Universal secure registry
According to some aspects of the disclosure, an electronic ID device is configured to allow a user to select an account associated with the user to employ in a transaction. The electronic ID device comprises a biometric sensor configured to receive a biometric input provided by the user, a user interface configured to receive a user input, a communication interface configured to communicate with a secure registry, and a processor coupled to the biometric sensor to receive information concerning the biometric input.
1. An electronic ID device configured to allow a user to select an account associated with the user to employ in a transaction, the electronic ID device comprising:
a biometric sensor configured to receive a biometric input provided by the user;
a user interface configured to receive a user input, the user input including:
secret information known to the user; and
selection information concerning an account selected by the user from one or more accounts associated with the user;
a communication interface configured to communicate with a secure registry; and
a processor coupled to the biometric sensor to receive information concerning the biometric input, wherein the processor is programmed to:
activate transaction software of the electronic ID device in response to a successful authentication of a user's identity, wherein authentication of the user's identity is based on at least one of the biometric input and the secret information;
generate a one-time non-predictable value;
obtain a public identifier that corresponds to private account information of the selected user account, wherein the public identifier does not contain any private account information of the selected user account;
generate authentication information from the one-time non-predictable value and the public identifier;
encrypt the authentication information; and
wirelessly communicate the encrypted authentication information to a requesting or receiving device via an authentication signal generated by the communication interface, such that the secure registry:
receives a transaction request and at least a portion of the encrypted authentication information from the requesting or receiving device, wherein the transaction request involves the selected user account;
decrypts the encrypted authentication information;
verifies the decrypted authentication information without using the private account information;
uses the public identifier from the encrypted authentication information to acquire the private account information of the selected user account; and
generates an enablement signal to enable the transaction request without transmitting the private account information.
2. The electronic ID device of claim 1 , wherein the communication interface is configured to communicate with the secure registry either directly or via an intermediate device.
3. The electronic ID device of claim 1 , wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via an induced signal generated by the communication interface.
4. The electronic ID device of claim 1 , wherein the communication interface includes a magnetic stripe emulator.
5. The electronic ID device of claim 4 , wherein:
the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via a time-varying signal which emulates data provided by a magnetic-stripe card to a magnetic card reader; and
the time-varying signal is generated by the magnetic stripe emulator of the communication interface.
6. The electronic ID device of claim 1 , wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via a near field signal generated by the communication interface.
7. The electronic ID device of claim 1 , wherein:
the communication interface includes a near field communication (NFC) transceiver; and
the authentication signal generated by the communication interface is an NFC signal.
8. The electronic ID device of claim 7 , wherein:
the NFC signal is generated by the NFC transceiver of the communication interface; and
the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via the NFC signal, the requesting or receiving device located within the same local area as the NFC transceiver such that the NFC signal is transmitted directly between the NFC transceiver and the requesting or receiving device.
9. The electronic ID device of claim 1 , wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via a Wi-Fi™ radio technology signal generated by the communication interface.
10. The electronic ID device of claim 1 , wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via a Bluetooth™ wireless technology standard signal.
11. The electronic ID device of claim 1 , wherein the processor is further programmed to wirelessly communicate the encrypted authentication information to the requesting or receiving device via a Bluetooth™ Low Energy wireless technology standard signal.
12. The electronic ID device of claim 1 , wherein in activating the transaction software of electronic ID device, the processor is further programmed to render stored data legible.
13. The electronic ID device of claim 1 , wherein the encrypted authentication information is one-time encrypted authentication information.
14. The electronic ID device of claim 1 , wherein the communication interface is configured to communicate the encrypted authentication information to the secure registry, where the secure registry comprises a secure token database storing one or more tokens associated with the authentication information.
15. The electronic ID device of claim 1 , wherein the processor is further programmed to deactivate features of the electronic ID device without generating the authentication information where authentication based on at least one of the biometric input and the secret information is unsuccessful.
16. The electronic ID device of claim 15 , wherein deactivating the features of the electronic ID device initiates a lock-out period.
17. The electronic ID device of claim 15 , wherein deactivating the features of the electronic ID device includes deleting information present in the electronic ID device that is used to generate the authentication information.