GB2564655A

GB2564655A - Biometric bank card

Info

Publication number: GB2564655A
Application number: GB1711462.0A
Authority: GB
Inventors: Beasmore Alexander
Original assignee: Individual
Current assignee: Individual
Priority date: 2017-07-17
Filing date: 2017-07-17
Publication date: 2019-01-23
Also published as: GB201711462D0

Abstract

A biometric bank card 10 comprises a card body 12 having an activatable display screen 16 thereon and a biometric sensor (e.g. fingerprint) 18 supported on the card body 12. Internal to the card body is a processor circuit 26 in communication with the biometric sensor 18; a memory storage element 28 which is adapted to store biometric information relating to a user; and a card transaction circuit 32 in communication with the processor circuit. The processor circuit is configured to validate an identity of a user of the card by comparison of biometric information from the biometric sensor with the stored biometric information. The processor circuit 26 is also configured to generate a transaction-specific identification token 22c (e.g. a rolling PIN) for authorizing a requested transaction, and to activate the display screen to display the token only upon validation of the identity of the user. An independent claim is also included for displaying card-specific information only after authentication.

Description

Biometric Bank Card

The present invention relates to a biometric bank card which is specifically but not necessarily exclusively suitable for minimising or eliminating fraudulent transactions using the card. The invention further relates to a method of protecting sensitive bank card data, and to a smart card for concealing card-specific information data.

Bank cards are typically plastic cards which are issued by a bank or similar financial provider which are able to perform one or more services to a user thereof. Most commonly, such bank cards are provided as a debit card, which is linked to the user’s own bank account, or a credit card, which is linked to the user’s credit account. Often, the bank cards will be authorised to permit the user to enable transactions via automatic teller machines (ATMs) for withdrawing cash.

A single bank card will typically have at least the user’s name, issuer’s name, and a unique card identification number printed thereon, and will often contain other information, such as a security code and/or a magnetic stripe which can be used to authorise transactions.

Some bank cards utilise existing chip-and-pin technology, having a physical contact element on the bank card which can interface with a point-of-sale (POS) terminal, with the user inputting a personal identification number (PIN) to authorise any transaction therewith. Modern smart cards also increasingly utilise contactless communications technology, such as radio frequency identification (RFID) or near field communication (NFC) methods to allow a transaction to be authorised by bringing the bank card into close proximity with a POS terminal. Typically, there is a maximum value to any transaction which can be authorised via contactless methods, in order to minimise fraud.

Fraud, however, remains a significant problem for users of bank cards. A stolen contactless bank card can be easily used for many small transactions without the criminal requiring any form of authorisation code, and can therefore result in significant pecuniary loss to the user and/or issuer. Furthermore, if a criminal has obtained the PIN of a user, for example, by observing the user at an ATM, then theft of the bank card can result in much larger transactions from being authorised against the user’s will.

Additionally, it may be possible for a criminal, having knowledge of a user’s billing address, for example, to be able may online purchases using a bank card without needing the physical card, provided that they have obtained the visible card number and security details from the card. These can be very readily copied without the user’s knowledge.

The present invention seeks to provide a bank card which significantly reduces the ability of a criminal party from committing any of the above fraudulent acts by obscuring the critical details of the bank card from view.

According to a first aspect of the invention, there is provided a biometric bank card comprising: a card body having an activatable display screen thereon; a biometric sensor supported on the card body; a processor circuit in data communication with the biometric sensor; a memory storage element in data communication with the processor circuit and which is adapted to store biometric information relating to a user; and a card transaction circuit which is in communication with the processor circuit; wherein the processor circuit is configured to validate an identity of a user of the biometric bank card by comparison of biometric information determined by the biometric sensor with the stored biometric information; and the processor circuit being configured to generate a transaction-specific identification token for authorising a transaction requested via the card transaction circuit and activate the display screen to display the transaction-specific identification token only upon successful validation of the identity of the user. The advantage of storing the biometric information on the biometric bank card is that, in the event that the card issuer is compromised, the user’s biometric data is not unsecure.

The biometric bank card of the present invention is able to minimise the capability for fraud. The biometric bank card relies on three principles for authentication of a transaction: something you have, that is, a blank card which only reveals its details for use once the biometric sensor is activated; something you are, that is, an identifiable biometric reading which can be compared to a pre-recorded biometric reading which is stored in the card in an encrypted format; and something you know, that is, a secure identification token. The transaction-specific identification token is generated by the processor circuit each time the biometric card is activated, thereby ensuring that it cannot be stolen, and each transaction-specific identification token can be used to verify the authenticity of each individual transaction conducted by the card. This not only reduces or even eliminates the risk of fraud, but also provides accountability for payments. The presence of the biometric sensor also provides the user with peace of mind in the event that the card is lost, since a criminal cannot utilise the card.

Preferably, the biometric sensor may be a fingerprint reader.

The simplest mechanism for verifying the identity of a user of a card is to use a fingerprint reader, which can be readily embedded into the card body. As such, it is advantageous to utilise a fingerprint reader in order to minimise the bulk of the biometric bank card.

Optionally, the card transaction circuit may include a contactless connection element.

Modern bank cards utilise contactless connection means, and therefore the provision of a contactless connection element allows the biometric bank card to be utilised in this regard. The additional security provided by the biometric bank card may also allow for the maximum transaction value limit to be disabled for the biometric bank card, advantageously simplifying the transaction process for high-value items for the user.

In one preferred embodiment, the memory storage element may be a secure digital memory card.

A secure digital (SD) card is a preferred memory storage element since it provides for the necessary encryption capability in a slimline housing, and is therefore able to be readily incorporated into a biometric bank card of standard size, that is, in accordance with ISO/IEC 7810&ID-1.

Preferably, the transaction-specific identification token may be an alphanumeric string, in which case, the transaction-specific identification token may be a six-digit rolling personal identification number.

Since the transaction-specific identification token will be displayed for the duration of the activation period of the biometric bank card, it is preferred that it is sufficiently long so as to be difficult for a criminal to memorise and utilise, should the biometric bank card be stolen for immediate use. The use of a rolling PIN also ensures that the transaction-specific identification token cannot be readily inferred or guessed.

Optionally, identification information relating to the bank card may be displayed on the display screen only upon successful validation of the identity of the user.

To further minimise the risk of fraud, it is preferred that all relevant information relating to the user account is obscured without the validation of the user’s identity. An unvalidated card will therefore advantageously have the appearance of a blank card, from which a third party can gather no secure information relating to the user or user account.

The processor circuit may be configured to activate the card transaction circuit only upon successful validation of the identity of the user.

Whilst it may be possible that the card transaction circuit is separate to the circuit comprising the biometric sensor, and can be activated independently, with only the transaction-specific identification token being required in certain circumstances, it will be appreciated that the security of the biometric bank card is improved if the card transaction circuit is also only activatable when a valid biometric reading has been achieved.

Preferably, the biometric bank card may further comprise an onboard power supply which provides power to at least the processor circuit. Said onboard power supply may preferably be a rechargeable battery. In one embodiment, the onboard power supply may include a wireless charging circuit. Additionally, or alternatively, the biometric bank card may comprise an inductive pick-up circuit which provides power to at least the processor circuit when coupled to an inductive power source.

There are various advantageous mechanisms by which power may be provided to the biometric bank card. An onboard power supply is able to power the processor circuit when required, but may increase the bulk of the card, whereas an inductive powering arrangement may advantageously minimise power consumption and draw power from an ATM or POS terminal, for instance.

In one preferred embodiment, the display screen may include a backlighting element which is activatable by the processor circuit, and there may further be provided a dedicated display screen power source from which the backlighting element is powerable.

The provision of a backlighting element may be a straightforward way of providing a display screen which can be readily deactivated.

There may be provided a timer circuit which is in communication with the processor circuit, the processor circuit deactivating the display screen after a predetermined time determined by the timer circuit following successful validation of the identity of the user.

It is clear that it is important to deactivate the display screen following use of the card. Since a user may need to remove their finger from the card in order to use a POS terminal, for instance, it may be advantageous to provide a mechanism of delaying the deactivation of the display screen so that the transaction-specific identification token can be utilised.

According to a second aspect of the invention, there is provided a method of protecting sensitive bank card data, the method comprising the steps of: a] providing a biometric bank card as claimed in any one of the preceding claims in a deactivated state, in which the display screen is void of displayed bank card data; b] validating an identity of a user of the biometric bank card via the biometric sensor; and c] activating the display screen only upon successful validation of the identity of the user.

According to a third aspect of the invention, there is provided a biometric smart card comprising: a card body having an activatable display screen thereon; a biometric sensor supported on the card body; a processor circuit in data communication with the biometric sensor; and a memory storage element in data communication with the processor circuit and which is adapted to store biometric information relating to a user; wherein the processor circuit is configured to validate an identity of a user of the biometric smart card by comparison of biometric information determined by the biometric sensor with the stored biometric information; and the processor circuit being configured activate the display screen to display card-specific information data only upon successful validation of the identity of the user.

It will be appreciated that there may be many types of card which could benefit from the obfuscation of sensitive data thereon, some of which may not be related to financial transactions. The present invention is also able to provide a solution to this problem as well.

The invention will now be more particularly described, by way of example only, with reference to the accompanying drawings, in which:

Figure 1 shows a representation of one embodiment of a biometric bank card in accordance with the first aspect of the invention, shown with the display screen in a deactivated or blank condition;

Figure 2 shows a representation of the biometric bank card of Figure 1, with the display screen in an activated condition showing the transaction-specific identification token and other identifying card data; and

Figure 3 shows a schematic representation of the internal components of the biometric bank card of Figure 1.

Referring to Figure 1, there is indicated a biometric bank card, referenced globally at 10, which is capable of significantly reducing fraudulent transactions without a user’s authorisation.

A bank card is, for the purposes of the present invention, defined as being any appropriate smart card capable of authorising financial transactions, typically at a POS terminal. It is not necessarily restricted to smart cards which are authorised by a bank, and is intended to incorporate at least chip-and-pin and contactless smart cards.

The biometric bank card 10 comprises a, preferably planar, card body 12, which is preferably formed as a layered or laminated plastics material around a card substrate, upon which the internal components of the biometric bank card 10 are mountable. This may include, for example, rigid or flexible circuit substrates, or may utilise a moulded plastics housing within which the internal components can be incorporated. It will be apparent to the skilled person that any security features of existing bank cards could readily be incorporated into the present invention to further improve the security thereof.

The biometric bank card 10 as shown is a contactless bank card, and on a nominal front surface 14 of the card body 12, there is preferably only a display screen 16 and a biometric sensor 18. In a deactivated state of the display screen 16, the biometric bank card 12 is therefore devoid of any identifying information regarding the identity of the user. The biometric sensor 18 and display screen 16 could of course be provided on opposite surfaces of the card body.

It will be appreciated that the card body 12 may incorporate livery or indicia which are indicative of the card issuer, and therefore the biometric bank card 10 is not necessarily devoid of any identifying information, merely the specific information relating to the user account or any authorising transactional information, such as a security code.

The display screen 16 is here provided as a fade-to-black screen, which is, by default, devoid of any information thereon. This could, for example, be a liquid-crystal display, light-emitting diode screen, or may be a screen incorporating e-ink, which utilises electrophoretic technology to provide a low-power, preferably greyscale, screen. Preferably, the front surface 14 of the card body 12 is devoid of any projection or indentation which might be indicative of card information, and the display screen 16 is preferably flush to the top of the front surface 14 such that there is a smooth profile to the biometric bank card 10.

It is preferred that the display screen 16 cover a substantial proportion of the front surface 14 of the card body 12, preferably at least a third of the surface area. This allows for any displayed information on the display screen 16 to be readily visible to the user. The display screen 16 may therefore cover a majority, that is, at least 50% of the surface area of the front surface 14 of card body 12, for this reason.

The biometric sensor 18 is preferably formed as a fingerprint sensor, defining an activation pad 20 on the surface of the card body 12. The activation pad 20 is sized so as to be sufficiently large to adequately scan a user’s fingerprint. This may preferably be of the order of 10cm². Preferably, the activation pad may utilise a capacitance sensor which is able to form a fingerprint image, but it will be appreciated that optical or ultrasonic sensors could alternatively be considered.

An activated state of the biometric bank card 10 is illustrated in Figure 2, in which the display screen 16 has been activated to display card-specific information 22. The relevant card-specific information 22 may comprise the name of the user 22a, the unique identification number 22b of the biometric bank card 10, and an identification token 22c, such as a PIN, which can be used for authorising transactions using the biometric bank card 10. In the present embodiment of the invention, the identification token 22c is a transaction-specific identification token 22c, as will be discussed in more detail below, here illustrated as an alphanumeric string, being a six-digit rolling PIN.

In addition, during the activated state, one or more further indicia 24 may be activated which is indicative of the activated state of the biometric bank card 10 in addition to the activated status of the display screen 16. Static or non-activatable indicia may also be provided. For example, a holographic image, preferably of the user, but potentially an image associated with the issuer, may also be provided on a surface of the biometric bank card 10.

The internal components of the biometric bank card 10 which are supported by the card body 12. The biometric sensor 18 includes a processor circuit 26 which is able to control the validation of the user’s identity. The processor circuit 26 may be provided as a dedicated microchip incorporated with the biometric sensor 18, though it will be appreciated that the processing could be performed in one of the other internal components having processing capability.

The processor circuit 26 is in data communication with a memory storage element 28, which is here formed as a secure digital card. The memory storage element 28 is adapted to store pre-registered biometric information relating to the user of the biometric bank card 10, for example, as an image file of a representation of a fingerprint, against which a detected fingerprint can be compared by the processor circuit 26. Preferably, the encryption of the memory storage element 28 is 256bit encryption.

There is preferably provided a power source onboard the biometric bank card 10, which is here illustrated as a rechargeable lithium battery 30. Other forms of powering the biometric bank card 10 could be considered, however, such as by providing an inductive pick-up circuit which could allow for inductive charging of the biometric bank card 10.

The biometric bank card 10 also includes a card transaction circuit 32, which may be preferably be formed as a contactless connection element, such as an RFID antenna, and is able to communicatively couple with an ATM or POS terminal to conduct a transaction therewith. Alternatively, or additionally, the card transaction circuit may include a card reader contact element for making a physical and electrical connection with, for example, an ATM or POS terminal. The card transaction circuit 32 is preferably in data communication with the processor circuit 26 such that it can only be activated in the event of a successful validation of the user’s identity.

The display screen 16 is here provided with its own power source 34, which is here in communication with a backlighting element 36 which can be activated and deactivated by the processor circuit 26 in the event of the validation of the user’s identity.

In use, with no action, the biometric bank card 10 appears blank, as is the case in Figure

1. The display screen 16 displays no relevant card information. A third party, attempting to utilise the biometric bank card 10 cannot do so, since they cannot overcome the biometric sensor 18 without the user.

When the user places the appropriate finger on the biometric sensor 18, then the processor circuit 26 will determine whether there is correspondence with the stored biometric information. If there is determined to be correspondence, then the user’s identity is deemed confirmed, and several things will occur. The determination could, for example, be achieved by using a pattern-based matching algorithm, although other matching algorithms are known.

The display screen 16 will be activated, such that relevant card-specific information 22 is visible, such as the name of the user 22a or the unique identification number 22b of the biometric bank card 10. The processor circuit 26 will also generate a transactionspecific identification token 22c which can be used to authenticate and audit the transaction to occur. This transaction-specific identification token 22c is preferably then also displayed at the display screen 16. In addition, the processor circuit 26 may also activate the card transaction circuit 32 which may have also been deactivated without the validation of the user’s identity.

Once the user’s identity has been authenticated, then a transaction can be performed via the card transaction circuit 32, with the transaction-specific identification token 22c providing the necessary security for the transaction which would otherwise be provided by a user-memorised PIN, which could feasibly be stolen. The generation of a transaction-specific identification token 22c ensures that a previous transaction-specific identification token 22c cannot be used to compromise future transactions.

Once a transaction has been completed, then the display screen 16 can be deactivated in order to once more hide the displayed information, for example, by removing the illumination provided by the backlighting element 36. This could occur as soon as the user removes their finger from the biometric sensor 18, or there could, for example, be provided a timer circuit in communication with the processor circuit 26, which automatically deactivates the display screen 16 after a predetermined duration following removal of the user’s finger.

It is therefore possible to provide a biometric bank card which is able to significantly reduce the risk of fraud to a user thereof by providing a display screen which can obfuscated or hide the card information which could otherwise be used to compromise the user’s account. Furthermore, the biometric bank card has a processor circuit which can generate a transaction-specific identification token which can be used to validate any specific transactions, which is also obscurable by the display screen.

The words ‘comprises/comprising’ and the words ‘having/including’ when used herein with reference to the present invention are used to specify the presence of stated features, integers, steps or components, but do not preclude the presence or addition of one or more other features, integers, steps, components or groups thereof.

It is appreciated that certain features of the invention, which are, for clarity, described in the context of separate embodiments, may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment, may also be provided separately or in any suitable sub-combination.

The embodiments described above are provided by way of examples only, and various 5 other modifications will be apparent to persons skilled in the field without departing from the scope of the invention as defined herein.

Claims

1. A biometric bank card comprising:

a card body having an activatable display screen thereon;

a biometric sensor supported on the card body;

a processor circuit in data communication with the biometric sensor;

a memory storage element in data communication with the processor circuit and which is adapted to store biometric information relating to a user; and a card transaction circuit which is in communication with the processor circuit;

wherein the processor circuit is configured to validate an identity of a user of the biometric bank card by comparison of biometric information determined by the biometric sensor with the stored biometric information; and the processor circuit being configured to generate a transaction-specific identification token for authorising a transaction requested via the card transaction circuit and activate the display screen to display the transactionspecific identification token only upon successful validation of the identity of the user.

2. A biometric bank card as claimed in claim 1, wherein the biometric sensor is a fingerprint reader.

3. A biometric bank card as claimed in claim 1 or claim 2, wherein the card transaction circuit includes a contactless connection element.

4. A biometric bank card as claimed in any one of claims 1 to 3, wherein the memory storage element is a secure digital memory card.

5. A biometric bank card as claimed in any one of the preceding claims, wherein the transaction-specific identification token is an alphanumeric string.

6. A biometric bank card as claimed in claim 5, wherein the transaction-specific identification token is a six-digit rolling personal identification number.

7. A biometric bank card as claimed in any one of the preceding claims, wherein identification information relating to the bank card is displayed on the display screen only upon successful validation of the identity of the user.

8. A biometric bank card as claimed in any one of the preceding claims, wherein the processor circuit is configured to activate the card transaction circuit only upon successful validation of the identity of the user.

9. A biometric bank card as claimed in any one of the preceding claims, further comprising an onboard power supply which provides power to at least the processor circuit.

10. A biometric bank card as claimed in claim 9, wherein the onboard power supply is a rechargeable battery.

11. A biometric bank card as claimed in claim 9 or claim 10, wherein the onboard power supply includes a wireless charging circuit.

12. A biometric bank card as claimed in any one of the preceding claims, further comprising an inductive pick-up circuit which provides power to at least the processor circuit when coupled to an inductive power source.

13. A biometric bank card as claimed in any one of the preceding claims, wherein the display screen includes a backlighting element which is activatable by the processor circuit.

14. A biometric bank card as claimed in claim 13, further comprising a dedicated display screen power source from which the backlighting element is powerable.

15. A biometric bank card as claimed in any one of the preceding claims, further comprising a timer circuit which is in communication with the processor circuit, the processor circuit deactivating the display screen after a predetermined time determined by the timer circuit following successful validation of the identity of the user.

16. A method of protecting sensitive bank card data, the method comprising the steps of:

a] providing a biometric bank card as claimed in any one of the preceding claims in a deactivated state, in which the display screen is void of displayed bank card data;

b] validating an identity of a user of the biometric bank card via the biometric sensor; and

c] activating the display screen only upon successful validation of the identity of the user.

17. A biometric smart card comprising:

a card body having an activatable display screen thereon;

a biometric sensor supported on the card body;

a processor circuit in data communication with the biometric sensor; and a memory storage element in data communication with the processor circuit and which is adapted to store biometric information relating to a user;

wherein the processor circuit is configured to validate an identity of a user of the biometric smart card by comparison of biometric information determined by the biometric sensor with the stored biometric information; and the processor circuit being configured activate the display screen to display card-specific information data only upon successful validation of the identity of the user.