Biometric authentication of mobile financial transactions by trusted service managers

An apparatus for authenticating a financial transaction, the apparatus comprising:

• a data communication device of a user, the device having separate first and second secure elements (SEs),
• the first SE storing credentials of the user, including data for authenticating financial transactions of the user by a third party trusted service manager (TSM),
• the second SE storing an application program,
• the first SE being operable in response to a request from the application program to verify the user's identity from a biometric trait of the user input to the device, generate data authenticating the financial transaction upon verifying of the user's identity, and
• transmit the authenticating data to the second SE;
• and
• the application program being operable when invoked by the user to prompt the user to input the biometric trait into the device, request verification of the biometric trait and authentication of the financial transaction from the first SE, and
• generate transaction instruction codes to effect and authenticate the financial transaction upon receipt of the authenticating data from the first SE.

A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which, when executed by one or more processors of a data communication device of a user, are adapted to cause the one or more processors to perform a method, comprising:

• running an application program that prompts the user to input a biometric trait of the user into the device;
• verifying the user's identity from the biometric trait input to the device;
• generating data authenticating a financial transaction of the user by a third party trusted service manager (TSM) from data previously stored in the device by the TSM in response to the verifying of the user's identity;
• and
• generating transaction instruction codes operable to effect and authenticate the financial transaction, wherein
• the verifying and the generating of the authenticating data are effected by a Payment/Wallet secure element (SE) of the device storing credentials of the user, and
• the prompting and the generating of the transaction instructions codes are effected by an Application SE of the device in which the application program is stored.