US 9,648,015 B1 · Systems and methods for facilitating secure authentication using a biometric-enabled transitory password authentication device

Abstract

Secure authentication may be facilitated using a biometric-enabled transitory password authentication device. Exemplary implementations may facilitate secure payments and/or authentication via an application running on a user computing platform (e.g., a mobile device) simultaneously coordinating with both a server and the authentication device, which may act in some respects as an external hardware token. Exemplary implementations may rely on combining three parameters to establish a three-factor based approach to authentication in a fraud-free manner for digital wallets, third-party software, and/or other purposes. The three-factor based approach to authentication may require something the user possesses (e.g., the authentication device), something the user is (e.g., a biometric identifier such as a fingerprint), and something the user knows (e.g., an image or numeric based pin used to unlock the authentication device). The authentication device may include a time-based one-time password (TOTP) generator made accessible by a fingerprint matching algorithm.

Claims20

Dependent claims

A system configured for facilitating secure biometric-enabled payment over a network using a standalone authentication device that retains all biometric information to avoid interception and/or corruption of such biometric information, the system comprising:

an authentication device;
a user computing platform communicatively coupled with the authentication device;
and
one or more servers communicatively coupled with the authentication device, the one or more servers having one or more processors configured by computer readable instructions to:
provide an authentication prompt to a user via the user computing platform associated with the user responsive to the user attempting to facilitate a secure biometric-enabled payment over the network;
receive, at one or more processors of one or more servers, a time-based one-time password responsive to the authentication prompt being provided, the time-based one-time password being received from the authentication device proximate to and communicatively coupled with a user computing platform, the authentication device being physically separate and distinct from the user computing platform, the authentication device being configured to:
(1) receive a biometric sample from the user of the user computing platform;
(2) internally verify the biometric sample such that the biometric sample does not leave the authentication device;
and
(3) provide the time-based one-time password responsive to the biometric sample being verified;
and
effectuate the secure biometric-enabled payment over the network;
wherein while information is transmitted by the authentication device, no information may be received by the authentication device, and wherein verification of the biometric sample is required in order to allow information to be transmitted from the authentication device.

10 more elements

A computer-implemented method for facilitating secure biometric-enabled payment over a network using a standalone authentication device that retains all biometric information to avoid interception and/or corruption of such biometric information, the method being performed by one or more processors included in one or more servers, the method comprising:

providing an authentication prompt to a user via a user computing platform associated with the user responsive to the user attempting to facilitate a secure biometric-enabled payment over the network;
receiving, at one or more processors of one or more servers, a time-based one-time password responsive to the authentication prompt being provided, the time-based one-time password being received from an authentication device proximate to and communicatively coupled with a user computing platform, the authentication device being physically separate and distinct from the user computing platform, the authentication device being configured to:
(1) receive a biometric sample from the user of the user computing platform;
(2) internally verify the biometric sample such that the biometric sample does not leave the authentication device;
and
(3) provide the time-based one-time password responsive to the biometric sample being verified;
and
effectuating the secure biometric-enabled payment over the network;
wherein while information is transmitted by the authentication device, no information may be received by the authentication device, and wherein verification of the biometric sample is required in order to allow information to be transmitted from the authentication device.

6 more elements

Dependencies are inferred from the claim text.

Systems and methods for facilitating secure authentication using a biometric-enabled transitory password authentication device

Life of this patent

Systems and methods for facilitating secure authentication using a biometric-enabled transitory password authentication device

Life of this patent

Abstract

Claims20