Authentication of contactless transactions

Abstract

The disclosed embodiments include aspects related to authentication of contactless interaction. The identification information may be provided from multiple sources. A chip embedded card may be registered to an individual and include identification information associated with the information. During a contactless transaction, identification information may be obtained. The personal identity can be verified according to the identification information. The chip embedded card can be read by a card reader at a specific location, thereby providing physical presence information. In one example, identification information from a chip embedded card may be compared to other identification information to determine whether there is a match or a mismatch. A confidence score may be calculated based on the amount and type of information provided. And when the confidence coefficient score meets a threshold value, verifying the identity of the person.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to U.S. patent application No. 17 / 888,830, filed on August 16, 2022, the disclosure of which is incorporated herein by reference in its entirety. Technical Field

[0003] The present disclosure relates to authentication of contactless interactions. Background Art

[0004] In many social interactions, identity verification is important to establish a level of trust and connection between individuals. Unfortunately, close contact is not always possible, which often leads to challenging environments in terms of establishing identity and trust. For example, with the increasing reliance on social distancing, traditional close contact is not possible. Social distancing refers to standards designed to mitigate or prevent the spread of infectious diseases, typically by maintaining physical distance between individuals. In recent examples, the optimal distance standard of 6 feet (or 2 meters) was selected to effectively mitigate or prevent the spread of disease. In addition, social distancing also refers to measures that generally help avoid large gatherings.

[0005] Disease transmission can be suppressed by minimizing the possibility of physical contact between infected and uninfected individuals. Unfortunately, physical distance between individuals and occasional mask wearing to suppress disease transmission create difficulties in identity verification.

[0006] Furthermore, because many interactions today are done via text messaging (e.g., SMS (Short Message Service) and IM (Instant Messaging), visual authentication is often not possible. In today’s world of ever-changing technology, authentication to establish trust and connection is becoming increasingly important. Summary of the invention

[0007] A simplified summary is presented below to provide a basic understanding of some aspects of the disclosed subject matter. This summary is not a comprehensive overview. It is not intended to identify key / critical elements or to delineate the scope of the claimed subject matter. Its sole purpose is to present some concepts in a simplified form as a prelude to a more detailed description that is presented later.

[0008] According to one aspect, a disclosed embodiment may include a system comprising a processor coupled to a memory, the memory comprising instructions that, when executed by the processor, cause the processor to: register a chip-embedded card including first identity data of an individual; request second identity data about the individual from a computing device during a contactless transaction, wherein the second identity data includes at least one of biometric data, a timestamp, or a geographic location of the computing device; and read the first identity data including at least one of the biometric data, the timestamp, or the geographic location data of the chip-embedded card from the chip-embedded card. In addition, the instructions may cause the processor to compare the first identity data and the second identity data, and when there is a match between the first identity data and the second identity data, authenticate the identity of the individual for the contactless transaction based on the result of the comparison. In one example, the chip-embedded card is read by a contactless card reader. In addition, the geographic location data may include proximity data determined by short-range wireless technology triangulation or fencing. The biometric data may include a fingerprint, a facial scan, a voiceprint, or a photo or video of the individual. The instructions may also cause the processor to collect the second identity data in response to the request from one or more computing devices. Additionally, the instructions may cause the processor to calculate a confidence score based on the first identity data and the second identity data, and determine a match when the confidence score meets a predetermined threshold. Additionally, the predetermined threshold may be based on the type of data requested or the contactless transaction.

[0009] According to another aspect, the disclosed embodiment may include a method, the method comprising: executing instructions on a processor, the instructions causing the processor to perform operations related to contactless authentication. The operations include requesting first identity data from an individual associated with the contactless interaction, requesting the presentation of a chip embedded card registered to the individual and including second identity data associated with the individual, and comparing the first identity data and the second identity data. In addition, the operation includes determining a physical location based on at least one of the first identity data and the second identity data, and verifying the identity of the individual when the result of the comparison operation is a match and the physical location is within a predetermined distance from another person participating in the contactless interaction. The operation also includes determining a match when the similarity between the first identity data and the second identity data meets a predetermined threshold. In addition, the operation includes determining a confidence score based on the first identity data and the second identity data, wherein the confidence score reflects the amount and strength of the identity data provided. The operation may also include blocking the verification of the identity when the confidence score meets a predetermined threshold, and blocking the verification when the confidence score meets a predetermined threshold determined based on the interaction type or the requested data. The operation may also include reading the chip embedded card using a contactless reader and requesting the first identity data from the smartphone. In addition, the operation may include determining the physical location based on global positioning system coordinates associated with the smartphone. In addition, the operation may include extracting the physical location as the first identity data from metadata of one of the images or videos provided by the smartphone and determining the physical location based on proximity data associated with short-range wireless technology triangulation or fencing.

[0010] According to yet another aspect, the disclosed embodiments may include a computer-implemented method. The method may include receiving first identity information from a smartphone of an individual associated with a contactless interaction, obtaining second identity information from a chip-embedded card of the individual from a contactless card reader, determining a location of the individual based on at least one of location information from the first identity information or a location of the contactless card reader, comparing the first identity information to the second identity information to determine whether there is a match or a mismatch, when there is a match, determining a confidence score based on the amount and type of identity information available, and authenticating the identity of the individual when the confidence score meets a predetermined threshold and the location is within a predetermined distance from another entity participating in the contactless interaction. The computer-implemented method may also include authenticating the identity of the individual when the confidence score meets a predetermined threshold based on the type of interaction.

[0011] To achieve the above and related purposes, certain illustrative aspects of the claimed subject matter are described herein in conjunction with the following specification and accompanying drawings. These aspects are indicative of various ways in which the subject matter may be practiced, all of which are intended to be within the scope of the disclosed subject matter. Additional advantages and novel features will be apparent from the following detailed description when considered in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 An overview of an example implementation is shown.

[0013] Figure 2 An overview of another example implementation is shown.

[0014] Figure 3 is a block diagram illustrating an example authentication system.

[0015] Figure 4 is a block diagram illustrating another example authentication system.

[0016] Figure 5 An example user interface requesting confirmation of physical presence is shown.

[0017] Figure 6 Another example user interface requesting confirmation of physical presence is shown.

[0018] Figure 7 is a flow chart illustrating an authentication method for a contactless transaction according to an embodiment.

[0019] Figure 8 is a flow chart illustrating another authentication method for contactless transactions based on accessibility of a registered chip embedded card according to an embodiment.

[0020] Fig. 9 is a block diagram illustrating a suitable operating environment for aspects of the subject disclosure. DETAILED DESCRIPTION

[0021] Various aspects of the subject disclosure are now described in more detail with reference to the accompanying drawings, wherein the same numerals generally refer to the same or corresponding elements throughout. However, it should be understood that the drawings and the detailed descriptions associated therewith are not intended to limit the claimed subject matter to the specific forms disclosed. On the contrary, the present invention is intended to cover all modifications, equivalents, and alternatives that fall within the spirit and scope of the claimed subject matter.

[0022] Due to the need to maintain social distance, situations that require physical presence can benefit from the ability to establish an individual's identity in a contactless or socially distanced transaction or interaction. Depending on the context of the transaction, a combination of factors may be used to establish an individual's identity while maintaining social distance. Electronic devices may be used to transmit data or requests for data to authenticate identity in contactless transactions.

[0023] The details disclosed herein generally relate to establishing personal identity in contactless transactions (e.g., authentication for contactless transactions or interactions). Contactless transactions are face-to-face transactions that maintain social distance, so that individuals can conduct transactions at a certain distance (e.g., 6 feet or 2 meters apart). Electronic devices can be used to establish personal identity. For example, electronic devices can be used to capture or transmit personal photos or videos taken during transactions to establish identity based on biometric data (e.g., by facial scans or facial recognition, voiceprints, or voice recognition) and timestamps to verify the physical presence of individuals during transactions. Biometric data can include fingerprints, facial scans, or voiceprints, which can be used to establish personal identity. Biometric data can be captured by electronic devices with fingerprint scanners or cameras for taking photos or videos.

[0024] One or more embodiments herein may include the use of a chip-embedded card (e.g., a chip-enabled card) to further establish an individual's identity in a contactless transaction. An individual may be provided with a chip-embedded card that is registered to the individual using the individual's authentication data (e.g., identity information, biometric data). The chip-embedded card may be used during a contactless transaction to verify physical presence for a contactless transaction. During a transaction requiring physical presence, the chip-embedded card is physically read (e.g., using a contact or contactless card reader), thereby also providing verification of physical presence. In addition, the chip-embedded card may provide a timestamp and geolocation data at the time and place when the card was read. Thus, the chip-embedded card may provide an additional source of data points that may be used in conjunction with other data points to establish an individual's identity.

[0025] Depending on the context of the transaction, a combination of factors (e.g., trust webs or collection of data) can be used to establish the identity of an individual in a contactless transaction while maintaining social distance. For example, timestamps and geolocation data can be used to verify the physical presence of an individual at the time of the transaction. Geofencing can be used to alert individuals or services (e.g., people or machines) that they are nearby each other. Bluetooth low energy beacon triangulation can be used to calculate the distance between individuals or services through corresponding devices. If biometric data such as photos and videos are taken during the transaction, biometric data such as facial recognition of facial biometric patterns or voice recognition of voiceprints can also be used to confirm the identity of an individual and verify the physical presence of an individual. For example, photos and videos can provide metadata such as the time and location of the photo or video. Facial recognition and voice recognition can be used to identify individuals. Audio clips can be recorded for voice recognition instead of using videos. Individuals transacting together can also see each other, and electronic devices can provide assistance, such as providing zoom options through camera lenses. In addition, proximity data can also be determined to provide verification of physical presence (e.g., confirmation). Proximity data can estimate the physical proximity between individuals or devices using information obtained from Bluetooth low energy beacon triangulation, geofencing, or Wi-Fi.

[0026] Examples of transactions that can benefit from the ability to establish an individual's identity from a distance can include, but are not limited to, obtaining a state ID or driver's license, notarizing documents, identifying a delivery person, identifying a customer, and signing documents such as a mortgage settlement. By using a combination of data points, contactless transactions can be reliably authenticated. Transactions such as signing a document such as a mortgage settlement may require higher confidence scores and more data points than a delivery service for common goods.

[0027] Reference Figure 1 , an overview of an example implementation 100 is shown. Figure 1 An individual 110 is shown in four separate contactless transactions, where the individual 110 is using an electronic device 125 to directly interact with one or more individuals or facilitators in contactless transactions 120, 140, 160, and 180. The one or more individuals or facilitators may be associated with one or more electronic devices used in the contactless transactions. For example, the individual 110 and the one or more individuals or facilitators may transmit data and request data using their respective electronic devices.

[0028] Individual 110 and one or more individuals or services may be provided with corresponding chip-embedded cards registered to the individuals or services. The chip-embedded card may register the identity information (e.g., name, address, date of birth) of the individual associated with the chip-embedded card. If the chip-embedded card is available during the transaction, the chip-embedded card may provide additional data points to verify whether the individual associated with the chip-embedded card is physically present in the contactless transaction.

[0029] For example, a chip-embedded card 115 may be provided for the individual 110. The chip-embedded card 115 including the identity information of the individual 110 may be registered to the individual 110. If the chip-embedded card 115 is accessible (e.g., available or present) during the contactless transaction, the electronic device 125 may read the chip-embedded card 115 for the identity information registered in the chip-embedded card 115. When reading the chip-embedded card 115, timestamp and geolocation data may also be collected to provide additional data points for identity verification and physical presence confirmation during the contactless transaction.

[0030] A chip-embedded card, such as chip-embedded card 135, may also be provided to a service provider, such as bank affiliate 130, so that individual 110 can authenticate or verify the identity of bank affiliate 130. It is contemplated that chip-embedded card 135 may be provided to bank affiliate 130 for use while on duty and in a personal capacity. It is contemplated that another chip-embedded card may be provided to bank affiliate 130 for use in a personal capacity, as well as additional chip-embedded cards for use in other work.

[0031] In the contactless transaction 120, the individual 110 conducts a transaction or interacts directly with the bank affiliate 130. The individual 110 and the bank affiliate 130 can communicate using their respective electronic devices. Data or requests for data can be transmitted between the individual 110 and the bank affiliate 130 via their respective electronic devices. For example, the individual 110 can transmit data or data requests to the electronic device 137 of the bank affiliate 130 via the electronic device 125. Just as the individual 110 needs to provide identity verification to the bank affiliate 130 to receive services, the individual 110 can also request data from the bank affiliate 130 to ensure who is providing the service.

[0032] Sometimes, a transaction may involve multiple parties. Contactless transaction 140 shows that individual 110 conducts a transaction with group 150. Individual 110 can interact directly with group 150. Individual 110 and group 150 can communicate using their respective electronic devices. Group 150 can share a device, or individuals in group 150 can have their own devices. For example, individual 150a, individual 150b, and individual 150c can have their own corresponding electronic devices. Data or requests for data can be transmitted between individual 110 and group 150 via their respective electronic devices. Individual 110 can request data from individual 150a, individual 150b, and individual 150c, and vice versa. Individuals 150a, 150b, and 150c can have chip-embedded cards assigned to them, which can be read to transmit data to individual 110.

[0033] Transactions can also be conducted using machines. For example, in a contactless transaction 160 (e.g., contact with another individual), the individual 110 conducts a transaction with an ATM (automatic teller machine) 170. In a transaction with a machine (such as in a contactless transaction 160), the transaction can be completed on the machine itself. For example, in a contactless transaction 160, the individual 110 can enter data directly into the ATM 170 without using the electronic device 125. The ATM 170 or another facilitator of the machine can have components similar to those in the electronic device 125. For example, the ATM 170 can have a data collection component capable of collecting data (e.g., identity information, biometric data, timestamp, geographic location data, and proximity data) and a card reader for reading the chip-embedded card 115.

[0034] In a contactless transaction 180, the individual 110 interacts directly with the delivery person 190. The individual 110 and the delivery person 190 can communicate using their respective electronic devices. Data or requests for data can be transmitted between the individual 110 and the delivery person 190 via their respective electronic devices. The individual 110 can use the electronic device 125 to transmit data to the delivery person 190 or request data from the delivery person 190. Geolocation data can be shared between devices so that the individual 110 can be notified when the delivery person 190 is within a predetermined distance, or the delivery person 190 is notified that the individual is nearby when arriving at the delivery location. The chip-embedded card can be registered to the delivery person 190 and include vehicle information used by the delivery person 190.

[0035] The communications in contactless transactions 120, 140, 160 and 180 are transmitted directly between electronic devices associated with the individuals involved and the facilitator. However, it is contemplated that the communications in contactless transactions 120, 140, 160 and 180 may be transmitted through a server. Figure 2An overview of another example implementation 200 is shown that employs a server 210 through which contactless transactions 120 , 140 , 160 , and 180 may be transmitted. Figure 2 Shown with Figure 1 Similar four separate contactless transactions in the individual 110. However, in Figure 2 In the case of contactless transactions 120, 140, 160 and 180, the communication is not as Figure 1 directly from device to device as in Figure 2 In the example of FIG. 2 , communications are sent through server 210, which can store, send, and receive data. Server 210 can be a local server or a cloud server. Local servers can provide advantages such as increased processing power, storage of large blocks of data, and freeing up memory. Cloud servers can also provide additional advantages such as scalability and security, among other things.

[0036] exist Figure 2 , communications between individual 110 and bank affiliate 130, individual group 150, ATM 170, and delivery person 190 are transmitted through server 210. For example, a communication from bank affiliate 130 to individual 110 is received by server 210, which then sends the communication to individual 110. Figure 2 The authentication process in is otherwise similar to Figure 1 Authentication process in .

[0037] It should be understood that electronic device 125 may be a mobile device owned by and registered to individual 110. However, it is contemplated that an administrative entity such as a banking institution may also provide electronic devices at a banking institution for use by customers such as individual 110 for transactions such as contactless transaction 120. Similarly, electronic device 137 may also be a mobile device owned by and registered to bank affiliate 130. However, electronic device 137 may also be an electronic device provided to bank affiliate 130 by a banking institution for business purposes. For security reasons, it is contemplated that the electronic device is identified and associated with an individual in a contactless transaction or a business (e.g., a customer or an employee providing a service) for use by an individual.

[0038] Figure 33 is a block diagram illustrating an example authentication system 300, which includes a registration component 302, a communication component 304, a card reader 306, and an authentication component 308. For the sake of brevity, the contactless transaction 120 is described in more detail to illustrate the authentication process in other similar contactless transactions. The registration component 302 can register the chip embedded card 115 including the identity information of the individual 110 to the individual 110. The registration component 302 can also register the chip embedded card 135 including the identity information of the bank affiliate to the bank affiliate 130. If the individual is a service provider, the identity information of the individual can be associated with one or more management entities. For example, because the bank affiliate 130 is a service provider, the identity of the bank affiliate 130 can be associated with the bank (e.g., a management entity) that employs the bank affiliate 130.

[0039] During a contactless transaction, communication component 304 can transmit data or requests for data between an electronic device such as electronic device 125 and one or more electronic devices such as electronic device 137, including identity information, biometric data, timestamps, geolocation data, or proximity data between electronic device 125 and one or more electronic devices (e.g., electronic device 137). Bluetooth low energy beacon triangulation, geo-fencing, or Wi-Fi can determine the proximity data. Biometric data can include a photo or video of individual 110 or a facilitator (e.g., bank affiliate 130).

[0040] If the chip-embedded card 115 is accessible during the contactless transaction, the card reader 306 can read the chip-embedded card 115 via the electronic device 125 for identity information, a timestamp, geolocation data, or proximity data associated with the individual 110 to verify the physical presence of the individual 110. Similarly, for example, the card reader 306 can read the chip-embedded card 135 via the electronic device 137 for identity information associated with the bank affiliate 130. In addition, the card reader 306 can read the chip-embedded card 135 associated with the bank affiliate 130 for identity information associated with the bank affiliate 130, thereby revealing the name of the administrative entity (e.g., the name of the employer). The card reader 306 can be a contact or contactless reader that employs near field communication (NFC).

[0041] If the bank affiliate 130 requests data from the individual 110, the request can be sent via the communication component 304. If the request is for biometric data, it can include a photo or video of the individual 110 taken during the contactless transaction. However, biometric data can also include fingerprints and audio clips or audio recordings. In response to the request for a photo from the bank affiliate, the individual 110 can take a photo with an electronic device and transmit the photo to the bank affiliate 130 via the communication component 304. Based on the received data, the bank affiliate can use the electronic device 137 to authenticate the contactless transaction via the authentication component 308. In transactions where the server is a machine (such as in the contactless transaction 160), the authentication can be in the form of allowing access to an account associated with the transaction.

[0042] Figure 4 is a block diagram illustrating another example authentication system 300, which also includes a data collection component 402 and a machine learning component 404. The data collection component 402 can collect data associated with an individual into an electronic device and collect requested data from one or more electronic devices. For example, in response to a request for biometric data such as a photo from a bank affiliate 130, the individual 110 can send a photo to the bank affiliate 130, which can be collected by the data collection component 402 and can be stored in the electronic device 137 or the server 210.

[0043] The machine learning component 404 may analyze the requested data to provide a confidence score. The confidence score may be determined based on the requested data or the type of contactless transaction. For example, a clear photo may get a higher confidence score than a less clear photo. A video that reveals personal facial features and voice may get a higher confidence score than a photo. In this way, the machine learning component 404 may employ facial recognition and voice recognition. The machine learning component 404 may also employ handwriting recognition to detect whether the signature belongs to the individual bound to the transaction. The confidence score may also be based on the type of contactless transaction. For example, compared to another transaction such as a mortgage settlement, the confidence score of a delivery service such as in the contactless transaction 180 may meet a predetermined threshold without requiring so much data. In some cases, the confidence score may be based on a binary decision. In other cases, the confidence score may be a weighted decision. For example, if the delivery truck in the contactless transaction 180 is not variable (e.g., identified or provided), the confidence score is based on a binary decision based on whether the delivery truck is an identified delivery truck or not an identified delivery truck. However, the identity of the courier may vary depending on the identity information provided by the courier. It should be appreciated that the machine learning component 404 can extract timestamp data, geolocation data, and proximity data from the transmitted communications and provide a confidence score for verification of the physical presence of an individual in a contactless transaction.

[0044] Figure 5 An example user interface 500 requesting confirmation of physical presence is shown. Figure 5 and Figure 6 The electronic device 125 shown in is a mobile device. However, the electronic device 125 is not limited to a mobile device. For example, the electronic device 125 may be an electronic device provided within a bank. Figure 5 In the example, as part of a contactless transaction, a request 510 may be sent from another electronic device (such as an electronic device 137 associated with a bank affiliate 130) to an electrical device 125 associated with an individual 110. The request 510 may ask the individual 110, "Do you have your verification card?" In this example, the individual 110 sends a reply 520, responding "yes." A subsequent request 530 may be sent to the individual 110, asking the individual 110 to "please confirm your presence by tapping your card."

[0045] In response to request 530, individual 110 may tap chip-embedded card 115 onto electronic device 125 so that card reader 306 may read chip-embedded card 115. In this non-limiting example, card reader 306 is a contactless card reader that uses NFC to read chip-embedded card 115 (e.g., a conventional card). Thus, tapping chip-embedded card 115 onto electronic device 125 may read information data registered to chip-embedded card 115. For contactless card reading (e.g., without inserting or swiping the card), NFC needs to be turned on or enabled by individual 110 on electronic device 125 to use this short-range wireless technology.

[0046] Figure 6 Another example user interface 600 for requesting confirmation of physical presence is shown. In the example user interface 600, a request 610 may be sent to an individual 110 via an electronic device 125. The request 610 asks the individual 110, "Do you have your verification card?" In response, the individual 110 sends a reply 620, responding "No". A subsequent request 630 may be sent to the individual 110, asking "Please confirm your presence by taking and sending a selfie." The request 630 requests biometric data in the form of a photo or selfie taken during a contactless transaction. The photo may provide photo metadata, which may include a timestamp, geolocation data, and information about the electronic device 125. The machine learning component 404 may utilize the photo metadata to determine a confidence score for verification of the physical presence of the individual 110 in the contactless transaction. The individual in the contactless transaction may utilize the verification performed by the machine learning component 404 to authenticate the contactless transaction using the electronic device 137 via the authentication component 308. For example, based on a confidence score that meets a predetermined threshold, the machine learning component 404 may provide verification of the physical presence of the individual 110. Bank affiliate 130 may use the provided verification and bank affiliate 130 's visual identification of individual 110 to determine whether to authenticate contactless transaction 120 .

[0047] Reference Figure 7 and Figure 8, depicting example authentication methods 700 and 800. Although these methods are shown and described in a series of boxes for simplicity of explanation, it should be understood and appreciated that the disclosed subject matter is not limited by the order of the boxes, as some boxes may appear in a different order or appear simultaneously with other boxes depicted and described herein. In addition, not all of the boxes shown are required to implement the methods described below. In addition, each box or combination of boxes can be implemented by computer program instructions, which can be provided to a processor to produce a machine, so that the instructions executed on the processor create a device for implementing the functions specified by the flowchart boxes. It should also be understood that authentication methods 700 and 800 are described in conjunction with specific examples for explanatory purposes only.

[0048] Figure 7 is a flow chart illustrating an authentication method 700 for a contactless transaction. At 710, the authentication method 700 may include, by the registration component 302, registering a chip-embedded card to an individual, the card including identity information of the individual. At 720, during the contactless transaction, the authentication method 700 may include, by the communication component 304, transmitting data or a request for data between the electronic device and one or more electronic devices, the data or request including identity information, biometric data, timestamp, geolocation data, or proximity data between the electronic device and the one or more electronic devices. At 730, if accessible during the contactless transaction, the authentication method 700 may include, by the card reader 306, reading the chip-embedded card via the electronic device or the one or more electronic devices to obtain the identity information, timestamp, geolocation data, or proximity data for verifying physical presence. At 740, the authentication method 700 may include, by the authentication component 308, authenticating the contactless transaction based on the data via the electronic device or the one or more electronic devices.

[0049] Figure 8 8 is a flow chart illustrating another authentication method 800 associated with a contactless transaction based on the accessibility of a registered chip-embedded card 115. At 810, the authentication method 800 may include transmitting data or a request for data by the communication component 304. At 820, the authentication method 800 may include determining by the individual 110 whether the chip-embedded card 115 is accessible (e.g., available or present). If yes, the process continues to 830. If no, the process proceeds to 840. At 830, the authentication method 800 may include reading the chip-embedded card 115. At 840, the authentication method 800 may include transmitting additional data or a request for data. At 850, the authentication method 800 may include determining whether the data is complete. If yes, the process continues to 860. If no, the process proceeds to 840. At 860, the authentication method 800 may include authenticating the identity of the individual associated with the contactless transaction based on the data.

[0050] Taking contactless transaction 120 as an example, based on the data transmitted from electronic device 125 to electronic device 137, if the confidence score meets a predetermined threshold, machine learning component 404 can provide verification of the physical presence of individual 110. Bank affiliate 130 can use the provided verification and visual observation of individual 110 and contactless transaction 120 by bank affiliate 130. Bank affiliate can determine whether to authenticate individual 110 associated with contactless transaction 120. The authentication from bank affiliate 130 can be sent to electronic device 125 by electronic device 137 via authentication component 308.

[0051] It should be understood and appreciated that while many of the embodiments described herein employ chip-enabled cards to establish contactless identity, there are other embodiments that employ additional identification data, such as but not limited to biometric data (e.g., fingerprint, facial recognition, voiceprint) in addition to (or alone) a chip-enabled card to establish a contactless identity. For example, when a chip-enabled card is not available, biometric data may be employed in conjunction with (or independently of) mobile device identity / characteristics and contextual data to verify identity. In other aspects, additional data such as biometric data may be used in addition to a chip-enabled card (device or key fob) to establish identity, for example, in scenarios where a higher level of authentication is desired or required. These alternative embodiments are to be included within the spirit or scope of the innovation disclosed and claimed herein.

[0052] As used herein, the terms "component" and "system" and their various forms (e.g., component, system, subsystem) are intended to refer to a computer-related entity, whether hardware, a combination of hardware and software, software, or software in execution. For example, a component can be, but is not limited to, a process running on a processor, a processor, an object, an instance, an executable program, a thread of execution, a program, or a computer. For example, both an application running on a computer and a computer can be a component. One or more components can reside within a process or thread of execution, and a component can be localized on one computer or distributed between two or more computers.

[0053] As used herein, the terms "reasoning" or "inference" generally refer to the process of reasoning or inferring the state of a system, component, environment, or user based on one or more observations captured, such as through events or data. For example, inference can be used to identify context or actions, or it can be used to generate a probability distribution over states. Inference can be probabilistic. For example, the calculation of a probability distribution over states of interest can be based on a consideration of data or events. Inference can also refer to techniques for composing higher-level events from a set of events or data. Such inferences may result in the construction of new events or new actions based on a set of observed events or stored event data, whether or not the events are closely related in time, and whether the events and data come from one or several event and data sources.

[0054] As used in this specification and the appended claims, the conjunction "or" is intended to mean an inclusive "or" rather than an exclusive "or", unless otherwise indicated or clear from the context. In other words, "'X' or 'Y'" is intended to mean any inclusive permutation of 'X' and 'Y'. For example, if "'A' employs 'X'," "'A' employs 'Y'," or "'A' employs both 'X' and 'Y'," then "'A' employs 'X' or 'Y'" is satisfied in any of the foregoing instances.

[0055] Additionally, to the extent that the terms "includes," "comprising," "having," "having," or variations thereof are used in the detailed description or claims, such terms are intended to be included in a manner similar to the term "comprising" as interpreted when "comprising" is used as a transitional word in a claim.

[0056] To provide context for the disclosed subject matter, Fig. 9 The following discussion is intended to provide a brief overview of suitable environments in which various aspects of the disclosed subject matter may be implemented. However, the suitable environment is merely an example and does not imply any limitation on the scope of use or functionality.

[0057] Although the above disclosed systems and methods can be described in the general context of computer executable instructions of programs running on one or more computers, it should be recognized by those skilled in the art that various aspects can also be implemented in combination with other program modules, etc. Typically, program modules include routines, programs, components, data structures, etc. that perform specific tasks or implement specific abstract data types. In addition, it should be understood by those skilled in the art that the above systems and methods can be practiced with various computer system configurations, including single processor, multi-processor or multi-core processor computer systems, small computing devices, server computers, and personal computers, handheld computing devices (e.g., personal digital assistants (PDAs), smart phones, tablet computers, watches...), microprocessor-based or programmable consumer or industrial electronic products, etc. Various aspects can also be practiced in a distributed computing environment, in which tasks are performed by remote processing devices linked through a communication network. However, some aspects (if not all aspects) of the disclosed subject matter can be practiced on stand-alone computers. In a distributed computing environment, program modules can be located in one or both of local and remote storage devices.

[0058] Reference Fig. 9 , an example computing device 900 (e.g., a desktop, laptop, tablet, watch, server, handheld, programmable consumer or industrial electronics, set-top box, gaming system, computing node, ...) is shown. The computing device 900 includes one or more processors 910, a memory 920, a system bus 930, one or more storage devices 940, one or more input devices 950, one or more output devices 960, and one or more communication connections 970. The system bus 930 at least communicatively couples the above-mentioned system components. However, the computing device 900, in its simplest form, may include one or more processors 910 coupled to a memory 920, wherein the one or more processors 910 execute various computer-executable actions, instructions, and / or components stored in the memory 920.

[0059] One or more processors 910 may be implemented by a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic, discrete gate or transistor logic, discrete hardware components, or any combination designed to perform the functions described herein. A general purpose processor may be a microprocessor, but alternatively, the processor may be any processor, controller, microcontroller, or state machine. One or more processors 910 may also be implemented as a combination of computing devices, for example, a combination of a DSP and a microprocessor, a plurality of microprocessors, a multi-core processor, a combination of one or more microprocessors and a DSP core, or any other such configuration. In one embodiment, one or more processors 910 may be a graphics processor unit (GPU) that performs calculations on digital image processing and computer graphics.

[0060] The computing device 900 may include, or otherwise interact with, a variety of computer-readable media to facilitate controlling the computing device to implement one or more aspects of the disclosed subject matter. Computer-readable media can be any available media accessible to the computing device 900, and includes both volatile and nonvolatile media, and removable and non-removable media. Computer-readable media can include two distinct and mutually exclusive types: storage media and communication media.

[0061] Storage media include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storing information such as computer-readable instructions, data structures, program modules or other data. Storage media include storage devices such as storage devices (e.g., random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM)), magnetic storage devices (e.g., hard disk, floppy disk, cassette, tape), optical disks (e.g., compact disk (CD), digital versatile disk (DVD)) and solid-state devices (e.g., solid-state drive (SSD), flash drive (e.g., card, stick, key drive)), or any other similar medium that stores rather than transmits or transfers the desired information accessible by the computing device 900. Therefore, storage media do not include modulated data signals and data signals described with respect to communication media.

[0062] Communication media contains computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism, and includes any information transmission media. The term "modulated data signal" refers to a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, radio frequency (RF), infrared and other wireless media.

[0063] The memory 920 and the one or more storage devices 940 are examples of computer-readable storage media. Depending on the configuration and type of the computing device, the memory 920 may be volatile (e.g., random access memory (RAM)), non-volatile (e.g., read-only memory (ROM), flash memory, etc.), or some combination of the two. For example, a basic input / output system (BIOS) (including basic routines such as transferring information between elements within the computing device 900 during startup) may be stored in non-volatile memory, while volatile memory may act as an external cache memory to facilitate processing by the processor 910, etc.

[0064] The one or more storage devices 940 include removable / non-removable, volatile / non-volatile storage media for storing large amounts of data associated with the memory 920. For example, the one or more storage devices 940 include, but are not limited to, one or more devices such as a magnetic or optical drive, a floppy drive, a flash memory, a solid-state drive, or a memory stick.

[0065] The memory 920 and one or more storage devices 940 may include or store an operating system 980, one or more applications 986, one or more program modules 984, and data 982. The operating system 980 is used to control and allocate resources of the computing device 900. The application 986 includes one or both of the system and application software, and can utilize the management of resources by the operating system 980 through the program modules 984 and data 982 stored in the memory 920 or storage device 940 to perform one or more actions. Therefore, the application 986 can turn the general-purpose computer 900 into a special-purpose machine according to the logic provided thereby.

[0066] All or part of the disclosed subject matter may be implemented using standard programming or engineering techniques to produce software, firmware, hardware, or any combination thereof to control the computing device 900 to implement the disclosed functionality. By way of example and not limitation, all or part of the authentication system 300 may be or form part of an application 986 and include one or more modules 984 and data 982 stored in a memory or one or more storage devices 940, the functionality of which may be implemented when executed by one or more processors 910.

[0067] According to a specific embodiment, the processor 910 may correspond to a system on chip (SOC) or similar architecture, including or in other words, integrating both hardware and software on a single integrated circuit substrate. Here, one or more processors 910 may include one or more processors and a memory at least similar to the processor 910 and the memory 920, etc. Traditional processors include a minimum amount of hardware and software and rely extensively on external hardware and software. In contrast, the SOC implementation of the processor is more powerful because it has embedded hardware and software therein, which implement specific functions with minimal or no reliance on external hardware and software. For example, the authentication system 300 or functions associated therewith may be embedded in hardware in the SOC architecture.

[0068] One or more input devices 950 and one or more output devices 960 may be communicatively coupled to the computing device 900. For example, the one or more input devices 950 may include a pointing device (e.g., a mouse, a trackball, a stylus, a pen, a touchpad), a keyboard, a joystick, a microphone, a voice user interface system, a camera, a motion sensor, and a global positioning satellite (GPS) receiver and transmitter, etc. For example, the one or more output devices 960 may correspond to a display device (e.g., a liquid crystal display (LCD), a light emitting diode (LED), a plasma, an organic light emitting diode display (OLED)), a speaker, a voice user interface system, a printer, and a vibration motor, etc. The one or more input devices 950 and the one or more output devices 960 may be connected to the computing device 900 by a wired connection (e.g., a bus), a wireless connection (e.g., Wi-Fi, Bluetooth), or a combination thereof.

[0069] The computing device 900 may also include one or more communication connections 970 to communicate with at least a second computing device 902 using a network 990. The one or more communication connections 970 may include a wired or wireless communication mechanism to support network communications. The network 990 may correspond to a local area network (LAN) or a wide area network (WAN) such as the Internet. The second computing device 902 may be another processor-based device with which the computing device 900 can interact. In one example, the computing device 900 may execute the authentication system 300 for the first function in a distributed processing environment, and the second computing device 902 may execute the authentication system 300 for the second function. In addition, the second computing device may provide a network-accessible service that stores source code and encryption keys, as well as other content that the authentication system 300 executed on the computing device 900 may employ.

[0070] What has been described above includes examples of various aspects of the claimed subject matter. Of course, it is not possible to describe every possible combination of components or methods for the purpose of describing the claimed subject matter, but one of ordinary skill in the art will recognize that many further combinations and permutations of the disclosed subject matter are possible. Therefore, the disclosed subject matter is intended to include all such changes, modifications, and variations that fall within the spirit and scope of the appended claims.

Claims

1. A system comprising: a processor coupled to a memory, the memory comprising instructions that, when executed by the processor, cause the processor to: Register a chip-embedded card that includes the individual’s primary identity data; requesting, during the contactless transaction, second identity data about the individual from a computing device, wherein the second identity data comprises at least one of biometric data, a timestamp, or a geographic location of the computing device; Reading the first identity data from the chip embedded card, the first identity data comprising at least one of biometric data, a timestamp, or geographic location data of the chip embedded card; comparing the first identity data and the second identity data; and When there is a match between the first identity data and the second identity data, based on a result of the comparison, the identity of the individual is authenticated for the contactless transaction.

2. The system according to claim 1, wherein: The chip embedded card is read by a contactless card reader.

3. The system according to claim 1, wherein: Geolocation data includes proximity data determined by short-range wireless technology triangulation or fencing.

4. The system according to claim 1, wherein: The biometric data may include a fingerprint, facial scan, voice print, or a photograph or video of the individual.

5. The system according to claim 1, wherein: The instructions also cause the processor to collect, from one or more computing devices, the second identity data received in response to the request.

6. The system according to claim 1, wherein: The instructions also cause the processor to: calculating a confidence score based on the first identity data and the second identity data; and The match is determined when the confidence score meets a predetermined threshold.

7. The system according to claim 6, wherein: The predetermined threshold is based on the requested data or on the type of the contactless transaction.

8. A method comprising: Instructions are executed on a processor, the instructions causing the processor to perform operations associated with contactless authentication, the operations comprising: requesting first identity data from an individual associated with the contactless interaction; requesting presentation of a chip embedded card registered to the individual and comprising second identity data associated with the individual; comparing the first identity data and the second identity data; determining a physical location based on at least one of the first identity data and the second identity data; and When the result of the comparison operation is a match and the physical location is within a predetermined distance from another person engaging in the contactless interaction, the identity of the individual is verified. 9 . The method of claim 8 , the operation further comprising determining the match when a similarity between the first identity data and the second identity data satisfies a predetermined threshold.

10. The method of claim 8, the operation further comprising determining a confidence score based on the first identity data and the second identity data, wherein: The confidence score reflects the amount and strength of the identity data provided.

11. The method of claim 10, the operations further comprising preventing verification of the identity when the confidence score meets a predetermined threshold.

12. The method of claim 11, the operations further comprising preventing the verification when the confidence score satisfies a predetermined threshold determined based on an interaction type.

13. The method of claim 11, the operations further comprising preventing the verification when the confidence score satisfies a predetermined threshold determined based on the requested data.

14. The method of claim 8, the operations further comprising reading the chip embedded card using a contactless reader.

15. The method of claim 8, the operations further comprising requesting the first identity data from a smartphone.

16. The method of claim 8, the operations further comprising determining the physical location based on global positioning system coordinates associated with a smartphone.

17. The method of claim 8, the operations further comprising extracting the physical location as the first identity data from metadata of one of an image or a video provided by a smartphone.

18. The method of claim 8, the operations further comprising determining the physical location based on proximity data associated with short-range wireless technology triangulation or fencing.

19. A computer-implemented method comprising: receiving first identity information from a smartphone of an individual associated with the contactless interaction; obtaining secondary identity information from a chip-embedded card of the individual from a contactless card reader; determining a location of the individual based on at least one of location information from the first identity information or a location of the contactless card reader; comparing the first identity information to the second identity information to determine whether there is a match or a mismatch; When there is a match, a confidence score is determined based on the amount and type of identity information available; as well as The identity of the individual is authenticated when the confidence score meets a predetermined threshold and the location is within a predetermined distance from another entity engaging in the contactless interaction.

20. The computer-implemented method of claim 19, further comprising authenticating the identity of the individual when the confidence score meets a predetermined threshold based on the type of interaction.

Images