Biometric card with self-enrolment feature, and system and method for enrolment of biometric cards

Abstract

The present invention pertains to a system (100) facilitating biometric-enabled card (106) enrolment. The system (100) includes biometric-enabled cards (106), registered mobile devices (108) linked to users (110), and a server (102) associated with the card issuer (112). Users (110) can initiate a biometric enrolment request at any issuer-associated terminal (104) when they insert the card (106) or bring it close to the terminal (104) while placing a finger on the card's (106) biometric sensor (202). The server (102) then sends instructions to the user's (110) mobile device (108) for providing a biometric template. The server (102) subsequently receives the user's (110) biometric to complete the biometric template in response to the instructions. Following the biometric template completion, the server (102) authenticates the user (110) using OTP and PIN-based authentication. The server (102) then validates and concludes the card's (106) biometric enrolment after confirming the user's (110) positive authentication.

Description

BIOMETRIC CARD WITH SELF-ENROLMENT FEATURE, AND SYSTEM AND METHOD FOR ENROLMENT OF BIOMETRIC CARDSTECHNICAL FIELD[1] The present disclosure relates generally to the field of biometric cards. In particular, the present disclosure relates to a system and method for enabling the enrolment of biometric-enabled cards. Further, the present disclosure relates to a biometric card with a selfenrolment feature.BACKGROUND[2] Background description includes information that may be useful in understanding the present invention. It is not an admission that any of the information provided herein is prior art or relevant to the presently claimed invention, or that any publication specifically or implicitly referenced is prior art.[3] Biometric authentication is widely recognized as a robust and secure method for verifying an individual's identity. Biometric-enabled cards have gained substantial popularity and relevance in various applications, including access control, financial transactions, and identity verification. These cards typically incorporate biometric sensors, such as fingerprint scanners, iris scanners, or facial recognition systems, to enhance security and user convenience. However, despite their numerous benefits, the enrolment process of biometric data onto these cards presents several challenges and issues that need to be addressed to ensure the widespread adoption and effectiveness of such cards.[4] Various attempts have been made in the past in the field of biometric cards. For instance, one of the patent applications US10210685B2 discloses a voice biometric analysis system for authenticating a customer as an authorized payment card user to a merchant over a communications network. Another patent application WO2022033769A1 discloses a method for enrolling a cardholder with a biometric payment card equipped with a biometric sensor for authentication. The method involves receiving biometric data from the card's sensor, adding it to the cardholder's template, verifying the cardholder's identity, and notifying the service provider of successful biometric authentication enrolment. The service provider, in turn, notifies the cardholder through an out-of-band system upon receiving this confirmation. Another patent application GB2609598A discloses a structure and method to facilitate alignment between a biometric smartcard and a smartphone during the process of biometricenrolment. The structure includes a designated area for receiving the smartcard and a guide for aligning this structure with the smartphone. This alignment ensures efficient power transfer for the NFC antenna. The smartcard area may involve a cut-out within a folding structure and may include specific materials to enhance power transfer. Multiple smartphone guides can be accommodated, and a complementary app assists users in aligning the card and phone for optimal NFC signal strength, allowing for the enrolment of multiple fingers. Another patent application W02020013931A1 discloses systems, methods, and apparatuses for streamlining the enrolment process for newly issued biometric payment cards. Users receive a package with the card, an energy sleeve containing a power source, and LED lights. The power source in the sleeve powers the card's EMV chip and LEDs during enrolment. Additionally, issuers may provide a software development kit (SDK) to assist users in the biometric enrolment process, ensuring a secure and user-friendly experience.[5] The above references and existing solutions rely on a specialized biometric enrolment device such as sleeve and the like. Cardholders are required to carry out the enrolment process on their own using this enrolment device, which is designed for single-use purposes. While this approach is intended to enhance security and streamline the enrolment process, it presents several significant issues. Firstly, the use of a dedicated enrolment device adds to the overall cost of producing each biometric payment card. This cost increase can deter the widespread adoption of biometric cards and limit their accessibility to a broader consumer base. Secondly, the security implications of this approach are concerning. As the enrolment device remains in the possession of the cardholder, it poses a potential security threat. Unauthorized access to the device may compromise the biometric data stored on the card, undermining the very purpose of biometric authentication.[6] Furthermore, alternative solutions may require users to physically visit a bank for the enrolment process, which is neither customer-friendly nor economically viable. It may impose inconvenience on the cardholder and may add unnecessary administrative burdens to financial institutions.[7] There is, therefore, a requirement in the art for a means to overcome the above drawbacks, shortcomings, and limitations associated with existing biometric card enrolment solutions, and provide an improved, secure, user-friendly solution for enabling enrolment of biometric cards.OBJECTS OF THE PRESENT DISCLOSURE[8] Some of the objects of the present disclosure, which at least one embodiment herein satisfies are listed hereinbelow.[9] It is an object of the present disclosure to overcome the above drawbacks, shortcomings, and limitations associated with existing biometric cards and corresponding enrolment solutions.

[0010] It is an object of the present disclosure to enable biometric enrolment of biometric cards in a secure, efficient, and user-friendly manner.

[0011] It is an object of the present disclosure to provide an improved, secured, user- friendly system and method for enabling the enrolment of biometric cards.

[0012] It is an object of the present disclosure to provide a biometric-enabled card with a self-enrolment capability, which can be enrolled at any online terminal and ATM.SUMMARY

[0013] The present disclosure relates generally to the field of biometric cards. In particular, the present disclosure relates to a system and method for enabling the enrolment of biometric-enabled cards. Further, the present disclosure relates to a biometric card with a selfenrolment feature.

[0014] An aspect of the present disclosure pertains to a system for enabling enrolment of one or more biometric-enabled cards. The system comprises one or more cards, and one or more registered mobile devices associated with one or more users, and a server associated with an issuer of the one or more cards. The server is in communication with one or more registered terminals. Each of the cards is biometric-enabled and comprises a biometric sensor, and a processing unit operatively coupled to the biometric sensor. The processing unit is configured to establish a secured communication channel between the card and the server, upon initiation of a biometric enrolment request by the user of the corresponding card at any of the one or more registered terminals and also allows the biometric sensor to capture the biometric details of the user upon initiation of the biometric enrolment request. Further, the server is configured to: transmit, on the registered mobile device of the corresponding user, an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card of the user and further transmit, on the registered mobile device of the user, one or more instructions or steps for providing a biometric template for the biometric enrolment. The server is configured to receive, from the card, the biometric details provided by the user in response to the transmitted instructions or steps while completing the biometric template and authenticate the user by communicating with the registered mobile device of the user, aftercompletion of the biometric template. In case of the cards being payment cards, only a status or feedback of the enrolment process is received by the server and the biometric template remains stored inside card. However, for other types of cards, the biometric template may be stored on the server. Accordingly, the server validates and completes the biometric enrolment of the card upon positive authentication of the user.

[0015] In an aspect, the one or more cards are selected from a group comprising a smart card, and a payment card.

[0016] In an aspect, the server is configured to transmit, on the registered mobile device of the user, any or a combination of a one-time password (OTP), and a unique password upon completion of the biometric enrolment by the user. The server is further configured to authenticate the user upon receiving the same one-time password and / or the unique password from the user via the registered mobile device and accordingly transmit, on the registered mobile device of the user, an enrolment completion confirmation message upon the positive authentication of the user. It should be obvious for a person skilled in the art that the authentication can be carried out before, after, and / or in between the enrolment process as decided by the issuer of the card.

[0017] In an aspect, the enrolment request is raised at the one or more registered terminals upon operatively connecting the card to the corresponding terminal while placement of a finger on the biometric sensor by the user.

[0018] In an aspect, the one or more registered terminals are selected from a group comprising a Point-of-Sale (POS) terminal, an ATM, and a near-field communication (NFC) terminal.

[0019] Another aspect of the present disclosure pertains to a method for enrolment of biometric-enabled cards. The method comprises the steps of establishing, by a biometric- enabled card, a secured communication channel between the card and a server associated with an issuer of the card, upon initiation of a biometric enrolment request by a user of the card at one or more registered terminals. Further, the method comprises the steps of transmitting, by the server, on a registered mobile device of the corresponding user, an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card of the user and further transmitting, by the server, on the registered mobile device of the user, one or more instructions or steps for providing a biometric template for the biometric enrolment. In an embodiment, any authentication method supported by the registered mobile device can be used in combination or interchangeably with the OTP -based authentication mechanism, for example using the payment app, and the like The method further comprises thesteps of allowing, by the card, the user to provide biometric details in response to the transmitted instructions or steps while completing the biometric template and further receiving, by the server, the biometric details provided by the user in response to the transmitted instructions or steps. Furthermore, the method comprises the steps of authenticating, by the server, the user by communicating with the registered mobile device of the user, after completion of the biometric template and accordingly validating and completing, by the server, the biometric enrolment of the card upon a positive authentication of the user.

[0020] In an aspect, the method comprises the steps of transmitting, by the server, on the registered mobile device of the user, any or a combination of a one-time password (OTP), and a unique password upon completion of the biometric enrolment by the user, authenticating, by the server, the user upon receiving the same one-time password and / or the unique password from the user via the registered mobile device and transmitting, by the server, on the registered mobile device of the user, an enrolment completion confirmation message upon the positive authentication of the user. The authentication can be carried out before, after, and / or in between the enrolment process as decided by the issuer of the card.

[0021] In an aspect, the enrolment request is raised at the one or more registered terminals upon operatively connecting the card to the corresponding terminal while placement of a finger on the biometric sensor by the user.

[0022] Yet another aspect of the present disclosure pertains to a biometric card. The card comprises a biometric sensor, and a processing unit operatively coupled to the biometric sensor. The processing unit is configured to establish a secured communication channel between the card and a server associated with an issuer of the card, upon initiation of a biometric enrolment request by the user at one or more registered terminals and also allows capturing of the biometric details of the user upon initiation of the biometric enrolment request. The server of the issuer is configured to transmit, on a registered mobile device of the user, an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card of the user and further transmit, on the registered mobile device of the user, one or more instructions or steps for providing a biometric template for the biometric enrolment. Further, the server is configured to receive, from the card, the biometric details provided by the user in response to the transmitted instructions and steps while completing the biometric template; authenticate the user, by communicating with the registered mobile device of the user, after completion of the biometric template and accordingly validate and complete the biometric enrolment of the card upon a positive authentication of the user.

[0023] In an aspect, the card is selected from a group comprising a smart card, and a payment card. Further, the one or more registered terminals are selected from a group comprising a Point-of-Sale (POS) terminal, an ATM, a near-field communication (NFC) terminal.

[0024] Various objects, features, aspects, and advantages of the present disclosure will become more apparent from the following detailed description of preferred embodiments, along with the accompanying drawing figures in which like numerals represent like features.

[0025] Within the scope of this application, it is expressly envisaged that the various aspects, embodiments, examples and alternatives set out in the preceding paragraphs, in the claims and / or in the following description and drawings, and in particular the individual features thereof, may be taken independently or in any combination. Features described in connection with one embodiment are applicable to all embodiments, unless such features are incompatibleBRIEF DESCRIPTION OF DRAWINGS

[0026] The accompanying drawings are included to provide a further understanding of the present invention and are incorporated in and constitute a part of this specification. The drawings illustrate exemplary embodiments of the present invention and, together with the description,

[0027] FIG. 1 illustrates an exemplary network architecture of the proposed system for enabling the enrolment of biometric-enabled cards, in accordance with an embodiment of the present disclosure.

[0028] FIG. 2 illustrates exemplary functional modules of the proposed biometric- enabled card, in accordance with an embodiment of the present disclosure

[0029] FIG. 3 illustrates exemplary functional modules of the server of the proposed system, in accordance with an embodiment of the present disclosure.

[0030] FIG. 4 illustrates the steps involved in the proposed method for enrolment of biometric-enabled cards, in accordance with an embodiment of the present disclosureDETAILED DESCRIPTION

[0031] The following is a detailed description of embodiments of the disclosure depicted in the accompanying drawings. The embodiments are in such detail as to clearly communicate the disclosure. However, the amount of detail offered is not intended to limit the anticipated variations of embodiments; on the contrary, the intention is to cover all modifications,equivalents, and alternatives falling within the spirit and scope of the present disclosure as defined by the appended claims.

[0032] In the following description, numerous specific details are set forth in order to provide a thorough understanding of embodiments of the present invention. It will be apparent to one skilled in the art that embodiments of the present invention may be practiced without some of these specific details.

[0033] Embodiments of the present invention include various steps, which will be described below. The steps may be performed by hardware components or may be embodied in machine-executable instructions, which may be used to cause a general-purpose or specialpurpose processor programmed with the instructions to perform the steps. Alternatively, steps may be performed by a combination of hardware, software, and firmware and / or by human operators.

[0034] Embodiments of the present disclosure elaborate upon a system and method for enabling the enrolment of biometric-enabled cards. Further, the embodiments elaborate upon a biometric card with a self-enrolment feature

[0035] Referring to FIG. 1, the exemplary network architecture of the proposed system 100 for enabling the enrolment of one or more biometric-enabled cards is disclosed. The proposed system 100 can include a server 102, and one or more terminals 104-1,. . ,,104-N (collectively designated as 104). Further, the system 100 can include one or more biometric cards (106-1,... 106-N) (collectively referred to as biometric cards or cards 106, hereinafter) and one or more mobile devices (108-l,....108-N) (collectively designated as 108) that can be associated with the one or more users (110-1,....110-N) (collectively designated as 110). In an embodiment, the card 106 can be a payment card and / or smart card being configured with a biometric authentication module. Further, the terminal 104 can be selected from a group comprising a Point-of-Sale (POS) terminal, an ATM, and a near field communication (NFC) terminal, but is not limited to the like.

[0036] The server 102 can be associated with an issuer or service provider 112 of the cards 106. Further, the terminals 104 can also be associated with the issuer 112, which can allow the users 110 to establish a secured connection between their cards 106 and the server 102 of the issuer 112 via the terminals 104. However, the terminals 104 can also be associated with a different issuer or service provider, which can be in communication with servers of various issuers and further allow users of different issuers to establish a connection with their respective servers. For instance, terminal A associated with issuer A can allow user B associated with issuer B to use terminal A of issuer A. Similarly, a terminal B associated withissuer B can also allow user A to use the terminal B of issuer B. The server 102, the terminals 104, and the mobile devices 108 can be in communication with each other through a network 114. Further, the cards 106 can be configured to establish communication with the terminals 104 via the network 114. A satellite enables deploying, configuring, and maintaining the communication of the server 102 and the terminals 104 across environments. The detailed construction and operation of the cards 106 and the server 102 have been described later in conjunction with FIG. 2 and FIG. 3, respectively.WORKING

[0037] Once the user 110 registers with the issuer 112, the issuer 112 can provide the user 110 with a biometric card 106 being registered in the name of the user 112. The server 102 can allow the user 110 to connect or use the card 106 at any of the terminals 104 for biometric enrolment for the first time. Further, once the biometric template or details is successfully provided by the user 110 to the server 102 and the user 110 is authenticated by the issuer 112, the issuer 112 can enrol the biometric card 106 in the server 102 and further store the biometric template of the corresponding user 110 in the server 102 and the biometric card 106. In an embodiment, in case of the cards 106 being payment cards, only a status or feedback of the enrolment process is received by the server 102 and the biometric template remains stored inside card. However, in other embodiments, for other types of cards, the biometric template of the user 110 can be stored on the server 102.

[0038] In an embodiment, the terminals 104 can establish a secured communication channel between the card 106 and the server 102, upon initiation of the biometric enrolment request by the user 110 of the corresponding card 106 at any of the registered terminals 104. The enrolment request can be raised at the terminals 104 when the card 106 is inserted in a card slot of the terminal 104 or when brought in proximity to the terminal 104 while placing a finger on a biometric sensor of the card 106 by the user 110. Further, once communication is established between the card 106 and the server 102 via the terminal 104, the server 102 can transmit, on the mobile device 108 of the user 110, an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card 106 of the user 110. This may alert the registered owner in case his / her card 106 is used for enrolment without his / her knowledge or fraudulently.

[0039] The server 102 can further transmit, on the registered mobile device 108 of the user 110, one or more instructions or steps for providing a biometric template for completing the biometric enrolment. Accordingly, the user 110 can provide his / her biometric details by placing his / her finger on the biometric sensor of the card 106 in different orientations, inresponse to the given instructions or steps while completing the biometric template. The server 102 can accordingly receive the captured / provided biometric details from the card 106 via the terminal 104 and network to complete the biometric template.

[0040] Once the biometric template is completed and received by the server 102, the server 102 can authenticate the user 110 before the final completion of the biometric enrolment. In an embodiment, the server 102 can transmit any or a combination of a one-time password (OTP), and a unique password on the registered mobile device 108 of the user 110 to authenticate the user 110 before final completion of the biometric enrolment. The server 102 can allow the user 110 to transmit the same one-time password and / or the unique password via his / her registered mobile device 108 in order to authenticate the credibility of the user 110. However, if the same one-time password and / or the unique password is not received by the server 102, the server 102 can close the enrolment and alert the registered user 110. Further, once the user 110 is authenticated by the server 102 upon receiving the same one-time password and / or the unique password from the user 110, the server 102 can transmit an enrolment completion confirmation message on the registered mobile device 108 of the user 110 and further link the biometric template to the card 106 and store the biometric template in the card 106 and a database of the server 102 upon the validation of the biometric enrolment. In case of payment cards, only a status or feedback of the enrolment process is received by the server and the biometric template remains stored inside card. However, for other types of cards, the biometric template may be stored on the server. Thus, the system enables biometric enrolment of biometric cards in a secure, efficient, and user-friendly manner. In an embodiment, any authentication method supported by the registered mobile device 108 can be used in combination or interchangeably with the OTP -based authentication mechanism, for example using the payment app, and the like. The payment app can further guide the user 110 to place his / her finger on the card 106 authentication in order to authenticate the credibility of the user 110.

[0041] In an embodiment, the network 114 can be a wireless network, a wired network, or a combination thereof that is implemented as one of the different types of networks, such as Mobile GSM network, Intranet, Local Area Network (LAN), Wide Area Network (WAN), Internet, and any futuristic method of communication / connectivity as the case may be. Further, network 114 is either a dedicated network or a shared network. The shared network represents an association of the different types of networks that use a variety of protocols, for example, Hypertext Transfer Protocol (HTTP), Transmission Control Protocol / Intemet Protocol (TCP / IP), Wireless Application Protocol (WAP), and the like.

[0042] Referring to FIG. 2, the card 106 can include a biometric sensor 202 configured to capture the biometric details of the user 110. The card 106 can further include a processing unit 204 such as but not limited to a microprocessor or a processor coupled to a memory storing instructions that causes the processor to perform one or more designated operations. Further, the card 106 can include a communication interface 206 such as an antenna, a transceiver, and an NFC (Near Field Communication) module, but not limited to the like, to establish a connection with the terminal when the card 106 is inserted in a card 106 slot of the terminal or when brought in proximity to the terminal. In addition, the card 106 can include a data storage unit 210 to store the details and enrolled biometric template of the corresponding user 110, which may allow the card 106 to authenticate the user 110 every time the user 110 tries to access or use the card 106 at the terminals or online payment. Further, the card 106 can also include a battery (flexible battery) 208 to provide electrical power to the biometric sensor, the processing unit, and the communication interface, however, the card 106 can also receive electrical power from the terminal once connected to the terminal. The battery 208 can be a thin-film battery, a printed battery, or a micro-battery, but is not limited to the like. In an embodiment, the biometric sensor 202, the processing unit 204, the communication interface 206, the battery 208, and the storage unit 210 can be disposed of in a multilayer substrate that can be made of plastic and the like, such that the biometric sensor 202 remains accessible from outside to capture biometric details of the user 110. In an embodiment, the card 106 can be a payment card 106 that can allow the user 110 to make payment at the terminals or on online platforms 104 upon authentication of the user 110. In another embodiment, the card 106 can be a smart card 106 that can be used at automated gates of one or more locations selected from buses, railway stations, parking spaces, metro, ATMs, banks, offices, schools, and colleges, but not limited to the like, to enter or exit from the corresponding locations upon authentication of the user 110.

[0043] Referring to FIG. 3, the server 102 can include one or more processor(s) 302. The one or more processor(s) 302 can be implemented as one or more microprocessors, microcomputers, microcontrollers, edge or fog microcontrollers, digital signal processors, central processing units, logic circuitries, and / or any devices that process data based on operational instructions. Among other capabilities, the one or more processor(s) 302 can be configured to fetch and execute computer-readable instructions stored in a memory 304 of the server 102. The memory 304 can be configured to store one or more computer-readable instructions or routines in a non-transitory computer readable storage medium, which can be fetched and executed to create or share secured transaction messages over a network service.The memory 304 can comprise any non-transitory storage device including, for example, volatile memory such as Random Access Memory (RAM), or non-volatile memory such as Erasable Programmable Read-Only Memory (EPROM), flash memory, and the like.

[0044] The server 102 can include an interface(s) 306. The interface(s) (306) can comprise a variety of interfaces, for example, interfaces for data input and output devices, referred to as I / O devices, storage devices, and the like. The interface(s) 306 can facilitate communication to / from the server 102. The interface(s) 306 can also provide a communication pathway for one or more components of the server 102. Examples of such components include, but are not limited to, processing unit / engine(s) 308 and a database 310.

[0045] In an embodiment, the processing unit / engine(s) 308 can be implemented as a combination of hardware and programming (for example, programmable instructions) to implement one or more functionalities of the processing engine(s) 308. In examples described herein, such combinations of hardware and programming can be implemented in several different ways. For example, the programming for the processing engine(s) 308 can be processor-executable instructions stored on a non-transitory machine-readable storage medium and the hardware for the processing engine(s) 308 can comprise a processing resource (for example, one or more processors), to execute such instructions. In the present examples, the machine-readable storage medium can store instructions that, when executed by the processing resource, implement the processing engine(s) 308. In such examples, the server 102 can comprise the machine-readable storage medium storing the instructions and the processing resource to execute the instructions, or the machine-readable storage medium can be separate but accessible to the server 102 and the processing resource. In other examples, the processing engine(s) 308 can be implemented by electronic circuitry.

[0046] In an embodiment, the database 310 can comprise data that can be either stored or generated as a result of functionalities implemented by any of the components of the processor 302 or the processing engines 308. In an embodiment, the database 310 can be separate from the system 100.

[0047] In an exemplary embodiment, the processing engine 308 can include one or more engines selected from any of a biometric template unit 312, an authentication unit 314, and enrolment unit 316, a payment unit 318, and other units 320 can include but not limited to the testing unit, storage unit and the like. The processing engine 308 can further be dedicated to executing complex schematic processing but not limited to the like.

[0048] In an embodiment, the biometric template unit 312 can enable the server 102 to transmit one or more instructions or steps on the registered mobile device 108 of the user 110for providing a biometric template for the biometric enrolment, The biometric template unit 312 can further enable the server 102 to receive, from the card 106, the biometric details provided by the user 110 in response to the transmitted instructions or steps while completing the biometric template. In case of the cards 106 being payment cards, only a status or feedback of the enrolment process is received by the server 102 and the biometric template remains stored inside card 106. However, for other types of cards, the biometric template unit 312 can enable the server 102 to store the biometric template a database of the server 102.

[0049] In an embodiment, the authentication unit 314 can enable the server 102 to transmit any or a combination of a one-time password (OTP), and a unique password on the registered mobile device 108 of the user 110, before completion of the biometric enrolment. The server 102 can accordingly authenticate the user 110 upon receiving the same one-time password and / or the unique password from the user 110 via the registered mobile device 108. However, if the same one-time password and / or the unique password is not received by the server 102, the authentication unit 314 can cause the server 102 to close the enrolment process and alert the registered user 110. In an embodiment, any authentication method supported by the registered mobile device 108 can be used in combination or interchangeably with the OTPbased authentication mechanism, for example using the payment app, and the like.

[0050] In an embodiment, the enrolment unit 316 can enable the server 102 to receive the biometric details pertaining to the biometric template and accordingly validate and complete the biometric enrolment of the card 106 upon a positive authentication of the user 110 by the authentication unit 314. The enrolment unit 316 can further enable the server 102 to link the biometric template to the card 106 and store the biometric template in the card 106 and / or a database of the server 102 upon the validation of the biometric enrolment.

[0051] In an embodiment, the payment unit 318 can enable the server 102 to allow the user 110 of the card 106 to perform one or more payment transactions and / or non-payment transactions using the card 106 at any of the registered terminals 104 and / or on online payment platforms, after successful biometric enrolment of the user 110. The users 110 can authenticate themselves and make transactions at any of the terminals 104 using their biometric details by placing his / her finger on the biometric sensor of the card 106. The server 102 can accordingly match the biometric details provided at the time of transaction with the stored biometric template to authenticate the user 110 and further allow the users 110 to make the transaction.

[0052] Referring to FIG. 4, method 400 for enrolment of biometric-enabled cards 106 is disclosed. Method can include the server 102, the terminals 104, the biometric cards 106, the mobile devices 108, and other components associated with the system 100 of FIG. 1. Method400 can include step 402 of raising enrolment request by the user 110 at any of the registered terminals 104 upon operatively connecting the card 106 to the corresponding terminal 104 while placement of a finger on the biometric sensor 202 of the card 106 by the user 110. The enrolment request can be raised by the user 110 at the terminals 104 when the card 106 is inserted in a card slot of the terminal 104 or when brought in proximity to the terminal 104 while placing a finger on the biometric sensor by the user 110.

[0053] Method 400 can further include step 404 of establishing a secured communication channel between the card 106 and the server 102 upon initiation of the biometric enrolment request by the user 110 of the card 106 at the registered terminals 104. Further, once communication is established between the card 106 and the server 102 via the terminal 104, method 400 can include step 406 of transmitting by the server 102, on the mobile device 108 of the user 110, an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card 106 of the user 110. This may alert the registered owner in case his / her card 106 is used for enrolment without his / her knowledge or fraudulently.

[0054] Further, method 400 can include step 408 of transmitting by the server 102, on the registered mobile device 108 of the user 110, one or more instructions or steps for providing a biometric template for completing the biometric enrolment. Accordingly, at step 410 the user 110 can provide his / her biometric details by placing his / her finger on the biometric sensor of the card 106 in different orientations, in response to the given instructions or steps while completing the biometric template. The server 102 can accordingly receive the captured / provided biometric details from the card 106 via the terminal 104 at step 412 to complete the biometric template. In case of payment cards, only a status or feedback of the enrolment process is received by the server and the biometric template remains stored inside card. However, for other types of cards, the biometric template may be stored on the server.

[0055] Once the biometric template is completed and received by the server 102 at step 412, method 400 can include step 414 authenticating, by the server 102, the user 110 before final completion of the biometric enrolment. In an embodiment, at step 414, the server 102 can transmit any or a combination of a one-time password (OTP), and a unique password on the registered mobile device 108 of the user 110 to authenticate the user 110 before final completion of the biometric enrolment. The server 102 can allow the user 110 to transmit the same one-time password and / or the unique password via his / her registered mobile device 108 in order to authenticate the credibility of the user 110. However, if the same one-time password and / or the unique password is not received by the server 102, the server 102 can close the enrolment and alert the registered user 110.

[0056] Further, once the user 110 is authenticated by the server 102 upon receiving the same one-time password and / or the unique password from the user 110, method 400 can include step 416 of validating and completing the enrolment process. In an embodiment, at step 416, method 400 can include transmitting, by the server 102, an enrolment completion confirmation message on the registered mobile device 108 of the user 110 and further linking the biometric template to the card 106 and storing the biometric template in the card 106 and a database of the server 102 upon the validation of the biometric enrolment.

[0057] Thus, the present invention (system, method, and card) overcomes the drawbacks, shortcomings, and limitations associated with existing biometric card enrolment solutions, by providing an improved, secure, user-friendly solution for enabling enrolment of biometric cards.

[0058] If the specification states a component or feature “may”, “can”, “could”, or “might” be included or have a characteristic, that particular component or feature is not required to be included or have the characteristic.

[0059] As used in the description herein and throughout the claims that follow, the meaning of “a,” “an,” and “the” includes plural reference unless the context clearly dictates otherwise. Also, as used in the description herein, the meaning of “in” includes “in” and “on” unless the context clearly dictates otherwise.

[0060] Moreover, in interpreting the specification, all terms should be interpreted in the broadest possible manner consistent with the context. In particular, the terms “comprises” and “comprising” should be interpreted as referring to elements, components, or steps in a nonexclusive manner, indicating that the referenced elements, components, or steps may be present, or utilized, or combined with other elements, components, or steps that are not expressly referenced. Where the specification claims refer to at least one of something selected from the group consisting of A, B, C . . . .and N, the text should be interpreted as requiring only one element from the group, not A plus N, or B plus N, etc.

[0061] While the foregoing describes various embodiments of the invention, other and further embodiments of the invention may be devised without departing from the basic scope thereof. The scope of the invention is determined by the claims that follow. The invention is not limited to the described embodiments, versions or examples, which are comprised to enable a person having ordinary skill in the art to make and use the invention when combined with information and knowledge available to the person having ordinary skill in the art.ADVANTAGES OF THE INVENTION

[0062] The proposed invention overcomes the above drawbacks, shortcomings, and limitations associated with existing biometric cards and corresponding enrolment solutions.

[0063] The proposed invention enables biometric enrolment of biometric cards in a secure, efficient, and user-friendly manner.

[0064] The proposed invention provides an improved, secure, user-friendly system and method for enabling the enrolment of biometric cards.

[0065] The proposed invention provides a biometric-enabled card with a self-enrolment capability, which can be enrolled at any online terminal and ATM.

Claims

CLAIMSWe Claim:

1. A system (100) for enabling enrolment of one or more biometric enabled cards (106), the system (100) comprising: one or more cards (106) and one or more registered mobile devices (108) associated with one or more users (110), and a server (102) associated with an issuer (112) of the one or more cards (106), wherein the server (102) is in communication with one or more registered terminals (104); wherein each of the cards (106) is biometric-enabled and comprises: a biometric sensor (202); and a processing unit (204) operatively coupled to the biometric sensor (202), wherein the processing unit (204) is configured to: establish a secured communication channel between the card (106) and the server (102), upon initiation of a biometric enrolment request by the user (110) of the corresponding card (106) at any of the one or more registered terminals (104); and allow the biometric sensor (202) to capture the biometric details of the user (110) upon initiation of the biometric enrolment request; wherein the server (102) is configured to: transmit, on the registered mobile device (108) of the corresponding user (110), an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card (106) of the user (110); transmit, on the registered mobile device (108) of the user (110), one or more instructions or steps for providing a biometric template for the biometric enrolment; receive, from the card (106), the biometric details provided by the user (110) in response to the transmitted instructions or steps while completing the biometric template;authenticate the user (110) by communicating with the registered mobile device (108) of the user (110), after completion of the biometric template; and validate and complete the biometric enrolment of the card (106) upon positive authentication of the user (110).

2. The system (100) as claimed in claim 1, wherein the one or more cards (106) are selected from a group comprising a smart card (106), and a payment card (106).

3. The system (100) as claimed in claim 1, wherein the server (102) is configured to: transmit, on the registered mobile device (108) of the user (110), any or a combination of a one-time password (OTP), and a unique password upon completion of the biometric enrolment by the user (110); authenticate the user (110) upon receiving the same one-time password and / or the unique password from the user (110) via the registered mobile device (108); and transmit, on the registered mobile device (108) of the user (110), an enrolment completion confirmation message upon the positive authentication of the user (110).

4. The system (100) as claimed in claim 1, wherein the enrolment request is raised at the one or more registered terminals (104) upon operatively connecting the card (106) to the corresponding terminal (104) while placement of a finger on the biometric sensor (202) by the user (110).

5. The system (100) as claimed in claim 1, wherein the one or more registered terminals (104) are selected from a group comprising a Point-of-Sale (POS) terminal (104), an ATM, and a near-field communication (NFC) terminal (104).

6. A method (400) for enrolment of biometric-enabled cards (106), the method (400) comprising the steps of: establishing (404), by a biometric-enabled card (106), a secured communication channel between the card (106) and a server (102) associated with an issuer (112) of the card (106), upon initiation of a biometric enrolment request by a user (110) of the card (106) at one or more registered terminals (104); transmitting (406), by the server (102), on a registered mobile device (108) of the corresponding user (110), an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card (106) of the user (110); transmitting (408), by the server (102), on the registered mobile device (108) of the user (110), one or more instructions or steps for providing a biometric template for the biometric enrolment;allowing (410), by the card (106), the user (110) to provide biometric details in response to the transmitted instructions or steps while completing the biometric template; receiving (412), by the server (102), the biometric details provided by the user (110) in response to the transmitted instructions or steps; authenticating (414), by the server (102), the user (110) by communicating with the registered mobile device (108) of the user (110), after completion of the biometric template; and validating and completing (416), by the server (102), the biometric enrolment of the card (106) upon positive authentication of the user (110).

7. The method as claimed in claim 6, wherein the method comprises the steps of: transmitting, by the server (102), on the registered mobile device (108) of the user (110), any or a combination of a one-time password (OTP), and a unique password upon completion of the biometric enrolment by the user (110); authenticating, by the server (102), the user (110) upon receiving the same onetime password and / or the unique password from the user (110) via the registered mobile device (108); and transmitting, by the server (102), on the registered mobile device (108) of the user (110), an enrolment completion confirmation message upon the positive authentication of the user (110).

8. The method (400) as claimed in claim 6, wherein the enrolment request is raised at the one or more registered terminals (104) upon operatively connecting the card (106) to the corresponding terminal (104) while placement of a finger on the biometric sensor (202) by the user (110).

9. A biometric card (106) comprising: a biometric sensor (202); and a processing unit (204) operatively coupled to the biometric sensor (202), wherein the processing unit (204) is configured to: establish a secured communication channel between the card (106) and a server (102) associated with an issuer (112) of the card (106), upon initiation of a biometric enrolment request by the user (110) at one or more registered terminals (104); and allow capturing of the biometric details of the user (110) upon initiation of the biometric enrolment request;wherein the server (102) of the issuer (112) is configured to: transmit, on a registered mobile device (108) of the user (110), an acknowledgment message or an alert pertaining to the biometric enrolment request being raised using the card (106) of the user (110); transmit, on the registered mobile device (108) of the user (110), one or more instructions or steps for providing a biometric template for the biometric enrolment; receive, from the card (106), the biometric details provided by the user (110) in response to the transmitted instructions and steps while completing the biometric template; authenticate the user (110), by communicating with the registered mobile device (108) of the user (110), after completion of the biometric template; and validate and complete the biometric enrolment of the card (106) upon a positive authentication of the user (110).

10. The biometric card (106) as claimed in claim 9, wherein the card (106) is selected from a group comprising a smart card (106), and a payment card (106), and wherein the one or more registered terminals (104) are selected from a group comprising a Point-of-Sale (POS) terminal (104), an ATM, a near field communication (NFC) terminal (104).

Images