Back to results
US 12,731,151 B2Granted
Two-level authentication for secure transactions
AssigneeProxense, LLC
InventorJohn J. Giobbi
Life of this patent
Estimating the term…
Abstract
A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A Personal Digital Key stores one or more profiles (e.g., a biometric profile) in a tamper-proof memory that is acquired in a secure trusted process. Biometric profiles comprise a representation of physical or behavioral characteristics that are uniquely associated with an individual that owns and carries the PDK. The PDK wirelessly transmits the biometric profile over a secure wireless transaction to a Reader for use in a biometric authentication process. The Reader compares the received biometric profile to a biometric input acquired at the point of transaction in order to determine if the transaction should be authorized.
Claims20
A method comprising:
- determining a request for a transaction having a transaction amount;
- determining that the transaction amount associated with the transaction is under a threshold;
- detecting that a portable user device is within a proximity zone of a reader device;
- and
- establishing a wireless communication channel between the reader device and the portable user device within the proximity zone of the reader device and transmitting the request for the transaction including the transaction amount and device identification information uniquely identifying the portable user device from the portable user device to the reader device via the wireless communication channel without an authentication of a user associated with the portable user device, the device identification information stored in a read-only format in a secured memory of the portable user device and unchangeable subsequent to a manufacture of the portable user device, the reader device locally authenticating that the portable user device is valid using the device identification information without any remote lookup, the reader device automatically performing the transaction responsive to detecting that the portable user device is within the proximity zone of the reader device, determining that the transaction amount associated with the transaction is under the threshold, and locally authenticating the portable user device is valid, the reader device synchronized with a trusted third-party system to periodically retrieve updated list of valid devices and their registered uniquely identifying device identification information from the trusted third-party system at regular time intervals for performing local authentication of portable user devices without any remote lookup.
2 more elements
A system comprising:
- a computing device and a memory including instructions that, when executed by the computing device, cause the system to perform operations including:
- determining a request for a transaction having a transaction amount;
- determining that the transaction amount associated with the transaction is under a threshold;
- detecting that a portable user device is within a proximity zone of a reader device;
- and
- establishing a wireless communication channel between the reader device and the portable user device within the proximity zone of the reader device and transmitting the request for the transaction including the transaction amount and device identification information uniquely identifying the portable user device from the portable user device to the reader device via the wireless communication channel without an authentication of a user associated with the portable user device, the device identification information stored in a read-only format in a secured memory of the portable user device and unchangeable subsequent to a manufacture of the portable user device, the reader device locally authenticating that the portable user device is valid using the device identification information without any remote lookup, the reader device automatically performing the transaction responsive to detecting that the portable user device is within the proximity zone of the reader device, determining that the transaction amount associated with the transaction is under the threshold, and locally authenticating the portable user device is valid, the reader device synchronized with a trusted third-party system to periodically retrieve updated list of valid devices and their registered uniquely identifying device identification information at regular time intervals from the trusted third-party system for performing local authentication of portable user devices without any remote lookup.
3 more elements
Dependencies are inferred from the claim text.