Zero-step authentication of transactions using passive biometrics
A zero-step authentication system and method which uses wireless mobile devices to automatically make payments in a secure manner without requiring the customer to handle his or her mobile device. The system and method use a payment facilitation device at the business location which automatically detects and recognizes registered mobile devices, displays a photo of the customer to a business employee for identity confirmation, and automatically deducts payments for purchases from a pre-authorized customer account. The customer account is managed by a payment processing server, which stores the customer account data, makes appropriate deductions, sends confirmation of deductions to the customer's mobile device, and automatically refills the customer's account by making pre-authorized charges to the customer's banking institution.
1. A system for zero-step authentication of transactions using biometrics, comprising:
a database comprising customer information, the customer information comprising:
a list of registered wireless mobile devices;
a device identifier for each registered wireless mobile device;
a photograph of a customer associated with each registered wireless mobile device;
a pre-paid account balance for each registered wireless mobile device; and
payment details for the customer associated with each registered wireless mobile device; and
a payment facilitation device comprising a first memory, a first processor, and a first plurality of programming instructions stored in the first memory, and operating on the first processor, wherein the first plurality of programming instructions, when operating on the processor, cause the payment facilitation device to:
detect a registered wireless mobile device;
establish a wireless connection with the registered wireless mobile device;
obtain a device identifier for the registered wireless mobile device;
send the device identifier to a payment facilitation server;
receive customer information for the registered wireless mobile device from the payment facilitation server;
display the photograph of the customer associated with the registered wireless mobile device for confirmation of the identity of the customer;
transmit transaction details to the registered wireless mobile device for approval, the transaction details comprising a transaction amount;
receive authentication of the transaction details from the customer mobile device; and
send the transaction details to a payment facilitation server for processing of the transaction;
a payment facilitation server comprising a second memory, a second processor, and a second plurality of programming instructions stored in the second memory, and operating on the second processor, wherein the second plurality of programming instructions, when operating on the second processor, cause the payment facilitation server to:
receive the device identifier from the payment facilitation device;
retrieve the customer information associated with the registered wireless mobile device from the database;
send the customer information to the payment facilitation device;
receive the transaction details from the payment facilitation device;
check the pre-paid account balance of the customer associated with the registered wireless mobile device;
if the account balance exceeds transaction amount, deduct the transaction amount from the account balance; or
if the transaction amount exceeds the account balance, send the transaction details to a payment processor for processing;
at least one of either or both of an audio or video input device; and
a biometrics verification server comprising a third memory, a third processor, and a third plurality of programming instructions stored in the third memory, and operating on the third processor, wherein the third plurality of programming instructions, when operating on the third processor, cause the biometrics verification server to:
receive either or both audio or video data from an input source over a network;
process the received data as either or both voice or facial biometric data;
match received data with stored data; and
respond with a positive or negative match to the input source.
2. The system of claim 1 further comprising a unified communications system which acts as a common intermediary device through which the payment facilitation device, the payment facilitation server, and registered wireless mobile device communicate.
3. The system of claim 1 , wherein the at least one audio or video input device and biometrics verification server are all located on at least one computer device that is connected to a local network.
4. The system of claim 1 , wherein the biometrics verification server receives input and sends output over the Internet.
5. A method for zero-step authentication of transactions using biometrics, comprising the steps of:
storing customer information in a database, the customer information comprising:
a list of registered wireless mobile devices;
a device identifier for each registered wireless mobile device;
a photograph of a customer associated with each registered wireless mobile device;
a pre-paid account balance for each registered wireless mobile device; and
payment details for the customer associated with each registered wireless mobile device; and
performing the following steps using a payment facilitation device, the payment facilitation device comprising a first memory, a first processor, and a first plurality of programming instructions:
detecting a registered wireless mobile device;
establishing a wireless connection with the registered wireless mobile device;
obtaining a device identifier for the registered wireless mobile device;
sending the device identifier to a payment facilitation server;
receiving customer information for the registered wireless mobile device from the payment facilitation server;
displaying the photograph of the customer associated with the registered wireless mobile device for confirmation of the identity of the customer;
transmitting transaction details to the registered wireless mobile device for approval, the transaction details comprising a transaction amount;
receiving authentication of the transaction details from the customer mobile device; and
sending the transaction details to a payment facilitation server for processing of the transaction; and
performing the following steps using a payment facilitation server, the payment facilitation server comprising a second memory, a second processor, and a second plurality of programming instructions:
receiving the device identifier from the payment facilitation device;
retrieving the customer information associated with the registered wireless mobile device from the database;
sending the customer information to the payment facilitation device;
receiving the transaction details from the payment facilitation device;
checking the pre-paid account balance of the customer associated with the registered wireless mobile device;
if the account balance exceeds transaction amount, deducting the transaction amount from the account balance; or
if the transaction amount exceeds the account balance, sending the transaction details to a payment processor for processing;
receiving audio or video input, from at least one of either or both of an audio or video input device;
receiving audio or video data from an input source over a network, using a biometrics verification server;
processing the received data as voice or facial biometric data, using a biometrics verification server;
matching received data with stored data, using a biometrics verification server; and
responding with a positive or negative match to the input source, using a biometrics verification server.
6. The method of claim 5 further comprising the step of using a unified communications system as a common intermediary device through which the payment facilitation device, the payment facilitation server, and registered wireless mobile device communicate.
7. The method of claim 5 , wherein the at least one audio or video input device and biometrics verification server are all located on at least one computer device that is connected to a local network.
8. The method of claim 5 , wherein the biometrics verification server receives input and sends output over the Internet.