Method and system using universal ID and biometrics

#Limited access to financial services presents a problem for emerging markets which seek to empower its residents. For example, some markets may not have convenient access to banks or automatic teller machines (ATMs) for residents to manage their finances. One convention method for accommodating such markets is the use of Micro ATMs which typically support branchless banking and may be located at various non-bank locations. Micro-ATMs may have the capability of reading traditional credit and debit cards as well as other portable consumer devices.

#While Micro-ATMs may provide financial services to those that may not otherwise have access to financial institutions, there are some drawbacks. One of the drawbacks is the lack of robust security. There are many opportunities for fraud to occur in Micro ATM systems and conventionally there have not been any highly reliable systems in place to verify the identity of the Micro-ATM user. Embodiments of the invention address these and other problems.

#Some regions are implementing identification systems which may provide a process to authenticate area residents. An example of this is a universal identification (“UID”), which may be given to each resident. This identification system may be combined or used in conjunction with traditional payment processing network process flows to inexpensively and effectively use an existing commercial or government system to authenticate a user. The use of the identification system can lower the cost and risk associated with electronic transactions. The identification systems may utilize biometric data, such as finger prints an retina scans to lower the potential of fraud.

#FIG. 1 is a simplified block diagram of a universal ID and biometrics system, according to one embodiment of the present invention.

#FIG. 2A is a simplified flow diagram illustrating a method for authenticating a user, according to an embodiment of the present invention.

#FIG. 2B is a simplified flow diagram illustrating a method for authenticating and authorizing a user for a financial transaction according to an embodiment of the present invention.

#Embodiments of the invention are generally directed to systems, architectures of the systems, and methods for supporting universal ID and biometrics data.

#Some embodiments of the invention are related to both the authorizing and authenticating of a user to complete an account transaction. In certain embodiments, the authorization process may refer to processing a user transaction. For example, a user may swipe a payment device at a terminal (e.g., automatic teller machine or ATM) to perform a financial transaction. In addition, the user inputs biometric data which may include their fingerprint or a retinal scan. An aspect of the authorization process is to determine if the user has enough funds to complete the financial transaction. An aspect of the authentication process is to determine that the user is who they claim to be.

#In certain embodiments, a user swipes a payment device at a terminal to access funds from their bank account (transaction request). The terminal prompts the user to input their payment device data (e.g., bank identification number or “BIN”) and biometric data (e.g., fingerprint data). The terminal sends the BIN and biometric data, along with the transaction request, to an acquirer (e.g., a bank associated with the terminal). The acquirer in turn sends the BIN, biometric data, and transaction request to a payment processing network (e.g., VisaNet™). In an embodiment, the payment processing network determines a UID for the user based on the BIN. The payment processing network then sends the UID and the biometric data to an identification system to determine if the UID and biometric data match a UID and biometric data stored in a database (i.e., whether the user data and stored data correlate within a certain degree of accuracy). If the data correlates, the user is authenticated and the identification system sends the result to the payment processing network. Once the user is authenticated, the payment processing network sends the transaction request to an issuer (i.e., the bank that issued the user payment device) to process the authorization request. If the user has enough funds to complete the transaction request, the issuer executes the transaction and sends a message to the terminal to deliver the funds to the user. It should be noted that this particular embodiment is but one of many possibilities and permutations of the authentication and authorization process as further detailed below.