Fraud resistant biometric financial transaction system and method
View Patent ↗A method and system for authenticating financial transactions is disclosed wherein biometric data is acquired from a person and the probability of liveness of the person and probability of a match between the person or token and known biometric or token information are calculated, preferably according to a formula D=P(p)*(K+P(m)), wherein K is a number between 0.1 and 100, and authenticating if the value of D exceeds a predetermined value.
1. A method of authorizing financial transactions, the method comprising:
(a) acquiring biometric data from a person during a transaction;
(b) determining a probability of liveness of the person, and a probability of a match between the acquired biometric data and persons whose biometric information has previously been acquired; and
(c) determining to authorize the transaction even if the probability of a match is low, when the probability of liveness is high and the person is aware that information indicating liveness of the person is stored for potential post-transaction identification purposes.
2. The method of claim 1 , wherein calculating a probability of a match comprises matching or recognition of iris, face, fingerprint, finger vein or palm vein data.
3. The method of claim 1 , further comprising determining whether to store the information in a fraud database or a watch list in the event of non-authorization.
4. The method of claim 1 , further comprising storing the information as evidence of and liveness of the person for the transaction.
5. The method of claim 1 , wherein (c) further comprises determining to authorize the transaction even if the probability of a match as low as 0.25.
6. The method of claim 1 , wherein (c) comprises determining to authorize the transaction if the probability of liveness of the person is near 1, even if the probability of a match is low.
7. The method of claim 1 , wherein the person is not informed to what extent authorization or non-authorization was based on the probability of liveness or the probability of matching.
8. The method of claim 1 , wherein in the event of non-authorization the person is not informed whether non-authorization was based on a low probability of liveness or a low probability of matching.
9. The method of claim 1 , further comprising providing a bank or other entity access to the stored information.
10. A system for authorizing financial transactions, the system comprising:
a sensor, acquiring biometric data from a person during a transaction;
an decision module, determining a probability of liveness of the person, and a probability of a match between the acquired biometric data and persons whose biometric information has previously been acquired, and determining to authorize the transaction even if the probability of a match is low, when the probability of liveness is high and the person is aware that information indicating liveness of the person is stored for potential post-transaction identification purposes.
11. The system of claim 10 , wherein the decision module calculates a probability of a match by performing matching or recognition of iris, face, fingerprint, finger vein or palm vein data.
12. The system of claim 10 , wherein the decision module further determines whether to store the information in a fraud database or a watch list in the event of non-authorization.
13. The system of claim 10 , wherein the system stores the information as evidence of liveness of the person for the transaction.
14. The system of claim 10 , wherein the decision module determines to authorize the transaction even if the probability of a match as low as 0.25.
15. The system of claim 10 , wherein the decision module determines to authorize the transaction if the probability of liveness of the person is near 1, even if the probability of a match is low.
16. The system of claim 10 , wherein the person is not informed to what extent authorization or non-authorization was based on the probability of liveness or the probability of matching.
17. The system of claim 10 , wherein in the event of non-authorization the person is not informed whether non-authorization was based on a low probability of liveness or a low probability of matching.
18. The system of claim 10 , wherein the system provides a bank or other entity access to the stored information.