Systems and methods for biometric identity authentication

Patent metadata

Field	Value
Publication number	US-10891617-B2
Application number	US-201615281413-A
Country	US
Kind code	B2
Filing date	Sep 30, 2016
Priority date	Sep 30, 2016
Publication date	Jan 12, 2021
Grant date	Jan 12, 2021

Abstract

A method for authenticating a user identity for a data transaction is provided. The method is implemented using an identity authentication computing device in connection with a memory and a data transaction processor. The method includes receiving a request from a first user of a first client device for a data transaction with a second user, causing a second client device to prompt the second user for biometric identification information, receiving captured biometric identification information corresponding to the second user, retrieving sample biometric identification information associated with the second user, comparing the captured biometric information and the sample biometric information, determining that the captured and the sample biometric information match, completing a data transaction between the first user and the second user, and transmitting an instruction to one or more of the first client device and the second client device displaying a notification that the data transaction is completed.

First claim

What is claimed is:

1. A method of authorizing a data transaction between a first user and a second user by authenticating a user identity of the second user, the method implemented using an identity authentication computing device in connection with a memory and a data transaction processor, said method comprising:
receiving, by the identity authentication computing device and from a first client device, a request from the first user for a data transaction with the second user, wherein the first user is registered with the identity authentication computing device, and wherein the request includes identification information of the second user;
enrolling, by the identity authentication computing device, based on the request, the second user with the identity authentication computing device by:
generating, by the identity authentication computing device, a unique registration code to enable the second user to register with the identity authentication computing device;
transmitting, by the identity authentication computing device to a second client device associated with the second user, the unique registration code and computer-implementable instructions, wherein when executed by the second client device, the computer-implementable instructions cause the second client device to download and install an application for capturing biometric identification information; and
receiving, from the second user, via the application, a user input of the unique registration code during enrollment;

transmitting, by the identity authentication computing device and to the second client device, in response to receiving the unique registration code from the second user during enrollment, instructions formatted to i) cause the second client device to prompt the second user to position the second user's body with respect to a biometric capture device of the second client device, and ii) control the biometric capture device to capture biometric identification information of the second user;
receiving, by the identity authentication computing device and from the second client device, captured biometric identification information corresponding to the second user;
retrieving, by the identity authentication computing device, from a national identification database of sample biometric identification information in network communication with the identity authentication computing device, sample biometric identification information associated with the second user, wherein the national identification database is unaffiliated with the identity authentication computing device;
comparing the captured biometric information from the second client device to the sample biometric information retrieved from the national identification database;
authenticating the user identity of the second user by determining, based on the comparison, that that the captured biometric information and the sample biometric information match to a degree above a predetermined threshold;
transmitting, by the identity authentication computing device, in response to authenticating the user identity of the second user, an instruction to the data transaction processor to complete the data transaction between the first user and the second user; and
transmitting, by the identity authentication computing device, to at least one of the first client device and the second client device, instructions formatted to cause a notification to be displayed that indicates the data transaction has been completed.

2. The method of claim 1 , further comprising linking, by the identity authentication computing device, an account of the first user with an account of the second user in response to authenticating the user identity of the second user.

3. The method of claim 1 , wherein biometric identification information includes a fingerprint, and wherein the national identification database includes sample biometric identification information maintained by a government.

4. The method of claim 1 , wherein comparing the captured biometric information and the sample biometric information comprises comparing, by the identity authentication computing device, the captured biometric information and the sample biometric information using an image comparison.

5. The method of claim 1 , wherein comparing the captured biometric information and the sample biometric information comprises:
transmitting, by the identity authentication computing device, the captured biometric information and a request for validation to a system configured to maintain the national identification database; and
receiving, by the identity authentication computing device and from the system, an indication of the degree to which the captured biometric information and the sample biometric information match.

6. The method of claim 1 , wherein the data transaction processor is a payment processing network, wherein the first user is a payer, wherein the second user is a payee, and wherein the data transaction between the first user and the second user comprises a payment from the first user to the second user.

7. An identity authentication computing device comprising at least one processor in communication with a memory, said identity authentication computing device in communication with at least a first client device and a second client device, said at least one processor programmed to:
receive, from the first client device, a request from a first user for a data transaction with a second user, wherein the first user is registered with the identity authentication computing device, and wherein the request includes identification information of the second user;
enroll the second user with the identity authentication computing device by:
generating a unique registration code to enable the second user to register with the identity authentication computing device;
transmitting, to a second client device associated with the second user, the unique registration code and computer-implementable instructions, wherein when executed by the second client device, the computer-implementable instructions cause the second client device to download and install an application for capturing biometric identification information; and
receiving, from the second user, via the application, a user input of the unique registration code during enrollment;

transmit, to the second client device, in response to receiving the unique registration code from the second user during enrollment, instructions formatted to cause the second client device to prompt the second user to position the second user's body with respect to a biometric capture device of the second client device, and ii) control the biometric capture device to capture biometric identification information of the second user;
receive, from the second client device, captured biometric identification information corresponding to the second user;
retrieve, from a national identification database of sample biometric identification information in network communication with the identity authentication computing device, sample biometric identification information associated with the second user wherein the national identification database is unaffiliated with the identity authentication computing device;
compare the captured biometric information from the second client device to the sample biometric information retrieved from the national identification database;
authenticate the user identity of the second user by determining, based on the comparison, that the captured biometric information and the sample biometric information match to a degree above a predetermined threshold and in response:
transmit, in response to authenticating the user identity of the second user, an instruction to a data transaction processor to complete the data transaction between the firs

Assignees

• Mastercard International Inc

Inventors

• Kohli Manoneet

Classifications

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06Q20/40145 Primary

  Biometric identity checks · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L2463/102

  applying security measure for e-commerce · CPC title