of notes, such as a MIDI sequence, or a sample audio waveform, such as a 44.1 kHz 16-bit stereo audio stream. Each audio signature is associated with a transaction processor through an audio signature code. The identification computer system uses audio signatures to identify a transaction processor party to the user.

[0078] Retail Point of Sale Financial Transactions

[0079] In a preferred embodiment, a party at the point of sale originates an electronic transaction in the following manner. First, the user submits a bid biometric sample obtained from their physical person by the terminal's biometric sensor. The terminal transmits the bid biometric to the DPC for identification of the user. The DPC identifies the user by comparing the bid biometric sample to the registered biometric samples. Upon successful identification of the user, the DPC retrieves the list of credit/debit accounts that the user has previously registered with the system, and transmits this list back to the user. As the account is operated by at least one transaction processor such as a bank, which is identified to and registered with the DPC, the audio signature code for that transaction processor is retrieved without the need for a transmission of an audio signature code from the terminal. Using the hardware identification code, the DPC determines whether the audio signature of the transaction processor resides on the terminals memory unit 12. If not, the DPC retrieves the registered audio signature for the transaction processor together with the audio signature code for that transaction processor and transmits them back to the terminal. If several transaction processors were involved in the transaction, then the audio signature of all transaction processors are played back to the user.

[0080] The terminal displays the list of credit/debit accounts to the user, who then selects one of the credit/debit accounts from which the funds will be drawn. In the event that only one credit/debit account was registered, that account will be automatically selected by the tokenless authorization system.

[0081] The transaction amount is then entered into the terminal, either using an electronic cash register or manually, by a payee. The user then either approves or cancels the transaction using the terminal's keypad. Once the electronic payment is approved, the terminal transmits the electronic payment to the DPC, where the DPC authorizes the transaction and transmits a transaction to the appropriate credit or debit network for the transaction amount.

[0082] In another embodiment, instead of the DPC transmitting the list of possible credit/debit accounts back to the terminal for user selection, the user instead indicates which account to select by entering an account index code or letter. This code is selected by the user during account registration and linked to a particular credit/debit account of the user.

[0083] Once the electronic transaction is complete, the DPC retrieves the audio signature code of the account operator transaction processor. The audio signature code is then transmitted via a Transaction Response Message 20 to the user. The terminal identifies the audio signature that is associated with the transmitted audio signature code in the audio signature data bank, and played backs the audio signature to the user. Thus, the computer system identifies the party that conducted the transaction to the user.

[0084] Audio Signature Data Bank

[0085] An audio signature data bank is a database that contains at least two audio signatures. Preferably, each audio signature is associated with at least one transaction processor entity. The audio signature databank is stored in the identification computer system's main memory, in a separate flash memory unit, or a file stored in the device's file system. Alternatively, audio signatures reside on a terminal's memory device 12, or are loaded from a network or an attached peripheral devices, such as hard disks, smart cards, PCMCIA cards, all of which are well known in the industry.

[0086] Sound Generator

[0087] The identification computer system uses a sound generator to playback the sound signature to the user. A sound generator includes a square wave generator with frequency control, a sine wave generator with frequency control, a music synthesis chip such as those found on Sound Blaster cards for personal computers, or a digital to analog converter. The sound wave generated by the sound generator is called a playback audio signature which is in the form of a tone, a musical fragment, speech, phonation, or a song. In a preferred embodiment, the device has control over the volume of the sound produced by the sound generator, and the sound generator is able to generate complex sounds containing multiple notes.

[0088] The sound generator may optionally include an amplifier. These and other sound reproduction methods are well known in the industry.

[0089] Transducer

[0090] The identification computer system also uses one or more transducers for playback the audio signatures. The sound generator produces an analog or digital signal which is then converted into sound or audio waves by the transducer. Examples of transducers include a conventional speaker, a piezoelectric buzzer or transducer, or a magnetic transducer.

[0091] To playback an audio signature to a user, the identification computer system identifies the audio signature associated with the transaction processor in the audio signature data bank through a transmitted audio signature code and transmits the audio signature to the terminal or biometric input apparatus. The sound generator in the terminal or biometric input apparatus converts the registered audio signature to an analog signal, which is converted into a playback audio signatures by the transducer.

[0092] The audio signature may be in the form of an audible voice announcing the actual name of the institution being identified, or may be a tonal sequence which is a representation of the identity of the institution. Such audible tones will serve to identify the transaction processor that was involved in any series of electronic transactions to the user. For example, if transaction processor A is used for conducting a financial transaction and transaction processor B is used to conduct a rewards transaction, the identification computer system preferably notifies the user of the identity audio signature of transaction processor A when the financial transaction process is complete, and the audio signature identity of transaction processor B when the rewards transaction is complete. Alternatively, the tokenless biometric identification system played backs the audio identity audio signatures when the user chooses a particular transaction processor to initiate an electronic transaction.

[0093] From the foregoing, it will be appreciated how the objectives and features of the invention are met. First, the invention provides an electronic payment computer system that provides for identification of a transaction processor using an audio signature play back to the user.

[0094] Second, the invention provides an electronic payment computer system that is capable of verifying a user's unique personal identity, as opposed to verifying possession of personalized objects and information.

[0095] Third, the invention verifies the user's identity based upon one or more unique characteristics physically personal to the user.

[0096] Fourth, the invention provides a system of secured access to a computer system that is highly resistant to fraudulent transaction authorization attempts by unauthorized users.

[0097] Although the invention has been described with respect to a particular tokenless authorization system that identifies a transaction processor to the user through the audio playback of that transaction processor's audio signature, and method for its use, it will be appreciated that various modifications of the apparatus and method are possible without departing from the invention, which is defined by the claims set forth below.

Claims

1. A tokenless biometric identification computer system, comprising: at least one database containing registered biometric samples of users; a comparator for comparing a bid biometric sample of a user to at least one registered biometric sample, the bid biometric sample obtained directly from the user during an identification process for conducting an electronic transaction by the user; a stored audio signature, wherein the stored audio signature is associated with a transaction processor entity, the transaction processor entity conducting the electronic transaction; a sound generator for generating an analog or digital signal from the stored audio signature; a transducer for converting the analog or digital signal to a play back audio signature; and means for playing back the play back audio signature to the user to identify the transaction processor entity that conducted the electronic transaction, wherein no credit cards or identity cards are used during the identification process for conducting the electronic transaction.

2. The system of claim 1, wherein the play back audio signature is in the form of an audio sound wave comprising one or more of the following: a tone, a musical fragment, speech, phonation, and a song.

3. The system of claim 1, wherein the bid biometric sample comprises any of the following: a fingerprint, a voice print, an iris scan, a retinal scan, and a facial image.

4. The system of claim 1, wherein the transaction processor entity comprises any of the following: a retailer, a bank, a credit association, a stored value system, and an internet payment entity.

5. A tokenless biometric identification computer system, comprising: at least one database containing registered biometric samples of users; a comparator for comparing a bid biometric sample of a user to at least one registered biometric sample, the bid biometric sample obtained directly from the user during an identification process for conducting an electronic transaction by the user; a stored audio signature data bank, wherein the audio signature databank contains at least a first stored audio signature and a second stored audio signature, each audio signature associated with a transaction processor entity, the transaction processor entity associated with the first stored audio signature conducting the electronic transaction; a sound generator for generating an analog or digital signal from the first stored audio signature; and a transducer for converting the analog or digital signal to a play back audio signature, the play back audio signature in the form of an audio sound wave comprising one or more of the following: a tone, a musical fragment, speech, phonation, and a song, and capable of being played back to the user to identify the transaction processor entity that conducted the electronic transaction.

6. A tokenless biometric identification computer system, comprising: at least one database containing registered biometric samples of users; a comparator for comparing a bid biometric sample of a user to at least one registered biometric sample, the bid biometric sample obtained directly from the user during an identification process for conducting an electronic transaction by the user, the bid biometric sample comprising any of the following: a fingerprint, a voice print, an iris scan, a retinal scan, and a facial image; a stored audio signature data bank, wherein the audio signature databank contains at least a first stored audio signature and a second stored audio signature, each audio signature associated with a transaction processor entity, the transaction processor entity associated with the first stored audio signature conducting the electronic transaction; a sound generator for generating an analog or digital signal from the first stored audio signature; and a transducer for converting the analog or digital signal to a play back audio signature, the play back audio signature capable of being played back to the user to identify the transaction processor entity that conducted the electronic transaction.

7. A tokenless biometric identification computer system, comprising: at least one database containing registered biometric samples of users; a comparator for comparing a bid biometric sample of a user to at least one registered biometric sample, the bid biometric sample obtained directly from the user during an identification process for conducting an electronic transaction by the user; a stored audio signature data bank, wherein the audio signature databank contains at least a first stored audio signature and a second stored audio signature, each audio signature associated with a transaction processor entity, the transaction processor entity associated with the first stored audio signature conducting the electronic transaction and comprising any of the following: a retailer, a bank, a credit association, a stored value system, and an internet payment entity; a sound generator for generating an analog or digital signal from the first stored audio signature; and a transducer for converting the analog or digital signal to a play back audio signature, the play back audio signature capable of being played back to the user to identify the transaction processor entity that conducted the electronic transaction.

8. A method of identification of a transaction processor entity to a user of a tokenless biometric identification computer system, comprising the steps of: obtaining a bid biometric sample from the user's person and comparing the bid biometric sample to registered biometric samples to produce a successful or failed identification of the user; registering a stored audio signature associated with a transaction processor entity with the identification computer system; generating an analog or digital signal from the stored audio signature; converting the analog or digital signal to a play back audio signature; and playing back the play back audio signature to the user to identify the transaction processor that conducted the electronic transaction, wherein no credit cards or identity cards are used during the identification process for conducting the electronic transaction.

9. The method of claim 8, wherein the bid biometric sample comprises any of the following: a fingerprint, a voice print, an iris scan, a retinal scan, and a facial image.

10. The method of claim 8, wherein the transaction processor entity comprises any of the following: a retailer, a bank, a credit association, a stored value system, and an internet payment entity.

11. A method of identification of a transaction processor entity to a user of a tokenless biometric identification computer system, comprising the steps of: obtaining a bid biometric sample from the user's person and comparing the bid biometric sample to registered biometric samples to produce a successful or failed identification of the user, the bid biometric sample comprising any of the following: a fingerprint, a voice print, an iris scan, a retinal scan, and a facial image; registering a stored audio signature associated with a transaction processor entity with the identification computer system; storing the stored audio signature in a stored audio signature data bank, the stored audio signature data bank including at least a second stored audio signature; generating an analog or digital signal from the stored audio signature; converting the analog or digital signal to a play back audio signature; and playing back the play back audio signature to the user to identify the transaction processor that conducted the electronic transaction.

12. A method of identification of a transaction processor entity to a user of a tokenless biometric identification computer system, comprising the steps of: obtaining a bid biometric sample from the user's person and comparing the bid biometric sample to registered biometric samples to produce a successful or failed identification of the user; registering a stored audio signature associated with a transaction processor entity with the identification computer system; storing the stored audio signature in a stored audio signature data bank, the stored audio signature data bank including at least a second stored audio signature; generating an analog or digital signal from the stored audio signature; converting the analog or digital signal to a play back audio signature; and playing back the play back audio signature to the user to identify the transaction processor that conducted the electronic transaction, the transaction processor that conducted the transaction comprising any of the following: a retailer, a bank, a credit association, a stored value system, and an internet payment entity.