# US 10,374,795 B1 · Personal digital key initialization and registration for secure transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,374,795 B1
- Document ID: US10374795B1
- Status: Granted
- Kind: B1
- Application number: 14/986,306
- Filed: 2015-12-31
- Granted: 2019-08-06
- Earliest claimed: 2006-05-05
- Assignees: Proxense, LLC
- Applicants: Proxense, LLC
- Inventors: John J Giobbi; David L Brown; Fred S Hirt
- Web page: https://patentgrep.com/patent/US10374795B1

## CPC

- G06Q 20/409: {Device specific authentication in transaction processing}
- G06F 21/31: User authentication
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06Q 20/327: {Short range or proximity payments by means of M-devices}
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/40145: {Biometric identity checks}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 2221/2115: Third party
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G07C 9/257: {electronically (G07C9/26 takes precedence)}
- G07C 9/26: using a biometric sensor integrated in the pass
- G07C 2209/12: Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/80: Wireless
- H04W 12/06: Authentication
- H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.

## Claims

### Claim 1

A method comprising:
establishing, at a reader device, a communication channel with a personal digital key (PDK);
determining, at the reader device, that the PDK has a first status, a financial transaction prevented when the PDK has a second status and an authentication associated with the financial transaction initiated when the PDK has the first status;
determining the authentication associated with the financial transaction based on a predefined criterion associated with the financial transaction and based on a comparison of one or more types of authentication profiles permitted by the reader device to one or more types of authentication profiles satisfiable by the PDK;
initiating, at the reader device, the authentication associated with the financial transaction which was determined based on the comparison of one or more types of authentication profiles authentication types permitted by the reader device to one or more types of authentication profiles satisfiable by the PDK;
determining, at the reader device, that a trigger indicative of intent to complete the financial transaction is required to continue authentication;
receiving, at the reader device, information indicating that the trigger indicative of intent to complete the financial transaction has been executed; and
receiving, at the reader device, payment means information from the PDK subsequent to execution of the trigger and successful authentication of a user, the payment means associated with a source of payment.

### Claim 2 (depends on 1)

The method of claim 1, comprising:
determining a status of the PDK based at least in part on a registry including data describing the status of one or more PDKs; and
determining that the PDK is in good standing, wherein the first status is in good standing.

### Claim 3 (depends on 2)

The method of claim 2, wherein the PDK is in good standing when not reported as lost, stolen, expired or revoked.

### Claim 4 (depends on 1)

The method of claim 1, wherein the second status includes at least one of being lost, stolen, expired and revoked.

### Claim 5 (depends on 1)

The method of claim 1, wherein the trigger indicative of intent to complete the financial transaction includes acquisition of a biometric input and the trigger indicative of intent to complete the financial transaction is executed when a user's biometric input is received via a biometric scanner, the biometric input compared to a biometric profile stored on the PDK, the successful authentication including a match between the biometric input and the biometric profile stored on the PDK.

### Claim 6 (depends on 5)

The method of claim 5, wherein the biometric input is based on one or more features of the user's finger.

### Claim 7 (depends on 1)

The method of claim 1, wherein the PDK is integrated into a cell phone.

### Claim 8 (depends on 1)

The method of claim 1, wherein the PDK is integrated into a watch.

### Claim 9 (depends on 1)

The method of claim 1, wherein the payment means information is associated with a default payment means.

### Claim 10 (depends on 1)

The method of claim 1, wherein the payment means information is associated a payment means selected by the user from a plurality of potential payment means associated with the user.

### Claim 11

A system comprising:
one or more processors; and
a memory storing instructions that when executed by the one or more processors, causes the system to:
establish a communication channel between a personal digital key (PDK) and a reader;
determine that the PDK has a first status, a financial transaction prevented when the PDK has a second status and an authentication associated with the financial transaction initiated when the PDK has the first status;
determine the authentication associated with the financial transaction based on a predefined criterion associated with the financial transaction and based on a comparison of one or more types of authentication profiles permitted by the reader to one or more types of authentication profiles satisfiable by the PDK;
initiate the authentication associated with the financial transaction which was determined based on the comparison of one or more types of authentication profiles authentication types permitted by the reader to one or more types of authentication profiles satisfiable by the PDK;
determine that a trigger indicative of intent to complete the financial transaction is required to continue authentication;
receiving information indicating that the trigger indicative of intent to complete the financial transaction has been executed; and
receiving payment means information from the PDK subsequent to the execution of the trigger and successful authentication of a user, wherein the PDK includes the payment means information, the payment means associated with a source of payment.

### Claim 12 (depends on 11)

The system of claim 11 comprising:
a network interface adapted to receive data describing the status of the PDK from a remote registry.

### Claim 13 (depends on 11)

The system of claim 11 comprising:
a biometric reader adapted to obtain a representation of a physical or behavioral characteristic of the user.

### Claim 14 (depends on 13)

The system of claim 13, wherein the biometric reader comprises at least one of a fingerprint scanner, a retinal scanner, an iris scanner, a face scanner, a palm scanner, a DNA analyzer, a signature analyzer and a voice analyzer.

### Claim 15 (depends on 11)

The system of claim 11, wherein the first status is in good standing and the PDK is in good standing when not reported as lost, stolen, expired or revoked.

### Claim 16 (depends on 11)

The system of claim 11, wherein the second status includes at least one of being lost, stolen, expired and revoked.

### Claim 17 (depends on 13)

The system of claim 13, wherein the trigger indicative of intent to complete the financial transaction includes acquisition of a biometric input using the biometric reader, the biometric input compared to a biometric profile stored on the PDK, the successful authentication including a match between the biometric input and the biometric profile stored on the PDK.

### Claim 18 (depends on 11)

The system of claim 11, wherein the PDK is integrated into a cell phone.

### Claim 19 (depends on 11)

The system of claim 11, wherein the PDK is integrated into a watch.

### Claim 20 (depends on 11)

The system of claim 11, wherein the payment means information is associated a payment means selected by the user from a plurality of potential payment means associated with the user.