System and method for conducting secure electronic transactions

A method for conducting an electronic transaction with a user device comprising the steps of:

• providing a token representative of a transaction to the user device;
• receiving demographic data identifying a user of the user device;
• enabling the user device to receive identifying biometric data for the user, wherein the identifying biometric data is not stored permanently and is not transmitted by the user device;
• enabling the user device to generate a biometric template representative of the received identifying biometric data, wherein the received identifying biometric data cannot be derived from the biometric template;
• enabling the user device to destroy the received identifying biometric data, whereby the received identifying biometric data is destroyed and only the biometric template representative of the received identifying biometric data remains;
• enabling the user device to attach the biometric template to the token;
• receiving the token and attached biometric template for completing the transaction represented by the token;
• comparing the communicated token and attached biometric template with reference data representative of the transaction and with a reference biometric template representative of the identifying biometric data, and then:
• when the communicated token matches the reference data representative of the transaction and the attached biometric template matches the reference biometric template, then removing the biometric template from the token, authorizing the transaction, completing the transaction and returning the token to the user to communicate the completion of the transaction;
• or
• when the communicated token does not match the reference data representative of the transaction or when the attached biometric template does not match the reference biometric template or when both the communicated token and attached biometric template do not match, then rejecting the transaction and communicating the rejection of the transaction to the user.

A computer-readable storage medium encoded with non-transitory computer instructions for conducting a transaction comprising:

• means for causing a computer to provide a token representative of a transaction;
• means for causing the computer to receive identifying demographic data for a user;
• means for causing the computer to receive a biometric identifier for the user;
• means for causing the computer to generate a biometric template representative of the biometric identifier, wherein the biometric identifier cannot be derived from the biometric template and the biometric identifier is then destroyed, whereby only the biometric template representative of the received biometric identifier remains;
• means for causing the computer to enable the user device to attach the biometric template to the token;
• means for causing the computer to receive the token and attached biometric template for completing the transaction represented by the token;
• means for causing the computer to remove the biometric template from the token;
• and
• means for causing the computer to return the token for completing the transaction represented by the token.