# US 2021/0344674 A1 · Tokenized contactless transaction enabled by cloud biometric identification and authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0344674 A1
- Document ID: US20210344674A1
- Status: Published application
- Kind: A1
- Application number: 17/283,897
- Filed: 2019-10-08
- Published: 2021-11-04
- Earliest claimed: 2018-10-11
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Yuexi Chen; Nicholas Vondrak; Erik Friend
- Web page: https://patentgrep.com/patent/US20210344674A1

## CPC

- G06Q 20/388: {using mutual authentication without cards, e.g. challenge-response}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/35: communicating wirelessly
- G06F 21/45: Structures or tools for the administration of authentication
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/3829: {involving key management}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G07C 9/10: Movable barriers with registering means
- G07C 9/37: using biometric data, e.g. fingerprints, iris scans or voice recognition
- G07C 9/38: with central registration
- H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity}
- H04L 63/105: {Multiple levels of security}
- G06V 40/172: {Classification, e.g. identification}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING

## Abstract

Described herein are a system and techniques for conducting transactions upon receiving a biometric sample from a user. In some embodiments, a security device obtains a biometric sample from a user. The security device then provides the biometric sample, or a biometric template derived therefrom, to a service provider, which is able to identify and authenticate the user based on the biometric sample. The service provider then obtains access credential and/or supplemental information for the user and provides it to the security device. The security device is then capable of completing a transaction using the received access credential data. In some embodiments, this may involve generating a cryptogram to be used in the transaction.

## Claims

### Claim 1

A method comprising:
receiving, by a security device, a biometric sample from a user;
transmitting, by the security device, the biometric sample of the user or a biometric template thereof to a service provider computer, wherein the service provider computer matches the biometric sample or the biometric template to a user account;
upon matching the biometric sample or the biometric template to the user account, receiving, by the security device, access credential data and supplemental information associated with the user account;
generating, by the security device, an interaction cryptogram; and
transmitting, by the security device, the access credential data and the interaction cryptogram to an access device in communication with the security device, such that the access device is caused to generate an authorization request message and transmit the authorization request message to an authorization provider for authorization.

### Claim 2 (depends on 1)

The method of claim 1, further comprising outputting, by the security device, an indication that the match is present and at least a portion of the supplemental information.

### Claim 3 (depends on 2)

The method of claim 2, wherein the supplemental information relates to an age of the user.

### Claim 4 (depends on 1)

The method of claim 1, wherein the supplemental information relates to a level of access for the user.

### Claim 5 (depends on 1)

The method of claim 1, wherein the access credential data comprises at least an access token and a cryptographic key.

### Claim 6 (depends on 5)

The method of claim 5, wherein the cryptographic key is a limited use key.

### Claim 7 (depends on 1)

The method of claim 1, wherein the access device, upon receiving authorization, is caused to provide instructions to an access gate, the instructions causing the access gate to grant the user access to a secure area.

### Claim 8 (depends on 1)

The method of claim 1, wherein at least a portion of the supplemental information associated with the user account is used to determine whether the transaction is to be authorized.

### Claim 9 (depends on 1)

The method of claim 1, further comprising deleting, from the security device, the access credential data within a predetermined period of time after transmitting the access credential data to the access device.

### Claim 10 (depends on 1)

The method of claim 1, wherein the security device is in wireless communication with the access device.

### Claim 11

A security device comprising:
a processor; and
a memory including instructions that, when executed with the processor, cause the security device to, at least:
receive a biometric sample from a user;
transmit the biometric sample of the user or a biometric template thereof to a service provider computer, wherein the service provider computer matches the biometric sample to a user account;
upon matching the biometric sample or the biometric template to the user account, receive access credential data and supplemental information associated with the user account;
generate an interaction cryptogram; and
transmit the access credential data and the interaction cryptogram to an access device in communication with the security device, such that the access device is caused to generate an authorization request message and transmit the authorization request message to an authorization provider for authorization.

### Claim 12 (depends on 11)

The security device of claim 11, wherein the instructions further cause the system to receive transaction data from the access device, and wherein the interaction cryptogram is generated in response to receiving the transaction data.

### Claim 13 (depends on 12)

The security device of claim 12, wherein the interaction cryptogram is formed by encrypting a portion of the transaction data received from the access device and the access token using a cryptographic key.

### Claim 14 (depends on 13)

The security device of claim 13, wherein the portion of the transaction data received from the access device comprises at least one of a transaction amount, terminal identifier, or unpredictable number.

### Claim 15 (depends on 12)

The security device of claim 12, wherein the transaction data received from the access device comprises one or more conditions of completing a transaction.

### Claim 16 (depends on 15)

The security device of claim 15, wherein the instructions further cause the system to determine, based on the supplemental information associated with the user account, whether the one or more conditions of completing the transaction are met.

### Claim 17 (depends on 16)

The security device of claim 16, wherein upon determining the one or more conditions of completing the transaction are not met, the transaction is declined.

### Claim 18 (depends on 11)

The security device of claim 11, wherein the biometric sample received from the user comprises facial data, fingerprint data, or voice data.