Personal digital key initialization and registration for secure transactions
A system and method provide efficient, secure, and highly reliable authentication for transaction processing and/or access control applications. A personal digital key (PDK) is programmed using a trusted programming device to initialize and/or register the PDK for use. In one embodiment, the initialization and registration processes are administered by a specialized trusted Notary to ensure the processes follow defined security procedures. In a biometric initialization, the programming device acquires a biometric input from a user and writes the biometric data to a tamperproof memory in the PDK. In registration, the Programmer communicates to one or more remote registries to create or update entries associated with the user PDK. Once initialized and registered, the PDK can be used for various levels of secure authentication processes.
1. A method comprising:
determining, by a reader device, that a portable electronic device is located within a proximity zone of the reader device;
establishing a wireless communication channel between the reader device and the portable electronic device responsive to determining that the portable electronic device is located within the proximity zone of the reader device;
at the reader device, receiving device identification information from the portable electronic device, the device identification information uniquely identifying the portable electronic device;
determining locally, by the reader device, that the portable electronic device is a valid device based on the device identification information without a remote lookup;
receiving a request for a transaction having a transaction amount;
determining whether the transaction amount associated with the transaction is under an amount threshold;
responsive to determining that the transaction amount associated with the transaction is under the amount threshold and the portable electronic device is located within the proximity zone of the reader device, automatically performing, by the reader device, the transaction using the transaction amount; and
responsive to determining that the transaction amount associated with the transaction is not under the amount threshold, requesting that the portable electronic device perform a profile authentication.
2. The method of claim 1 , further comprising:
determining whether the profile authentication was successful; and
responsive to determining that the profile authentication was successful, automatically performing, by the reader device, the transaction using the transaction amount.
3. The method of claim 2 , wherein the profile authentication includes a comparison performed by the portable electronic device between a user input and a profile stored in the portable electronic device.
4. The method of claim 2 , further comprising:
receiving, from the portable electronic device, other information associated with the transaction responsive to determining that the profile authentication was successful; and
wherein performing the transaction uses the other information associated with the transaction.
5. The method of claim 1 , further comprising:
establishing a secure communication channel between the reader device and the portable electronic device; and
wherein other information associated with the transaction is received via the secure communication channel.
6. The method of claim 1 , wherein other information associated with the transaction includes one or more of credit card information, debit card information, Automated Teller Machine card information, bank account information, and a code.
7. The method of claim 1 , further comprising:
requesting, by the reader device, validation information associated with the portable electronic device from a database using other information associated with the transaction; and
wherein automatically performing the transaction uses the validation information associated with the portable electronic device.
8. The method of claim 7 , wherein the validation information is based on a spending limit associated with the other information and the transaction amount associated with the transaction.
9. The method of claim 1 , wherein the reader device is an Automated Teller Machine.
10. The method of claim 1 , wherein the portable electronic device is one of a cell phone, a personal digital assistant, a watch, and a tag.
11. A system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to perform operations including:
determining, by a reader device, that a portable electronic device is located within a proximity zone of the reader device;
establishing a wireless communication channel between the reader device and the portable electronic device responsive to determining that the portable electronic device is located within the proximity zone of the reader device;
at the reader device, receiving device identification information from the portable electronic device, the device identification information uniquely identifying the portable electronic device;
determining locally, by the reader device, that the portable electronic device is a valid device based on the device identification information without a remote lookup;
receiving a request for a transaction having a transaction amount;
determining whether the transaction amount associated with the transaction is under an amount threshold;
responsive to determining that the transaction amount associated with the transaction is under the amount threshold and the portable electronic device is located within the proximity zone of the reader device, automatically performing, by the reader device, the transaction using the transaction amount; and
responsive to determining that the transaction amount associated with the transaction is under the amount threshold, requesting that the portable electronic device perform a profile authentication.
12. The system of claim 11 , wherein the instructions that, when executed by the one or more processors, further cause the system to perform the operations including:
determining whether the profile authentication was successful; and
responsive to determining that the profile authentication was successful, automatically performing, by the reader device, the transaction using the transaction amount.
13. The system of claim 12 , wherein the profile authentication includes a comparison performed by the portable electronic device between a user input and a profile stored in the portable electronic device.
14. The system of claim 12 , wherein the instructions that, when executed by the one or more processors, further cause the system to perform the operations including:
receiving, from the portable electronic device, other information associated with the transaction responsive to determining that the profile authentication was successful; and
wherein performing the transaction uses the other information associated with the transaction.
15. The system of claim 11 , wherein the instructions that, when executed by the one or more processors, further cause the system to perform the operations including:
establishing a secure communication channel between the reader device and the portable electronic device; and
wherein other information associated with the transaction is received via the secure communication channel.
16. The system of claim 11 , wherein other information associated with the transaction includes one or more of credit card information, debit card information, Automated Teller Machine card information, bank account information, and a code.
17. The system of claim 11 , wherein the instructions that, when executed by the one or more processors, further cause the system to perform the operations including:
requesting, by the reader device, validation information associated with the portable electronic device from a database using other information associated with the transaction; and
wherein automatically performing the transaction uses the validation information associated with the portable electronic device.
18. The system of claim 17 , wherein the validation information is based on a spending limit associated with the other information and the transaction amount associated with the transaction.
19. The system of claim 11 , wherein the reader device is an Automated Teller Machine.
20. The system of claim 11 , wherein the portable electronic device is one of a cell phone, a personal digital assistant, a watch, and a tag.