BIOMETRIC AUTHENTICATION OF MOBILE FINANCIAL TRANSACTIONS BY TRUSTED SERVICE MANAGERS

1 . A method, comprising:

storing a biometric trait of a user in a data communication device of the user;

comparing a biometric trait input into the device with the biometric trait stored in the device;

generating a certificate authenticating the user within the device if the biometric trait input into the device matches the biometric trait stored in the device; and

facilitating a financial transaction of the user using the certificate.

2 . The method of claim 1 , wherein the storing further comprises storing an authentication certificate of a payment service provider acting as a trusted service manager (TSM) or a certificate authority (CA).

3 . The method of claim 2 , wherein the storing comprises storing at least one of a Card Verification Value (CVV) code, a Contactless Card and Chip Verification Value (iCVV) code, a Stored-Value Card (SVC) code and a bank identification number (BIN) code.

4 . The method of claim 1 , wherein the facilitating comprises transmitting the certificate from the user's device to a data communication device of a point of sale (POS).

5 . The method of claim 4 , wherein the transmitting is effected at least in part wirelessly.

6 . The method of claim 4 , wherein the transmitting is effected at least in part via a near field communication (NFC) link.

7 . The method of claim 4 , further comprising transmitting the certificate from the POS device to a data communication device of a financial service provider.

8 . A non-transitory computer readable medium having computer readable and executable code for instructing one or more processors to perform a method, the method comprising:

receiving a message from a communication device of a user, the message comprising a certificate authenticating the user and generated within the user's device if a biometric trait of the user input into the device matches a biometric trait of the user previously stored in the device; and

using the message to facilitate a financial transaction of the user.

9 . The medium of claim 8 , wherein the message is in the form of an International Organization for Standardization (ISO) 8583 message.

10 . The medium of claim 8 , wherein the message comprises at least one of a Card Verification Value (CVV) code, a Contactless Card and Chip Verification Value (iCVV) code, a Stored-Value Card (SVC) code and a bank identification number (BIN) code.

11 . The medium of claim 8 , wherein the message is received at least in part via a wireless link.

12 . The medium of claim 11 , wherein the wireless link comprises a near field communication (NFC) link.

13 . The medium of claim 8 , wherein the receiving is effected by one, the other, or both of a point of sale (POS) communication device and a financial service provider communication device.

14 . A system, comprising:

a non-transitory memory storing a biometric trait corresponding to a user device; and

one or more hardware processors in communication with the non-transitory memory and configured for

storing a biometric trait of a user in a data communication device of the user;

comparing a biometric trait input into the device with the biometric trait stored in the device;

generating a certificate authenticating the user within the device if the biometric trait input into the device matches the biometric trait stored in the device; and

facilitating a financial transaction of the user using the certificate.

15 . The system of claim 14 , wherein at least one of the storing, the comparing and the generating is effected within a first secure element (SE) of the device.

16 . The system of claim 15 , wherein the facilitating is effected at least in part by a financial transaction application stored in a second secure element (SE) of the device that is separate from the first SE.

17 . The system of claim 16 , wherein at least one of the first and second secure elements (SEs) comprises a subscriber identity module (SIM) card.

18 . The system of claim 14 , wherein the one or more processors is further configured for encrypting the biometric trait input into the device.

19 . The system of claim 18 , wherein the encrypting is generally compliant with the Federal Information Processing Standard (FIPS) Publication 140-2 (FIPS 140-2) Level 3 standard.

20 . The system of claim 14 , wherein the one or more hardware processors is further configured for transmitting the certificate to a point of sale (POS) communication device wirelessly.