Systems and methods for authenticating users

Patent metadata

Field	Value
Publication number	US-11763306-B2
Application number	US-202017008170-A
Country	US
Kind code	B2
Filing date	Aug 31, 2020
Priority date	Aug 31, 2020
Publication date	Sep 19, 2023
Grant date	Sep 19, 2023

Abstract

Systems and methods for verifying users in connection with transactions using biometric payment card devices are disclosed. One exemplary biometric payment card device generally includes a card body, a fingerprint sensor, a modem, and a processor coupled to the modem and the fingerprint sensor, where each of the fingerprint sensor, the modem, and the processor are disposed on the card body. The processor of the payment card device is configured to capture, via the fingerprint sensor, a fingerprint of a user associated with the payment account, compare the captured fingerprint to a reference fingerprint stored in memory in communication with the processor, and then compile and transmit, by the modem, an authentication result to an issuer of the payment account and/or a payment network associated with the payment account in response to the user being authenticated, or not, based on the comparison of the captured fingerprint and the reference fingerprint.

First claim

What is claimed is:

1. A payment card device associated with a payment account, the payment card device comprising:
a card body defining a length dimension between about 15 mm and about 150 mm, a width dimension between about 15 mm and about 150 mm, and a thickness dimension between about 0.1 mm and about 1 mm;
a fingerprint sensor disposed on the card body;
a cellular modem disposed on the card body; and
a processor disposed on the card body and coupled to the cellular modem and the fingerprint sensor, wherein the processor is configured, for a transaction involving the payment account, to:
capture, via the fingerprint sensor, a fingerprint of a user associated with the payment account;
compare the captured fingerprint to a reference fingerprint stored in memory in communication with the processor; and
compile and transmit, via the cellular modem, an authentication result to an entity associated with the payment account in response to the user being authenticated, or not, based on the comparison of the captured fingerprint and the reference fingerprint, wherein the entity associated with the payment account is separate from a merchant involved in the transaction.

2. The payment card device of claim 1 , wherein the cellular modem is integrated with the processor.

3. The payment card device of claim 2 , wherein the card body defines a generally rectangular shape having a length dimension of about 85.60 mm, a width dimension of about 53.98 mm, and a thickness of about 0.76 mm.

4. The payment card device of claim 1 , wherein the processor includes the memory; and
wherein the fingerprint sensor and the processor are disposed at opposite end portions of the card body.

5. The payment card device of claim 1 , wherein the processor is further configured to provide payment account credentials for the payment account, stored in the memory, to a point-of-sale (POS) terminal of the merchant.

6. The payment card device of claim 1 , further comprising the memory and a power source disposed on the card body.

7. The payment card device of claim 1 , wherein the processor is configured to transmit the authentication result to the entity via a telecommunication network.

8. The payment card device of claim 7 , wherein the entity includes at least one of an issuer of the payment account and/or a payment network associated with the payment account.

9. A computer-implemented method for authenticating a user in connection with a network transaction by the user, the computer-implemented method comprising:
capturing, by a processor of a payment card associated with a payment account, at a fingerprint sensor of the payment card, a fingerprint of a user in response to a network transaction to the payment account;
comparing, by the processor, the captured fingerprint to a reference fingerprint stored in memory of the payment card;
compiling, by the processor, an authentication result for the user based on the comparison of the captured fingerprint and the reference fingerprint; and
transmitting, by the processor, via a cellular modem of the payment card, the authentication result to an entity associated with the payment account for use to approve or decline the network transaction, the entity being different from a merchant involved in the transaction.

10. The computer-implemented method of claim 9 , further comprising providing, by the processor, payment account credentials for the payment account to a point-of-sale (POS) terminal of the merchant in connection with the network transaction.

11. The computer-implemented method of claim 9 , wherein the payment card defines a generally rectangular shape having a length dimension between about 15 mm and about 150 mm, a width dimension between about 15 mm and about 150 mm, and a thickness between about 0.1 mm and about 1 mm.

12. The computer-implemented method of claim 9 , further comprising powering the payment card by a power source disposed on a body of the payment card.

13. The computer-implemented method of claim 12 , wherein transmitting the authentication result further includes transmitting the authentication result to the entity associated with the payment account via a cellular network carrier through which the payment card is enrolled.

14. The computer-implemented method of claim 9 , further comprising receiving, at a communication device associated with the user, an instruction for the user to provide the fingerprint to the fingerprint sensor of the payment card, in response to a network transaction to the payment account; and
wherein capturing the fingerprint includes capturing the fingerprint at the fingerprint sensor of the payment card in response to the instruction received at the communication device.

15. A system for authenticating a user in connection with a network transaction by the user, the system comprising an issuer computing device coupled to a payment network, the issuer computing device configured to:
receive a request from a payment network computing device in connection with a network transaction at a merchant, the network transaction directed to a payment account of a user;
determine, in response to the request, that a payment card associated with the payment account is enabled for biometric authentication;
in response to a determination that the payment card is enabled for biometric authentication, transmit an instruction to a communication device associated with the user directing the user to provide a fingerprint to a fingerprint sensor of the payment card in order to continue with the network transaction; and
receive, from the payment card, via a cellular modem of the payment card, an authentication result for the user based on a comparison of the fingerprint provided to the fingerprint sensor of the payment card and a reference fingerprint stored in memory of the payment card.

16. The system of claim 15 , wherein the request includes an authentication request from a directory server of the payment network; and
wherein the issuer computing device is further configured to:
generate an authentication reply in response to the authentication request, the authentication reply based at least in part on the authentication result received from the payment card; and
transmit the authentication reply to the merchant, whereby the merchant includes at least part of a content of the authentication reply in an authorization request for the network transaction.

17. The system of claim 16 , wherein the issuer computing device is further configured to:
receive the authorization request for the network transaction from the merchant;
generate an authorization reply in response to the authorization request, the authorization reply including either an approval or a decline of the network transaction; and
transmit the authorization reply to the merchant.

18. The system of claim 15 , wherein the request includes an authorization request for the network transaction generated by the merchant; and
wherein the issuer computing device is configured, in response to the authentication result from the payment card, to:
generate an authorization reply in response to the authorization request, the authorization reply including either an approval or a decline of the network transaction based at least in part on the authentication result received from the payment card; and
transmit the authorization reply to the merchant.

19. The system of claim 15 , further comprising the payment card; and
wherein the payment card includes:
a card body;
the fingerprint sensor disposed on the card b

Assignees

• Mastercard International Inc

Inventors

• Wong Bernard
• Moskowitz Ellen
• Stepper Emily Anne

Classifications

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• G06Q20/40145 Primary

  Biometric identity checks · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/202

  Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR · CPC title