Data storage key for secure online transactions
A secure non-volatile solid state memory data key appears similar to a conventional USB flash drive modified to have a physical shape resembling a door key with an eyelet for attaching the data key to a key ring or lanyard. The data key includes a USB port, a microprocessor (effectively serving as the “chip” in the chip-and-pin configuration), and a secure memory for holding secure transaction information, such as credit and debit card numbers, verified personal identification (federated ID), and other secure data. A biometric sensor (e.g., touch sensor or “capcha”) verifies that a person is in physical possession of the data key before permitting access to the secure memory. The touch sensor may be limited to use by a unique individual person through a biometric reader, such as a finger print reader, where the verification finger print is stored on the key rather than the connected host device.
1. A data key comprising a microprocessor, a USB plug, a non-volatile solid state memory, a touch sensor or depression sensor, and a non-transitory computer storage medium storing computer-executable instructions comprising an activation time period and computer-executable instructions that when executed by the microprocessor causes the microprocessor to perform the steps of:
receiving user data;
encrypting the user data;
storing the encrypted user data in the non-volatile solid state memory;
in response to receiving the transaction request, activating the touch sensor or depression sensor for the activation time period, receiving a user interaction with the touch sensor or depression sensor, and determining that the user interaction occurred within the activation time period following activation of the touch sensor or depression sensor;
in response to determining that the user interaction occurred within the activation time period, communicating transaction data associated with the user data to a transaction device according to a format of the transaction device, and deactivating the touch sensor or depression sensor.
2. The data key of claim 1 , wherein the transaction data comprises the encrypted user data.
3. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data in public key infrastructure (PKI), token or cryptogram encrypted format to the transaction device.
4. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of illuminating the touch sensor or depression sensor during the activation time period.
5. The data key of claim 1 , wherein the data key further comprises a wireless communication device operatively connected to the microprocessor, and wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device through the wireless communication device.
6. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device in response to receiving a password in addition to detecting the user interaction with the touch sensor or depression sensor.
7. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device in response to receiving a bio-identifier in addition to detecting the user interaction with the touch sensor or depression sensor.
8. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device in response to receiving a combination code through the touch sensor or depression sensor in addition to detecting the user interaction with the touch sensor or depression sensor.
9. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device in response to receiving a one-time-password (OTP) in addition to detecting the user interaction with the touch sensor or depression sensor.
10. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device in response to receiving a quick response (QR) code in addition to detecting the user interaction with the touch sensor or depression sensor.
11. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of communicating the transaction data to the transaction device utilizing a chip-and-pin transaction security protocol associated with a payment gateway in communication with the transaction device.
12. The data key of claim 1 , wherein the computer-executable instructions when executed by the microprocessor further cause the microprocessor to perform the step of decrypting the encrypted user data, and wherein the transaction data comprises the decrypted encrypted user data.