| US 7,451,924 B2 | ||
| System for biometric security using a smartcard | ||
| David S. Bonalle, New Rochelle, N.Y. (US); and Glen Salow, Holmdel, N.J. (US) | ||
| Assigned to American Express Travel Related Services Company, Inc., New York, N.Y. (US) | ||
| Filed on Sep. 21, 2007, as Appl. No. 11/859,153. | ||
| Application 11/859153 is a division of application No. 10/710307, filed on Jul. 01, 2004, granted, now 7,314,164. | ||
| Prior Publication US 2008/0011830 A1, Jan. 17, 2008 | ||
| This patent is subject to a terminal disclaimer. | ||
| Int. Cl. G06K 5/00 (2006.01); G06K 19/00 (2006.01); G06K 19/06 (2006.01); G08B 13/14 (2006.01); G08B 29/00 (2006.01); H04Q 5/22 (2006.01); G05B 19/00 (2006.01); G05B 23/00 (2006.01); G06F 7/00 (2006.01); G06F 7/04 (2006.01); G08C 19/00 (2006.01); H04B 1/00 (2006.01) | ||
| U.S. Cl. 235—380 [235/487; 235/492; 340/572.1; 340/5.52; 340/10.1] | 13 Claims |

| 1. A smartcard transaction system configured with a biometric security device, said system comprising:
a smartcard configured to communicate with a reader, wherein said reader and said biometric security device are configured
to communicate with a host;
an integrated circuit device disposed within said smartcard and configured to communicate with said reader, said integrated
circuit device comprising a common application and a second application, said second application being configured to store
travel-related information associated with a cardholder;
said second application comprising a common file structure and a partner file structure, wherein said partner file structure
provides write access to a field within said partner file structure for a first partnering organization and denies write access
to said field for a second partnering organization, and said common file structure provides write access for said first partnering
organization and said second partnering organization to a field in said common file structure;
said biometric security device comprising a biometric sensor configured to communicate with said system and detect a proffered
biometric sample, and wherein said proffered biometric sample accesses said common file structure and said partner file structure;
a verification device configured to verify said proffered biometric sample to facilitate access to said common file structure;
wherein after verification by said verification device, said common application is configured to transfer common data to facilitate
said transaction, and said second application is configured to transfer said travel-related information, information related
to said common file structure and information related to said partner file structure to facilitate said transaction;
a first enterprise data collection unit associated with a first enterprise, said first enterprise data collection unit configured
to store update transactions and pending transactions associated with said smartcard and said first enterprise;
a second enterprise data collection unit associated with a second enterprise, said second enterprise data collection unit
configured to store update transactions and pending transactions associated with said smartcard and said second enterprise;
an access point configured to interface with said smartcard and said first and second enterprise data collection units;
a card object database system coupled to said first and second enterprise data collection units and configured to store said
smartcard information in accordance with said update transactions and said pending transactions, wherein said smartcard information
includes a card object having an application;
an update logic system configured to route said smartcard information from said first and second enterprise data collection
units to said access point in order to effect synchronization of said smartcard information associated with said smartcard
and said card object database system;
wherein said verification device activates said update logic system upon verification of said proffered biometric sample;
an update logic system coupled to an enterprise data synchronization interface, said update logic system configured to securely
route card information between said enterprise data synchronization interface and said enterprise data collection units, said
enterprise data synchronization interface coupled to an enterprise network configured to communicate with said access point;
further comprising a secure support client server configured to communicate with said access point, said secure support client
server further configured to adaptively provide communication functionality in accordance with the communication functionality
available at said access point; and
a personalization system comprising:
a security server;
a key system associated with an application, said key system configured to communicate with said security server and to supply
a key in response to a request from said security server;
a personalization utility configured to receive said card object and to communicate with said security server;
said personalization utility further configured to add said key to said card object, a card management system, said card management
system configured to accept a card request and communicate said card request to said personalization utility; and a gather
application module configured to communicate with said card management system and gather application information from a first
database and a second database in accordance with said card request, wherein said first database is associated with said first
enterprise, and said second database is associated with said second enterprise.
|