Biometric authentication system

1. A method of secure transaction, comprising:

receiving, by a personal electronic device (PED), transaction information;

capturing, by the PED, first biometric information from a user;

identifying, by the PED, if the user is an authorized user of the PED based on the captured first biometric information; and

if the captured first biometric information identifies an authorized user, performing, by the PED, the steps of:

enabling a first transaction request cryptographic key stored on the PED, the first transaction request cryptographic key corresponding to the authenticated user;

generating, using the enabled first transaction request cryptographic key, a digital signature;

generating and transmitting, via a computer network, a purchase data bundle comprising the received transaction information, the generated digital signature and a second transaction request cryptographic key complementary to the first transaction request cryptographic key;

receiving, by the PED via the computer network, a purchase approval confirmation comprising a first transaction approval cryptographic key; and

determining whether the received purchase approval confirmation corresponds to the authenticated user according to the first transaction approval cryptographic key of the received purchase approval confirmation and a second transaction approval cryptographic key stored on the PED, the second transaction approval cryptographic key corresponding to the authenticated user;

capturing, by the PED, second biometric information;

performing, by the PED, user authentication based on the captured second biometric information;

presenting, by the PED, the received confirmation when the first transaction approval cryptographic key is complementary to the second transaction approval cryptographic key and when the user is successfully authenticated based on the captured second biometric information; and

disabling the first transaction request cryptographic key upon generating the digital signature.

2. The method according to claim 1 , wherein the first transaction request cryptographic key, second transaction request cryptographic key and first transaction approval cryptographic key are private, public and public keys, respectively.

3. The method according to claim 1 , further comprising capturing and recognizing, using the PED, at least one of voice and gesture inputs, wherein the first biometric information is captured in response to successful recognition of the at least one of the voice and gesture inputs.

4. The method according to claim 1 , further comprising capturing, by the PED, non-biometric information comprising at least one of a swipe pattern and a personal identification number, wherein the user authentication is performed further based on the captured non-biometric information.

5. A personal electronic device (PED) comprising:

a hardware-based processor; and

a biometric reader, a communication interface and a data storage in operative communication with the hardware-based processor, the data storage comprising instructions executable by the hardware-based processor to:

receive, via the communication interface, transaction information;

capture, using the biometric reader, first biometric information of a user;

if the captured first biometric information identifies an authorized user, perform the steps of:

enabling a first transaction request cryptographic key stored on the biometric reader, the first transaction request cryptographic key corresponding to the authenticated user;

generating, using the enabled first transaction request cryptographic key, a digital signature;

generating and transmitting, via the communication interface, a purchase data bundle comprising the received transaction information, the generated digital signature and a second transaction request cryptographic key complementary to the first transaction request cryptographic key;

receiving, via the communication interface, a purchase approval confirmation comprising a first transaction approval cryptographic key; and

determining whether the received purchase approval confirmation corresponds to the authenticated user according to the first transaction approval cryptographic key of the received purchase approval confirmation and a second transaction approval cryptographic key stored on the PED, the second transaction approval cryptographic key corresponding to the authenticated user,

wherein the PED further comprises at least one of a display and an audible output and the data storage further comprises instructions to:

capture, using the biometric reader, second biometric information;

perform user authentication based on the captured second biometric information;

present, using the at least one of the display and the audible output, the received confirmation when the first transaction approval cryptographic key is complementary to the second transaction approval cryptographic key and when the user is successfully authenticated based on the captured second biometric information; and

disable the first transaction request cryptographic key upon generating the digital signature.

6. The PED according to claim 5 , wherein the first transaction request cryptographic key, second transaction request cryptographic key and first transaction approval cryptographic key are private, public and public keys, respectively.

7. The PED according to claim 5 , further comprising at least one of an audio pickup and a pointer in operative communication with the hardware-based processor, wherein:

the data storage further comprises instructions to capture and recognize at least one of voice and gesture inputs using the at least one of the audio pickup and the pointer; and

the first biometric information is captured in response to successful recognition of the at least one of the voice and gesture inputs.

8. The PED according to claim 5 , further comprising a user input interface, the wherein the data storage further comprises instructions to:

capture, using the user input interface, non-biometric information comprising at least one of a swipe pattern and a personal identification number, wherein the user authentication is performed further based on the captured non-biometric information.