Biometric payment systems and methods of using biometric verification

Abstract

Provided herein are systems and methods of facilitating a biometric-based transaction using a biometric platform. The systems and methods can include: receiving biometric information from a consumer; transmitting the biometric information to a biometric orchestration platform; routing, via the biometric orchestration platform, the biometric information to one or more biometric vaults; receiving, from the one or more biometric vaults, a biometric identification of the consumer; and returning the requested information and / or the necessary payment information (e.g., payment credentials, payment tokens, etc.) for the biometric-based transaction.

Description

PATENT APPLICATIONAtorney Docket No.: VFI-4048-WOBIOMETRIC PAYMENT SYSTEMS AND METHODS OF USING BIOMETRIC VERIFICATIONCross-Reference to Related Applications

[0001] This application claims the benefit of and priority to U.S. Provisional Patent Application Serial No. 63 / 699,323, filed on September 26, 2024, U.S. Provisional Patent Application Serial No. 63 / 743,229, filed on January 8, 2025, and U.S. Provisional Patent Application Serial No. 63 / 744,194, filed on January 11, 2025, which are titled “METHODS AND SYSTEMS FOR CONTACTLESS TRANSACTIONS USING BIOMETIRC INFORMATION”, the entire disclosures of which are incorporated herein by reference. This application also claims the benefit of and priority to U.S. Provisional Patent Application Serial No. 63 / 762,604, filed on February 24, 2025 and titled “BIOMETRIC PAYMENT SYSTEMS, BIOMETRIC VERIFICATION INFRASTRUCTURE FOR PAYMENT SYSTEMS, AND METHODS OF ENABLING BIOMETRIC PAYMENTS”, the entire disclosure of which is incorporated herein by reference.Field of the Disclosure

[0002] The present disclosure relates generally to systems and methods for identification, authenticating, and verifying individuals using the individuals' biometric information, and more specifically to biometric systems, infrastructure, and methods for facilitating biometricbased transactions.Background

[0003] Traditional payment transactions utilizing a credit card or debit card typically require entering payment information such as the card number into a merchant’s point of sale (POS) terminal. The POS terminal connects to a payment network to transmit the obtained information and validate and approve the payment transaction. For payment transactions using a debit card, the user enters a personal identification number (PIN) to verify themselves as the cardholder and to authorize the transaction. This is used as evidence that the cardholder is present with the payment card at the time of purchase, creating a “card present” (CP) payment transaction.

[0004] Similarly, with some contactless payments, the user may only “tap” or otherwise present a payment card using near-field communication (NFC) to a POS to verify that thePATENT APPLICATIONAttorney Docket No.: VFI-4048-WO cardholder is present with the payment card at the time of purchase. Thus, this is also a CP payment transaction even though it is nearly or completely contactless.

[0005] In contrast, with other contactless payments, there is no payment card presented and thus it is a card-not-present (CNP) transaction. This lack of the payment card presents an opportunity for fraud, and as a result the merchant pays significantly higher transaction fees for CNP transactions than for CP transactions. For a merchant with many transactions, this can result in significantly higher costs.

[0006] Biometric verification of a cardholder for contactless transactions is one method to prevent fraud with what is essentially a CNP transaction. Since the biometric information is utilized to verify the user as the cardholder (even though the card is not physically presented), the transaction effectively becomes a CP transaction rather than a CNP transaction, and the merchant has lower transaction fees and less liability for the transaction. Thus, utilizing biometric authentication of a user for a contactless transaction can represent a significant financial benefit for the merchant. However, existing methods and systems for the biometric authentication of a user for a contactless transaction remain inefficient and potentially present security issues.Summary of the Disclosure

[0007] As described herein, traditional payment systems and payment transactions, especially card-not-present (CNP) transactions, are susceptible to fraud. Without the physical presence of the card, it becomes easier for unauthorized users to commit fraud, leading to higher transactions costs and increased liability for merchants. While biometric verification can help reduce fraud by effectively returning a CNP transaction into a CP transaction, existing methods and systems for biometric authentication can be inefficient and present significant security issues. In addition to maintaining compliance regulations of major national and international organizations, there are added concerns about consumer privacy and security when dealing with biometric information. As such, integrating new payment technologies, like biometric authentication, with existing financial transaction infrastructure is a complex process, and ensuring compatibility, robust security, and seamless operation with current payment systems requires overcome a number of technical hurdles that would be recognized in light of the present disclosure.

[0008] According to one embodiment of the present disclosure, a method of authenticating a customer for a biometric payment transaction is provided. The method involves: (i) receiving,PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO at a payment terminal, a request for a biometric payment transaction; (ii) obtaining, by a biometric device, biometric information of the customer; (iii) communicating, from the biometric device, a secured information package to a biometric orchestration system, wherein the secured information package comprises at least the biometric information of the customer obtained by the biometric device; (iv) performing, by at least the biometric orchestration system, a biometric identification protocol using the biometric information of the customer contained in the secured information package, wherein the biometric identification protocol returns a positive biometric identification indicating that a match for the biometric information of the customer was found; (v) generating a positive identification data packet in response to returning the positive biometric identification, wherein the positive identification data packet comprises at least a payment card token associated with an authorized payment method of the customer; and (vi) communicating, from the biometric orchestration system and to the biometric device, the positive identification data packet comprising the payment card token associated with the authorized payment method of the customer.

[0009] In one aspect, performing the biometric identification protocol using the biometric information of the customer includes: (i) determining, at the biometric orchestration system, biometric routing information for the biometric information of the customer, wherein the biometric routing information indicates a target biometric identification system to use to generate a biometric identification for the customer; (ii) communicating, to the target biometric identification system, at least the biometric information of the customer obtained by the biometric device, wherein the target biometric identification system is configured to determine whether a match for the biometric information of the customer exists within a target biometric vault; and (iii) receiving, from the target biometric identification system, at least the positive biometric identification.

[0010] In one aspect, the method involves retrieving, from a digital wallet of the customer, the payment card token associated with the authorized payment method of the customer.

[0011] In one aspect, the payment card token is retrieved by the biometric orchestration system in response to receiving the positive biometric identification from the target biometric identification system.

[0012] In one aspect, the payment card token is retrieved by the target biometric identification system in response to returning the positive biometric identification from the target biometric identification system.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0013] In one aspect, the method involves encoding, using the biometric device, a first set of one or more biometric parameters from the biometric information of the customer into a first biometric data structure having a first predetermined format. The secured information package can then include the first biometric data structure.

[0014] In one aspect, the first predetermined format is defined by the biometric orchestration system.

[0015] In one aspect, the biometric orchestration system comprises a biometric registry storing a plurality of encoded biometric data structures and corresponding biometric routing information for a plurality of customers, wherein each encoded biometric data structure of the plurality of encoded biometric data structures also has the first predetermined format. The biometric routing information for the customer may then be determined by searching the plurality of encoded biometric data structures stored in the biometric registry and returning the biometric routing information corresponding to the encoded biometric data structure matching the first biometric data structure.

[0016] In one aspect, the method involves encoding, using the biometric device, a consumer platform identifier and / or a biometric vault identifier into the first biometric data structure. The biometric routing information for the customer may then be determined by extracting the consumer platform identifier and / or the biometric vault identifier from the first biometric data structure.

[0017] In one aspect, the method involves encoding, using the biometric device, a second set of one or more biometric parameters from the biometric information of the customer into a second biometric data structure having a second predetermined format, the second predetermined format being different than the first predetermined format. The secured information package may then comprise the second biometric data structure.

[0018] In one aspect, the biometric information of the customer comprises a fingerprint, palm print, palm vein geometry, retina or iris scan, vein pattern, facial geometry, voice pattern, and / or speech data.

[0019] In one aspect, the secured information package further includes non-biometric information, the non-biometric information comprising at least one of transaction information and / or merchant information associated with the biometric payment transaction.

[0020] In one aspect, the payment card token is generated prior to receiving the request for the biometric payment transaction at the payment terminal.

[0021] In one aspect, the payment card token is generated by a payment card network.PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO

[0022] In one aspect, the payment card token is uniquely generated in connection with a digital wallet of the customer.

[0023] In one aspect, the payment card token is uniquely generated in connection with the biometric orchestration system.

[0024] In one aspect, the payment card token comprises a token value, a token type, a token domain, a token expiration, token metadata, cryptographic elements, and / or a mapping reference.

[0025] In one aspect, the method involves: (i) retrieving, from the target biometric vault, customer engagement information associated with the individual in response to returning the positive biometric identification, wherein the positive identification data packet generated further comprises the customer engagement information retrieved; (ii) communicating, from the biometric device to the payment terminal, at least a portion of the customer engagement information contained within the positive identification data packet; and (iii) providing, via a user interface device or a display of the payment terminal, a user interface tailored to the customer based on the customer engagement information.

[0026] In one aspect, the customer engagement information comprises information related to an incentives program, a loyalty program, a rewards program, and / or a membership that the customer participates in.

[0027] According to another embodiment of the present disclosure, a method of performing a biometric payment transaction is provided. This method involves: (i) authenticating a customer for the biometric payment transaction as described herein; (ii) generating a transaction payload for the biometric payment transaction, wherein the transaction payload comprises the payment card token contained in the positive identification data packet; and (iii) transmitting, from the payment terminal, the transaction payload including the payment card token to a payment processor as part of a payment request for the biometric payment transaction.

[0028] In one aspect, the transaction payload further comprises non-biometric information, the non-biometric information comprising at least transaction information and merchant information associated with the biometric payment transaction.

[0029] In one aspect, the transaction information includes a transaction amount, a description of the goods and services, and / or a date and time; and the merchant information includes a merchant identifier and / or a description of the merchant.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0030] In one aspect, the method involves transmitting, from the biometric device and to the payment terminal, at least the payment card token contained in the positive identification data packet.

[0031] In one aspect, the transaction payload is generated by the payment terminal.

[0032] In one aspect, the transaction payload is generated by the biometric device, and the payment card token is transmitted to the payment terminal as part of the transaction payload.

[0033] In one aspect, the method involves receiving, from the payment processor, a payment status code generated based on the payment request for the biometric payment transaction, wherein the payment status code indicates whether the payment request for the biometric payment transaction was approved or denied.

[0034] According to yet another embodiment of the present disclosure, another method of performing a biometric payment transaction is provided. This method involves: (i) receiving, at a payment terminal, transaction information for the biometric payment transaction, the transaction information including an initial transaction amount and optionally a description of the goods and services and / or a transaction date and time; (ii) authenticating a customer for the biometric payment transaction as described herein; (iii) modifying, at the payment terminal, the transaction information of the biometric payment transaction based on the customer engagement information received to generate modified transaction information; (iv) generating a transaction payload for the biometric payment transaction, wherein the transaction payload comprises the payment card token contained in the positive identification data packet and the modified transaction information; and (v) transmitting, from the payment terminal, the transaction payload to a payment processor as part of a payment request for the biometric payment transaction.

[0035] According to still another embodiment of the present disclosure, a payment terminal adapted to facilitate biometric payment transactions is provided. The payment terminal may include: (i) a user interface configured to receive requests to perform a biometric payment transaction from customers; (ii) a communication interface configured to enable communication with an associated biometric device and one or more payment processors; (iii) one or more processors; and (iv) a non-transitory computer-readable storage medium storing instructions. When these instructions are executed by the one or more processors, they cause the payment terminal to perform a biometric payment transaction process including: (a) receiving, via the user interface, a request from a customer to perform a biometric payment transaction; (b) transmitting a request for the biometric payment transaction to the associatedPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO biometric device, wherein the associated biometric device is configured to capture biometric information of the customer; (c) receiving, from the biometric device, a positive biometric identification indicating that a match for the biometric information of the customer was found; (d) receiving, from the biometric device, a payment card token associated with an authorized payment method of the customer; and (e) transmitting, using the communication interface, a transaction payload for the biometric payment transaction to a payment processor, wherein the transaction payload includes at least the payment card token.

[0036] In one aspect, the transaction payload further comprises non-biometric information, the non-biometric information comprising at least transaction information and merchant information associated with the biometric payment transaction.

[0037] In one aspect, performing the biometric payment transaction process further includes: (i) receiving the non -biometric information associated with the biometric payment transaction; and (ii) generating the transaction payload.

[0038] In one aspect, performing the biometric payment transaction process further includes: (i) receiving the non -biometric information associated with the biometric payment transaction; (ii) transmitting, to the biometric device, the non-biometric information associated with the biometric payment transaction; and (iii) receiving, from the biometric device, the transaction payload via the communication interface, wherein the positive biometric identification and the payment card token are received from the biometric device as part of the transaction payload.

[0039] In one aspect, the transaction payload is received by the communication interface of the payment terminal as a wireless, contactless communication from the biometric device.

[0040] In one aspect, the payment terminal may further include the associated biometric device.

[0041] In one aspect, the payment terminal is part of a point-of-interaction device.

[0042] In one aspect, the non-transitory computer-readable storage medium may store instructions that, when executed by the one or more processors, further cause the payment terminal to: (i) receive transaction information for the biometric payment transaction, the transaction information including an initial transaction amount and optionally a description of the goods and services and / or a transaction date and time; (ii) receiving customer engagement information retrieved for the customer, wherein the customer engagement information comprises information related to incentives program, a loyalty program, a rewards program, and / or a membership that the customer participates in; and (iii) modifying, at the paymentPATENT APPLICATIONAttorney Docket No.: VFI-4048-WO terminal, the transaction information of the biometric payment transaction based on the customer engagement information received to generate modified transaction information. The transaction payload transmitted to the payment processor may then further include the modified transaction information.

[0043] These and other aspects of the various embodiments will be apparent from and elucidated with reference to the embodiments described hereinafter.Brief Description of the Drawings

[0044] In the drawings, like reference characters generally refer to the same parts throughout the different views. The figures showing features and ways of implementing various embodiments and are not to be construed as being limiting to other possible embodiments falling within the scope of the attached claims. Also, the drawings are not necessarily to scale, emphasis instead generally being placed upon illustrating the principles of the various embodiments.

[0045] FIG. l is a schematic of a biometric transaction system deployed at a merchant site showing POI and biometric module integration illustrated in accordance with aspects of the present disclosure.

[0046] FIG. 2 is a layered architecture of the biometric transaction ecosystem including merchant, orchestration, vault, and consumer platform domains illustrated in accordance with aspects of the present disclosure.

[0047] FIG. 3 is a system diagram showing the interaction between user devices, biometric routing, verification services, and POI devices illustrated in accordance with aspects of the present disclosure.

[0048] FIG. 4A is a schematic diagram of the enrollment process for a consumer into a biometric verification service illustrated in accordance with aspects of the present disclosure.

[0049] FIG. 4B is a flow diagram illustrating the steps of biometric vector generation and storage during consumer enrollment illustrated in accordance with aspects of the present disclosure.

[0050] FIG. 5 is a method diagram showing steps for completing a biometric card-present payment transaction illustrated in accordance with aspects of the present disclosure.

[0051] FIG. 6 is a process flow diagram for a biometric card-present transaction using a biometric module and orchestration platform illustrated in accordance with aspects of the present disclosure.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0052] FIG. 7 is a process flow diagram for a biometric card-not-present transaction using stored payment credentials illustrated in accordance with aspects of the present disclosure.

[0053] FIG. 8 is a process diagram for retrieving and applying loyalty information using biometric authentication illustrated in accordance with aspects of the present disclosure.

[0054] FIG. 9 is a process diagram for verifying a consumer’s age using biometric authentication illustrated in accordance with aspects of the present disclosure.

[0055] FIG. 10 is a flowchart for a biometric check-in process at a point-of-interaction device illustrated in accordance with aspects of the present disclosure.

[0056] FIG. 11 is a diagram of a point-of-interaction device shown in accordance with certain aspects of the present disclosure.

[0057] FIG. 12 is a diagram of a point-of-interaction device showing internal components and interfaces illustrated in accordance with aspects of the present disclosure.

[0058] FIG. 13 is a diagram of a biometric module including processor, memory, sensors, and communication interfaces illustrated in accordance with aspects of the present disclosure.

[0059] FIG. 14 is a representation of a POS terminal and biometric module showing hardware and software components illustrated in accordance with aspects of the present disclosure.

[0060] FIG. 15 is a schematic of a cloud-based biometric verification platform with processing and storage components illustrated in accordance with aspects of the present disclosure.

[0061] FIG. 16 is a flow diagram of a biometric user interface application for transaction processing illustrated in accordance with aspects of the present disclosure.

[0062] FIG. 17A-17N are screenshots and interface flows for a biometric user interface application, from check-in to receipt, illustrated in accordance with aspects of the present disclosure.

[0063] FIG. 18 is a second biometric user interface application flow for completing a transaction illustrated in accordance with aspects of the present disclosure.

[0064] FIG. 19A-19L are screenshots and interface flows for a second biometric UI, including scanning, exceptions, and payment confirmation illustrated in accordance with aspects of the present disclosure.

[0065] FIG. 20 is a method diagram summarizing the steps for authenticating a user and completing a biometric transaction illustrated in accordance with aspects of the present disclosure.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WODetailed Description of Embodiments

[0066] Provided herein are systems and methods for authenticating a user for payment transaction purposes. More specifically, provided herein are biometric authentication systems and processes for completing payment transactions and customizing merchant-consumer interactions using consumer biometric information. In particular aspects of the present disclosure, consumers may self-register or enroll in a biometric authentication service that stores consumer biometric information in a secure, biometric information data storage system. Then, when a participating consumer engages with a merchant, a biometric-enabled point-of- interaction (POI) device can securely obtain and communicate consumer biometric information to the biometric authentication service for consumer identification and authentication. In embodiments, the biometric transaction systems and platforms enable payment transactions using only biometric information (i.e., without the need for presenting a physical payment card or otherwise providing payment card information through, e.g., a digital wallet). These biometric transaction systems and platforms also enable merchants to customize their offerings and tailor merchant-consumer interactions using biometric information of participating consumers.

[0067] It will be appreciated by those of ordinary skill in the art that the payment technology sector is strictly regulated by a number of different national and international organizations, which mandate robust data security and consumer protection protocols. Key frameworks like the Payment Card Industry Data Security Standard (PCI DSS 4.0) and Europe’s Revised Payment Services Directive (PSD2) require the use of encryption and anonymization protocols to protect cardholder data and require multi-factor authentication (MFA) for certain applications. It is also anticipated that these cybersecurity and data privacy standards will continue to evolve as new technologies and exploits are developed. Accordingly, in various respects, the biometric transaction systems, platforms, and processes described herein provide many advantages over conventional biometric-based authentication methods and systems, which may not be secure enough or otherwise suitable for integration with existing financial transaction infrastructure based on current and future cybersecurity and data privacy standards.

[0068] According to further aspects, the biometric transaction systems, platforms, and processes described herein also provide a number of improvements to payment processing technologies, including providing more options for consumers to choose how to complete payment transactions, allowing merchants and consumers greater ability to customize and tailor offerings and merchant-consumer interactions, and eliminating the need for consumers to carryPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO and provide physical cards (e.g., payment cards as well as loyalty / rewards cards, etc.), among other advantages. As described herein, such advantages can be provided in a user-friendly and merchant-friendly manner. For example, the benefits of the biometric transaction technologies of the present disclosure may extend the functionality of existing POI devices and use existing payment rails available to merchants while still ensuring appropriate data security and privacy protections.

[0069] Turning now to FIG. 1, an exemplary biometric transaction system 100 is illustrated in accordance with certain aspects of the present disclosure. In embodiments, at least a portion of the biometric transaction system 100 may be deployed at a merchant site, including but not limited to, retail stores, convenience stores, restaurants and bars, hotels, pharmacies, entertainment venues, markets and fairs, and / or the like.

[0070] As shown, the biometric transaction system 100 can include certain on-premises (i.e., “on-prem”) hardware 110, such as a point-of-interaction (“POI”) device 120 and a biometric module 130. In embodiments, the POI device 120 can be a point-of-sale (“POS”) device, a payment terminal, a tablet or smartphone being used as a POS device, a self-service kiosk, a digital directory or wayfinding kiosk, a self-service checkout station, an interactive display, and / or the like. In some embodiments, the POI device 120 may comprise the biometric module 130, i.e., the biometric module 130 is integrated with the POI device 120. In other embodiments, the POI device 120 and the biometric module 130 may be separate devices that are merely in secure communication with one another. In still further embodiments, the biometric module 130 may be attached to and in communication with the POI device 120, but not fully integrated into the POI device 120.

[0071] According to some aspects of the present disclosure, the POI device 120 may be utilized by merchants and consumers to complete payment transactions in exchange for goods and / or services. In some embodiments, these payment transactions may involve handling payment card information provided by payment cards physically present at the point-of-sale, i.e., in a card-present (“CP”) transaction. In other embodiments, these payment transactions may involve handling payment card information provided by payment cards not physically present at the point-of-sale, i.e., in a card-not-present (“CNP”) transaction.

[0072] However, as described herein, biometric module 130 and the POI device 120 may operate together in order to perform payment transactions using biometric information provided by the consumer at the point-of-sale. In particular embodiments, such paymentPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO transactions may be contactless biometric transactions, CP biometric-initiated transactions, and / or the like.

[0073] In embodiments, the POI device 120 can receive a request for a biometric-initiated transaction, e.g., from a consumer. Traditionally, the consumer would be required to present a payment card to the merchant (via the POI device 120) to initiate the financial transaction. However, as described herein, the consumer is able to provide biometric information and thus a payment card is not required to be physically present. In particular embodiments, the consumer may request a biometric-initiated payment transaction by selecting a corresponding menu option provided using the POI device 120, which triggers the POI device 120 initiate a biometric verification protocol using the biometric module 130. However, it is also possible for the merchant to trigger the biometric verification protocol upon request by the consumer, e.g., the consumer may verbally request a biometric-initiated payment transaction and the merchant may operate the POI device 120 to effectuate the biometric verification protocol. In any case, executing the biometric verification protocols of the biometric module 130 allow the merchant to ultimately process the transaction via a payment processor, e.g., payment processor 160.

[0074] In embodiments, the biometric module 130 is configured to obtain biometric information of a consumer, who typically must be in proximity to the biometric device 130 in order to provide the biometric information. As mentioned above, the biometric module 130 may be a component of the POI device 120 or may be separate or remote from the POI device 120 but otherwise in communication with the POI device 120. Thus, the biometric device 130 may be triggered or initiated to obtain biometric information of a consumer upon receiving a request or command from the POI device 120. In response to the command or request for biometric authentication of a consumer from the POI device 120, the biometric module 130 can execute a preprogrammed or predetermined biometric authentication protocol (described in more detail below) that includes obtaining biometric information from the consumer.

[0075] The biometric information obtained by the biometric module 130 may be any measurable biological / physical and / or behavioral characteristic, or combination of such characteristics, that can be used to reliably identify an individual. For example, the biometric information can include biological / physical characteristics such as a fingerprint, palm print, palm vein geometry, retina or iris scan, vein patern, facial geometry or characteristics, voice pattern, or other biological / physical characteristic, including combinations thereof. As anotherPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO example, the biometric information include behavioral characteristics such as a habit or pattern that identifies a user. Other biometrics are possible.

[0076] More specifically, in certain embodiments, the biometric module 130 comprises or is otherwise in communication with one or more sensors that obtain the biometric information, including but not limited to, a camera that uses visible light or other wavelengths of light to obtain a scan of a consumer’ s face, a fingerprint or palm scanner that obtains a scan of the consumer’s fingerprint or palm print, an audio sensor that obtains voice / speech data from the consumer, and / or the like. Other devices and sensors configured to obtain biometric information are possible.

[0077] Once obtained, the biometric information may be utilized immediately to perform the biometric authentication, and / or the biometric information may be stored in short-term or long-term memory for future use (e.g., training purposes, quality control purposes, or other authorized uses).

[0078] In embodiments, the biometric device 130 can transmit at least the biometric information to a remote biometric verification service 150, including the biometric orchestration system 221, 320 via a communications network 140 for the purpose of verifying or authenticating a consumer’s identity. In some embodiments, additional information such as transaction information (e.g., transaction amount, description of the goods and services, date and time, etc.), merchant information (e.g., merchant identifier, description of the merchant, etc.), or other information as necessary. In particular embodiments, the information transmitted to the biometric verification service 150 from a biometric device (e.g., the biometric module 130) does not include payment card information. Nevertheless, the transmitted information may be encrypted, signed, or otherwise secured or packaged before it is communicated to the biometric verification service 150. As described herein, this information transmitted to the biometric orchestration system 221, 320 from the biometric device 130 may be referred to as a secured information package.

[0079] In embodiments, the communications network 140 can include one or more interconnected networks, including one or more wired and / or wireless networks. For example, the communications network 140 may include a Bluetooth network, a Zigbee network, a WiFi network, a cellular network, a satellite network, an infrared network, an optical network, a near field communication network, and / or the like, including combinations thereof. In particular embodiments, the communications network 140 may include a personal area networkPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO(PAN), a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a global area network (GAN), and / or the like, including combinations thereof.

[0080] Accordingly, as described in more detail below, the biometric module 130 comprises a communications network interface that enables communication with other components of the system 100 as well as the biometric verification service 150.

[0081] In embodiments, the biometric verification service 150 may be configured to or otherwise capable of utilizing the obtained biometric information to authenticate or verify the identity of a participating consumer. The biometric verification service 150, also referred to herein as a biometric verification platform, can comprise or otherwise be in communication with one or more databases of participating consumers. These databases may part of or otherwise referred to herein as biometric vaults. The biometric vaults may store biometric information for individuals enrolled in the biometric payment ecosystem described herein, which may be collected and managed through one or more consumer platforms (e.g., card issuer / networks, fintech / wallets / social, merchant / acquirers, etc.) as described in more detail below. In other words, the biometric vaults can store verified biometric information associated with verified users, as well as other identifying information such as their name, age, date of birth, address, and / or other information.

[0082] As described herein, the biometric vaults and the biometric orchestration system 150 can be specially adapted for storing, processing, and communicating biometric information. For example, the biometric orchestration system 150 and the biometric vaults may utilize specialized data structures, encryption schemes, access and / or search functions, and validation procedures, given the nature and sensitivity of the biometric information being handled.

[0083] Importantly, according to some embodiments of the present disclosure, the biometric vaults may also store payment information provided by participating consumers, such as primary account numbers, customer engagement information, payment card tokens issued by a token service provider, and / or the like. As described herein, customer engagement information refers to information (generally provided or supplied by the customer) that allows merchants to provide experiences tailored to the particular customer, such as by providing customize user interfaces or automatically interacting with various incentive programs. In particular examples, the customer engagement information may include information related to an incentives program, a loyalty program, a rewards program, and / or a membership that the customer participates in, and / or similar services. Thus, in embodiments, the biometric vaults may also utilize specialized data structures, encryption schemes, access and / or searchPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO functions, and validation procedures, given the nature and sensitivity of the payment information being handled.

[0084] In any case, when the biometric orchestration system 150 receives a biometric identification request from, e.g., a biometric module 130, the biometric orchestration system 150 interoperates with the biometric vaults to perform a biometric identification protocol to verify the identity of a customer. In embodiments, the result of the biometric verification can be a biometric identification, which may be a positive biometric identification (i.e., the consumer is positively identified based on the biometric information obtained) or a negative biometric identification (i.e., the consumer is not able to be identified based on the biometric information obtained).

[0085] In particular embodiments, a negative biometric identification may occur when the biometric information obtained by the biometric module 130 is of insufficient quality to allow for a match. In further embodiments, a tentative biometric identification may occur when the search identifies a potential match, but the potential match is not of sufficient quality or above a predetermined threshold to definitively identify the user. In such embodiments, the biometric orchestration system 150 may return an indication that no match was found, or may issue a request to the biometric module 130 for new or updated biometric information.

[0086] In embodiments, when the biometric identification is positive, i.e., the biometric verification returns a match of sufficient quality or above a predetermined threshold to definitively identify a participating consumer, the biometric orchestration system 150 can create and send a positive identification data packet to the biometric module 130 via the communications network 140. In embodiments, the positive identification data packet can include relevant or necessary information for completing a merchant-consumer transaction, identifying loyalty or rewards programs, tailoring a merchant-consumer experience, and / or the like. For example, in particular embodiments, the positive identification data packet comprises at least a payment card token associated with a payment method authorized by the participating consumer.

[0087] According to particular aspects of the present disclosure, the payment card token may be a randomly generated or algorithmically derived digital identifier that that replaces sensitive payment card information like a consumer’ s primary account number (“PAN”) during a transaction. In embodiments, a payment card token may be generated when a consumer enrolls in the biometric verification ecosystem described herein. The payment card token is generally created and issued by a token service provider, i.e., a payment network such as Visa,PATENT APPLICATIONAtorney Docket No.: VFI-4048-WOMastercard, American Express, etc. In some embodiments, the payment card token may be uniquely generated in connection with a certain consumer platform, such as a ApplePay, Google Pay, PayPal, another digital wallet provider, and / or the like. In further embodiments, the payment card token may be uniquely generated in connection with the biometric orchestration system 150, i.e., the payment card token is domain restricted and only valid for biometrically-verified transactions.

[0088] As described herein, the payment card token may include, for example, a token value, a token type, a token domain, a token expiration, token metadata, cryptographic elements, a mapping reference, and / or the like. The payment card token may be characterized as shown in Table 1 below:TABLE 1. CARD TOKEN PROPERTIESToken Value • Randomly generated or algorithmically derived string that replaces the consumer’s PAN• May preserve the formatting of the consumer’s PAN (e.g., a 16-digit string)Token Type • Indicates the use case for the token (e.g., device-specific, merchant-specific, single-use, multi-use, etc.)Token Domain • Indicates the scope in which the token is valid (e.g., for a specific merchant, device, etc.)Token Expiration • A timestamp or date indicating when the token becomes invalidToken Metadata • Indicates additional relevant information, such as a particular device, who requested the token (i.e., a particular consumer platform like ApplePay, PayPal, Google Pay, etc.), and / or the likeCryptographic Elements • May be a cryptogram used to secure the token, or a pointer to specific encryption keys used for token generation and validation, and / or the likeMapping Reference • A reference used by the payment network to link the token to the consumer’s PAN

[0089] According to certain aspects of the present disclosure, the information transmitted between the biometric orchestration system 150 and the biometric module 130 may be validated and secured for cybersecurity and data privacy purposes. For example, the information sent to the biometric orchestration system 150 may be encrypted by the biometric module 130 before being sent, and the biometric orchestration system 150 may store orPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO otherwise have access to the encryption keys necessary to decrypt or otherwise access all or part of the encrypted data. Similarly, the positive identification data packet sent to the biometric module 130 from the biometric orchestration system 150 can be encrypted at the biometric orchestration system 150 before being sent, and the biometric module 130 may store or otherwise have access to the encryption keys necessary to decrypt or otherwise access all or part of the encrypted data.

[0090] After a positive biometric identification is made and a positive identification data packet is returned to the biometric module 130, the biometric module 130 may then create and communicate a transaction payload to the POI device 120. In embodiments, the transaction payload can include at least the network token obtained from the biometric orchestration system 150. In further embodiments, the transaction payload may include additional information such as transaction information (e.g., transaction amount, description of the goods and services, date and time, etc.), merchant information (e.g., merchant identifier, description of the merchant, etc.), or other information as necessary. In certain embodiments, one or more parts of the transaction information may be modified based on customer engagement information associated with the customer and the transaction. For example, the customer engagement information may include a loyalty discount or incentive that reduces the initial transaction amount, and thus the transaction payload will include the modified transaction information, e.g., the reduced transaction amount.

[0091] In particular embodiments, the biometric module 130 and the POI device 120 may interoperate to create the transaction payload. That is, according to some embodiments, the biometric module 130 may share some or all of the information contained in the positive identification data packet with the POI device 120, which then creates the transaction payload instead of the biometric module 130.

[0092] In some additional embodiments, the transaction payload may also include a unique identifier used to secure the transaction. As described herein, the unique identifier is a nonce, i.e., a unique, random or algorithmically derived number that serves as a secure payment code or number that expires after a short period of time (e.g., within minutes). The nonce can be used when transmitting a payment request to the acquirer / payment processor 160. In embodiments, the unique identifier may be a 16-digit nonce, and / or a 16 byte string of 16 digits (if encoded using ASCII or UTF-8). However, other formats and encodings are possible.

[0093] According to some embodiments, the payment or POS terminal 120, 360 generates the transaction nonce and communicates it to the biometric module 130, 350. Alternatively, thePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO biometric module 130, 350 can generate the transaction nonce and communicate it to the payment or POS terminal 120, 360.

[0094] In either case, the transaction nonce may be created automatically such as when a user initiates a biometric transaction via the payment or POS terminal 360, 380. Alternatively, the transaction nonce may be created once the user is verified by the biometric verification service (as confirmed by receipt of the information communicated from the biometric verification service to the biometric module 130, 350, for example). Other timeframes or steps for generation of the transaction nonce are possible. Specific methods for generating and utilizing nonces are known in the art.

[0095] Once the transaction payload is created, the POI device 120 can transmit the transaction payload to a payment processor 160 (sometimes referred to herein as an acquirer or a merchant acquirer) via a communications network 140 as part of a payment request. In embodiments, the transaction payload may be signed, encrypted, and / or otherwise secured by the POI device 120 before being sent to the payment processor 160. The payment processor 160 then processes the payment request, coordinating with the appropriate card network and the card issuer (e.g., the cardholder’s bank) for approval based on the information in the transaction payload. In some embodiments, the POI device 120 may utilize a payment gateway to facilitate the online transaction and authorize the payment transfer after ensuring that user funds are available. The payment gateway may include an existing gateway like Stripe, PayPal, Adyen, PayU, and / or the like.

[0096] If approved, the payment processor 160 may settle the appropriate funds into a merchant account and return a payment success status code to the POI device 120. Otherwise, if the payment request is denied, the payment processor 160 will not settle any funds and return a payment unsuccessful status code to the POI device 120. It will be appreciated that the payment request may be denied for a variety of reasons, though typically it will be due to financial reasons (e.g., insufficient funds, overlimit transaction, etc.) or security reasons (e.g., fraud detection, suspicious transactions, etc.), rather than due to identification of the user given the methods and systems described or otherwise envisioned herein.

[0097] Upon receiving the successful / unsuccessful status code, the POI device 120 can convey an appropriate message to the merchant and consumer, e.g., by displaying a corresponding message on a display screen, creating a physical or digital receipt, and / or the like.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0098] Thus, as described, various aspects of a biometric transaction ecosystem are provided by the present disclosure. Additional details, features, and components of the biometric transaction ecosystem are described below. Further, various aspects of biometric transaction ecosystems may be supplemented, substituted, or otherwise adjusted as also described below.

[0099] For example, with reference to FIG. 2, the biometric transaction ecosystems 200 described herein may include components and sub-systems distributed across multiple domains or layers, such as a merchant domain 210, a biometric orchestration layer 220, a biometric vault infrastructure 230, and a consumer platform domain 240.

[0100] Starting within the merchant domain 210, a merchant may operate one or more onpremises biometrically-enabled point-of-interaction (POI) devices 211 (e.g., the integrated hardware 110), including but not limited to one or more payment terminals. In some embodiments, the merchant domain 210 can also include online marketplaces accessible through a web browser or application on consumers’ personal electronic devices 212 (e.g., smartphones, tablets, computers, etc.) that are equipped with a biometric reader capable of collecting biometric information from the consumer.

[0101] In embodiments, the devices 211, 212 within the merchant domain 210 can interoperate with a biometric orchestration platform 221, like the remote biometric verification service 150, which resides in the biometric orchestration layer 220. As shown in the example of FIG. 2, the biometric orchestration platform 221 may be referred to as a biometric switch and can include an EMV cloud module, a biometric registry, a biometric routing module, and a payment orchestration module. As described herein, the biometric orchestration platform 221 can coordinate biometric verification processes between the merchant domain, the biometric vaults, and the consumer platforms in order to generate a unique biometric payment token that is used by the payment networks to complete a transaction.

[0102] In embodiments, the biometric orchestration platform 221 can interoperate with one or more biometric vaults 231 that store biometric data for participating consumers, i.e., consumers enrolled in the biometric payment / loyalty / rewards program. As shown in the example of FIG. 2, the biometric vaults 231 may be a proprietary biometric vault associated with the biometric orchestration service provider, or may be provided by a third party, such as a fintech, bank, or other payment network service provider.

[0103] In particular embodiments, the biometric vault infrastructure 230 may interoperate with one or more consumer platforms 241 A, 421B, 241C within a consumer platform domainPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO240 in order to retrieve details about consumers’ payment accounts, rewards / loyalty programs, membership benefits, and / or the like associated with the consumers’ biometric data. In some embodiments, the consumer platforms 241 A, 421B, 241C may also facilitate the enrollment of consumers into a biometric transaction service and collect consumers’ biometric data. In other words, the participating consumer platforms 241A, 241B, 241C may offer a biometric enrollment service that enables consumers to provide biometric data and register with a biometric transaction service provider. In embodiments, the consumer platforms 241A, 421B, 241C may be provided by card issuers / networks, fintech / wallet / social companies, specific merchants or acquirers, and / or the like. Each consumer platform 241A, 421B, 241C may be accessed in a variety of ways, such as through smartphones, computers, and / or the like.

[0104] As also shown in the example of FIG. 2, the biometric orchestration platform 221 can interoperate with one or more payment networks, such as Mastercard®, Visa®, American Express®, Discover®, JCB®, Diners Club International, and / or the like, in order to process payment transfers in accordance with the biometric verification protocols described herein. In particular aspects, the biometric orchestration platform 221 may generate a biometric payment token and / or payload that is used by the payment networks to complete a transaction, as described herein.

[0105] Turning now to FIG. 3 and subsequent figures, further aspects of the biometric transaction systems of the present disclosure are illustrated and described. As shown in the example of FIG. 3, the biometric transaction system 300 comprises or is in local and / or remote communication with one or more of a user device 310, a biometric routing platform 320 which comprises or is in communication with a biometric verification system 330, a biometric vault 340, a POI device including a POS device 380 and / or a terminal 360, and a biometric module 350. In particular embodiments, the biometric transaction system 300 may also include an estate management module 370. In still further embodiments, the biometric transaction system 300 may be in communication with a loyalty service provider 392 or a restricted transaction verification system that certifies an customer for a restricted transaction (e.g., an age verification service provider 390, etc.), and / or other similar service providers.

[0106] As described herein, the biometric routing service 320 can be an orchestration layer or switch, like biometric orchestration platform 221 and / or the biometric orchestration system 150. Although only a single biometric verification system 330 and biometric vault 340 are shown in the example of FIG. 3, it should be appreciated that the biometric routing service 320 can be configured as the interface between a plurality of different POI devices (like the terminalPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO360 and POS device 380) and a plurality of different biometric verification services 330 and / or biometric vaults 340. In particular embodiments, the plurality of different POI devices may be part of a network of POI devices provided by a specific merchant or group of merchants, which may be distributed geographically at different locations and managed by an estate management module 370.

[0107] As described herein, the estate management module 370 can include a collection of hardware and / or software components that facilitate control or management of the devices 360, 380 and / or the biometric module 350. According to an embodiment, the estate management module 370 can be utilized to download software to these devices 350, 360, 380, to manage one or more parameters of the devices 350, 360, 380, and / or to communicate status information regarding the devices 350, 360, 380 (e.g., for managing the deployment of devices, for diagnostic purposes, and / or the like).

[0108] Accordingly, as described herein, the biometric routing service 320 can direct a biometric authentication request comprising a consumer’s biometric data to the appropriate biometric verification system 330, i.e., a target biometric verification system. In particular embodiments, the biometric routing service 320 may utilize information in an authentication request to determine where to direct the biometric authentication request and associated biometric data.

[0109] As shown in the example of FIG. 3 and subsequent figures, the user device 310 may be a mobile device or non-mobile device configured to enable capture and transmission of biometric information. Examples of user devices 310 can include, but is not limited to, smartphones, tablets, laptops, desktops, kiosks, and / or other types of devices. In embodiments, the user device 310 can be configured to obtain and provide information to other components of the system, including but not limited to identification information, biometric information, loyalty information, and payment information.

[0110] According to certain aspects of the present disclosure, the biometric verification system 330 can be configured to securely receive and process consumer biometric data in order to identify a biometric identification of a consumer. These and other use cases of the biometric transaction system 300 are discussed in more detail below.[OHl] For example, with reference to FIGS. 4A and 4B, the biometric transaction system 300 can be utilized to enroll consumers into a biometric transaction / payment program. In particular, with reference to FIG. 4 A, a schematic diagram of a transaction system 300 utilizedPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO for enrollment of a consumer into a biometric verification service is illustrated in accordance with certain aspects of the present disclosure.

[0112] As shown, at step 1, the biometric routing platform 320 receives, from a user device 310 (or a software application loaded onto the user device 310), a request from a consumer to enroll in the biometric verification service. The enrollment request comprises at least some relevant enrollment information, including but not limited to, the consumer’s name, phone number, or email address, biometric information such as a face scan raw image, a palm scan raw image of one or both hands, consumer preferences, loyalty information, consumer payment information such as PAN, card expiration date, and / or the like, as well as payment card tokens (from a payment card network), and / or other types of information relevant to the enrollment of the consumer. As such, in particular embodiments, the payment card token may be generated at the enrollment stage, i.e., before the customer attempts a biometric payment transaction.

[0113] In some embodiments, the enrollment information may include an identification of a particular biometric verification system 330 or a particular biometric vault 340 that the consumer must or wishes to use.

[0114] At step 2, the biometric routing platform 320 then sends some or all of the enrollment information to the target biometric verification system 330. At step 3, the biometric verification system 330 can save some or all of the enrollment information, such as the raw image data and biometric vector (discussed in more detail below), and may further create and assign a biometric ID unique to the consumer. At step 4, some or all of the enrollment information is saved, along with the unique biometric ID created for the consumer, in a corresponding biometric vault 340. In particular embodiments, the biometric verification system 330 does not store the raw biometric data of the consumer in the biometric vault 340, i.e., only the biometric ID may be stored in the biometric vault 340 in accordance with certain aspects of the present disclosure.

[0115] At steps 5 and 6, the biometric verification system 330 may return an enrollment confirmation and / or any other necessary enrollment information to the biometric routing platform 320, which can then send that confirmation to the user device 310. The consumer is thus successfully enrolled in the biometric verification service and able to participate in biometric-based interactions and transactions as described herein. According to an embodiment, if there are any errors or enrollment issues along the process (e.g., collection of inadequate raw biometric data, etc.), the biometric routing platform 320 can send that error orPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO enrollment issue information to the user device 310, which can facilitate correction of the error or enrollment issue.

[0116] With reference to FIG. 4B, the enrollment process is further illustrated in the flow diagram shown in accordance with additional aspects of the present disclosure. In particular, a process for enrolling in the biometric payment ecosystem is illustrated where a consumer enrolls through a mobile application, e.g., a mobile app on a user device 310.

[0117] In a first step, the consumer initiates the enrollment process and provides certain raw biometric information (e.g., a photograph, palm print, fingerprint, etc.). This biometric information may be transmitted to the biometric routing platform 320 along with other enrollment information as part of an enrollment request as described above.

[0118] In a second step, a biometric software module (sometimes referred to as the ‘Bio SDK’) residing within the biometric routing platform 320 is utilized to convert the raw biometric information into a proprietary biometric vector. This biometric vector encodes one or more biometric parameters (e.g., VI, Rl, x2, xl, zl, etc. shown in FIG. 4B) based on the biometric information submitted by the consumer during the enrollment process.

[0119] In a third step, the biometric software module at the biometric routing platform 320 then converts the biometric information to a specified data structure based on an orchestration template specified by the orchestration platform. As shown, the data structure can provision space for storing a consumer platform identifier along with the biometric vector generated for the consumer. In embodiments, the consumer platform identifier is an identification code that indicates which consumer platform was used to enroll the consumer in the biometric payment ecosystem 200.

[0120] Accordingly, in some embodiments, the biometric vector standardized according to the orchestration template may be tagged, encoded, embedded with, or otherwise associated with the consumer platform identifier. As described herein, the biometric platform 320 (i.e., the biometric switch 221) may comprise a biometric registry (as also shown in FIG. 2), which can store the at least standardized biometric vector and the associated consumer platform identifier. Thus, in particular embodiments, the enrollment process 400 may include an additional step of storing and / or updating the biometric registry of the biometric platform 221, 320 with the consumer’s enrollment information.

[0121] As shown in FIG. 4B, the enrollment process 400 can then include, in a fourth step, communicating at least the consumer’s biometric vector to an appropriate biometric vault 340, i.e., a target biometric vault. According to a fifth step or aspect of the enrollment process 400,PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO the consumer biometric vault may create a data entry that associates together the raw biometric information (e.g., photograph, palm print, fingerprint, etc.) provided by the consumer, the proprietary biometric vector generated from the biometric information, as well as the orchestration-specified biometric vector, which is stored in the biometric vault 340.

[0122] With reference to FIGS. 5 to 7, exemplary transaction workflows utilizing the biometric transaction systems 100, 200, 300 are illustrated in accordance with various aspects of the present disclosure.

[0123] For example, with reference to FIG. 5, a first method 500 of authenticating a consumer’ s biometric identity while completing a payment transaction is illustrated. As shown, a POS device 380 is utilized for a transaction and, at step 1, transaction information (e.g., the amount of the transaction) is sent to a POS terminal 360 (which may be the same as or different from the POS 380). At step 2, a participating consumer can use the terminal 360 to select an option to pay using biometric information. At step 3, the terminal 360 invokes the biometric module 350, i.e., sends a biometric authentication request to the biometric module 350, which triggers the biometric module 350 to perform a biometric-based transaction protocol. At step 4, the consumer provides the biometric information to the biometric module 350, e.g., through a scan or some other method, depending on the type of biometric information required. According to an embodiment, the user provides biometric data such as fingerprint, palm print, palm vein geometry, retina or iris scan, vein pattern, facial geometry or characteristics, voice pattern, or other biological / physical characteristic, including combinations thereof.

[0124] At step 5, the biometric data is sent to the biometric orchestration system 320. The orchestration system 320 determines, on the basis of information received from the biometric module 350, to which biometric verification system 330 to direct the request.

[0125] At step 6, the biometric orchestration system 320 sends the biometric data to the target biometric system 330.

[0126] At step 7, the biometric verification system 330 processes the biometric data to find the user’s matching biometric ID, and at step 8, the identified biometric ID is used to retrieve associated information from the biometric vault 340 (which here includes payment information).

[0127] At step 9, the payment information, which may be in the form of a payment token, is sent back to the biometric system 330, which then sends the information to the biometric orchestration system 320 at step 10.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0128] At step 11, the biometric orchestration system 320 sends the information to the POS terminal 360, 380, such as via the biometric module 350.

[0129] At step 12, the returned information is utilized by the biometric module 350 to simulate a “tap” of payment card to the POS terminal 360, 380, thereby providing the payment information. It should be appreciated that in this manner, the transaction can be considered a “card present” or “CP” transaction, even though the consumer did not provide a physical or digital payment card.

[0130] Finally, at step 13, the transaction is processed with this payment information using known methods for transaction processing, e.g., through an acquirer / payment processor 160, 222 as described above.

[0131] With reference to FIG. 6, another process 600 for authenticating a consumer’s biometric identity while completing a payment transaction is illustrated. As shown, the consumer can utilize their biometrics information to complete a “card present” payment transaction. In particular, the customer checks-in via the terminal (e.g., terminal 120, 211, 360), which activates the biometric module (e.g., biometric module 130, 350) to collect the consumer’s biometric information. The consumer provides their biometric information (e.g., by scanning their face, palm print, fingerprint, etc.) using the biometric module 130, 350. In some embodiments, the biometric module 130, 350 may provide a preview of the biometric data collected to the terminal. The terminal 120, 211, 360 may show the consumer a preview of the biometric scan for approval / confirmation.

[0132] Once the biometric module 130, 350 completes the biometric scan, the biometric module 130, 350 may perform a liveness check process and encrypt the biometric information before transmitting the biometric information to the biometric orchestration platform 150, 221, 320 (i.e., the biometric switch).

[0133] At the orchestration platform level (e.g., the orchestration layer 220), the biometric switch 221, 320 will look-up biometric routing information based on the biometric information received from the biometric module 130, 350. For example, as mentioned above, the biometric information can include a consumer platform identifier and an orchestration-specified biometric vector. The biometric switch 221, 320 may utilize a biometric vault registry to perform the look-up process.

[0134] Once the relevant biometric vault 231, 340 has been identified, a biometric data payload comprising the raw biometric information, the orchestration-specified biometric vector, and optionally other data is generated and transmitted to the relevant biometric vaultPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO231, 340. The biometric vault 231, 340 receives this biometric data payload, validates the information, and matches the biometric data based on the biometric information stored within the vault (e.g., biometric information provided by the consumer during an enrollment process). In particular embodiments, these steps may be performed with the biometric vault 231, 340 in conjunction with a biometric verification system 330, as described above.

[0135] When a valid biometric match has been found, the biometric identification is transmitted back to the biometric orchestration system 221, 320. The biometric orchestration system 221, 320 may then transmit the validated biometric ID to a consumer platform 240, which can return the customer’s name, points, and a payment token.

[0136] In embodiments, the biometric orchestration system 221, 320 may then transmit the biometric ID to the biometric module 130, 350 and / or the point-of-interaction device 120, 211 (i.e., the payment terminal 360).

[0137] The merchant can supply transaction information to the point-of-interaction device 120, 211, 360, such as by scanning items that the consumer wishes to purchase. The consumer then selects, via the point-of-interaction device 120, 211, 360, a biometric-enabled payment platform. As shown in the example of FIG. 6, the payment method encompasses a “card present” transaction. However, it should be understood that “card present” transactions may be completed using certain payment services, such as PayPal®, assuming that they offer biometric payment services.

[0138] As shown, the terminal 120, 211, 360 requests a payment method from the biometric module 130, 350. The biometric module 130, 350 requests a network token from the biometric switch 221, 320, which fetches network tokens based on the platform token mentioned earlier. The biometric switch returns 221, 320 the network token to the biometric module 130, 350. The biometric module 130, 350 then generates a contactless card-present payload, activates a near-field communication (NFC) antenna, and transmits the contactless card-present payload to the terminal 120, 211, 360.

[0139] The terminal 120, 211, 360 may then transmit the payment credentials to an acquirer / payment processor 160, 222 via existing payment rails, gateways, DTH, etc. The acquirer and / or transaction processor 160, 222 will authorize the payment credentials and if successful, return a success message to the terminal 120, 211, 360. Otherwise, a payment failure message may be returned. The terminal 120, 211, 360 may then convey the success / failure to the consumer.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0140] Turning to FIG. 7, a related process 700 for authenticating a consumer’s biometric identity while completing a payment transaction is illustrated. In particular, the consumer can utilize biometrics to complete a “card not present” transaction, i.e., a transaction using payment credentials only. As shown in the example of FIG. 7, the customer checks-in via the terminal 120, 211, 360, which activates the biometric module 130, 350 to scan the consumer. The consumer provides their biometric information (e.g., by scanning their face, palm print, fingerprint, etc.) using the biometric module 130, 350. In some embodiments, the biometric module 130, 350 may provide a preview of the biometric data collected to the terminal 120, 211, 360. The terminal 120, 211, 360 may show the consumer a preview of the biometric scan for approval / confirmation.

[0141] Once the biometric module 130, 350 completes the biometric scan, the biometric module 130, 350 may perform a liveness check process and encrypt the biometric information before transmitting the biometric information to the biometric orchestration system 221, 320 (i.e., the biometric switch).

[0142] At the orchestration platform level, the biometric orchestration system 221, 320 will look-up biometric routing information based on the biometric information received from the biometric module 130, 350. For example, as mentioned above, the biometric information sent to the biometric orchestration system 221, 320 can include a consumer platform identifier or biometric vault identifier encoded into an orchestration-specified biometric vector, which the orchestration system 221, 320 may extract. The biometric orchestration system 221, 320 may utilize a biometric vault registry to perform the look-up process.

[0143] Once the relevant biometric vault 231, 340 has been identified, a biometric data payload comprising the raw biometric information, the orchestration-specified biometric vector, and optionally other data is generated and transmitted to the relevant biometric vault 231, 340. The biometric vault 231, 340 receives this biometric data payload, validates the information, and matches the biometric data based on the biometric information stored within the vault (e.g., biometric information provided by the consumer during an enrollment process). In particular embodiments, these steps may be performed with the biometric vault 231, 340 in conjunction with a biometric verification system 330, as described above.

[0144] When a valid biometric match has been found, the biometric identification is transmitted to the biometric orchestration system 221, 320. The biometric orchestration system 221, 320 may then transmit the validated biometric ID to a consumer platform 241A, 241B, 241C. In response to receiving the validated biometric ID, the consumer platform 241 A, 241B,PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO241C can then return customer information to the biometric orchestration system 221, 320, including but not limited to, the customer’s name, points, and payment credentials for the customer.

[0145] In embodiments, the biometric orchestration system 221, 320 may then transmit the biometric ID and the customer information (including at least the payment credentials) to the biometric module 130, 350, which communicates the validated biometric ID to the point-of- interaction device (e.g., devices 110, 120, 360). The point-of-interaction device 110, 120, 360 may be configured to provide a personalized experience to the consumer based on the validated biometric ID and customer information. For example, the terminal 110, 120, 360 may display a welcome message with name and loyalty / customer points available for use at the merchant’s location.

[0146] The merchant can supply transaction information to the point-of-interaction device 110, 120, 360, such as by scanning items that the consumer wishes to purchase. The consumer then selects, via the point-of-interaction device 110, 120, 360, a biometric-enabled payment platform. As shown in the example of FIG. 7, the payment method encompasses a “card not present” transaction, i.e., based on stored payment credentials. It should be understood that “card not present” transactions may be completed using various payment services as described above.

[0147] As shown, the terminal 110, 120, 360 then utilizes the customer information (e.g., the payment credentials) and the transaction information to generate a transaction payload with the payment credentials. The payment credentials and transaction payload may be transmitted from the terminal 110, 120, 360 to an acquirer and / or transaction processor 160, 222 via existing payment rails, gateways, DTH, etc. The acquirer and / or transaction processor 160, 222 will authorize the payment credentials and if successful, return a success message to the terminall lO, 120, 360. Otherwise, a payment failure message may be returned. The terminal 110, 120, 360 may then convey the success / failure to the consumer.

[0148] As mentioned above, the biometric transaction systems 100, 200, 300 may also be utilized to biometrically authenticate consumers for the purposes of loyalty / rewards programs, age verification, transaction check-ins, and / or other similar interaction events. As such, according to various embodiments of the present disclosure, the biometric identification system and / or the targeted biometric vault may return non-biometric information associated with a verified individual, including payment card-related information, incentive program information, loyalty- and / or rewards-related information, biographical information, identity-PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO based information of the individual (e.g., age, gender, nationality or citizenship, etc.), socioeconomic information of the individual (e.g., credit score, employment status, etc.), geographic information of the individual (residential address, country or region, etc.), legal or regulatory information of the individual (criminal record, immigration status, sanctions or watchlist inclusion, licensing or certification status, etc.), and health-related information of the individual (medical conditions, disability status, vaccination records, mental health status, etc.).

[0149] For example, with reference to FIG. 8, a loyalty / rewards process 800 is illustrated in which a biometric transaction system 300 is utilized to invoke a loyalty service provider 392. As shown, a POS 380 is utilized for a transaction and at step 1, where transaction information (e.g., the amount of the transaction) is sent to a POS terminal 360 (which may be the same as or different from the POS 380). At the step 2, the user can select an option to retrieve loyalty information (and optionally pay) using their biometric information. At step 3, the terminal 360 invokes a biometric module 130, 350 to collect and utilize the consumer’s biometric information for loyalty information retrieval or authentication.

[0150] At step 4, the user provides the biometric information, which can be performed using any method for providing any biometric information. According to an embodiment, the user provides biometric data such as fingerprint, palm print, palm vein geometry, retina or iris scan, vein pattern, facial geometry or characteristics, voice pattern, or other biological / physical characteristic, including combinations thereof.

[0151] At step 5, the biometric data is sent to the biometric orchestration system 221, 320. The biometric orchestration system 221, 320 determines, on the basis of information received from the biometric module 130, 350, which biometric system 330 to direct the request.

[0152] At step 6, the biometric orchestration system 221, 320 sends the biometric data to the determined biometric system 330. At step 7, the biometric system 330 processes the biometric data to find the user’s matching biometric ID, and at step 8, the identified biometric ID is used to retrieve associated information from the biometric vault 340 (which here includes loyalty information and optionally payment information).

[0153] At step 9, the loyalty information (and optionally payment information, such as in the form of a payment token) is sent back to the biometric system 330, which sends the information to the biometric orchestration system 221, 320 at step 10.

[0154] At steps 11 and 12, the biometric orchestration system 221, 320 sends the information to the POS terminal 360, such as via the biometric module 350. In particular embodiments, the loyalty information is sent to the POS 380 at step 13, which can send thePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO information to a loyalty service provider 392 as a loyalty redemption request at step 14. The loyalty service provider 392 can return an adjustment to the transaction amount (or other offers). With this information, a consumer-tailored effect can be achieved based on the biometric verification, which in this case, means that the POS 380 sends an updated total amount or other relevant information to the POS terminal 360, which then processes payment information using known methods for transaction processing.

[0155] Similarly, with reference to FIG. 9, an age verification process 900 is illustrated in which a biometric transaction system 300 is utilized to invoke an age verification service provider 390. As shown, a POS 380 is utilized for a transaction and at step 1, where transaction information (e.g., the amount of the transaction) is sent to a POS terminal 360 (which may be the same as or different from the POS 380). At the step 2, the user can select an option to perform an age verification using their biometric information. At step 3, the terminal 360 invokes a biometric module 130, 350 to collect and utilize the consumer’s biometric information for age verification retrieval or authentication.

[0156] At step 4, the user provides the biometric information, which can be performed using any method for providing any biometric information. According to an embodiment, the user provides biometric data such as fingerprint, palm print, palm vein geometry, retina or iris scan, vein pattern, facial geometry or characteristics, voice pattern, or other biological / physical characteristic, including combinations thereof.

[0157] At step 5, the biometric data is sent to the biometric orchestration system 221, 320. The biometric orchestration system 221, 320 determines, on the basis of information received from the biometric module 130, 350, which biometric system 330 to direct the request.

[0158] At step 6, the biometric orchestration system 221, 320 sends the biometric data to the determined biometric system 330. At step 7, the biometric system 330 processes the biometric data to find the user’s matching biometric ID, and at step 8, the identified biometric ID is used to retrieve associated information from the biometric vault 340 (which here includes identity and / or age information).

[0159] At step 9, the requested information (and optionally payment information, such as in the form of a payment token) is sent back to the biometric system 330, which sends the information to the biometric orchestration system 221, 320 at step 10.

[0160] At steps 11 and 12, the biometric orchestration system 221, 320 sends the information to the POS terminal 360, such as via the biometric module 350. In particular embodiments, the identity / age information is sent to the POS 380 at step 13, which can sendPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO the information to an age verification service provider 390 as an age verification request at step 14. The age verification service provider 390 can return a verification of the consumer’s age. With this information, a consumer-tailored effect can be achieved based on the biometric age verification, which in this case, means that the POS terminal 360, 380 can continue to process the transaction (e.g., an age-restricted transaction) or decline the transaction based thereon (e.g., if the consumer is not of-age).

[0161] According to additional embodiments of the present disclosure, the biometric transaction systems 100, 200, 300 can be used to validate the presence of a participating consumer, which may be useful in customizing or tailoring a merchant-consumer experience. For example, with reference to FIG. 10, a transaction check-in process 1000 is illustrated in accordance with certain aspects of the present disclosure. In particular, a process 1000 for initiating a biometric transaction at a point-of-interaction / point-of-sale device 110, 211 is shown. Although this particular embodiment involves checking in at a point-of-sale device 110, 211 which are typically located at a merchant’ s in-person location, it should be appreciated that an online portal 212 may also be used to conduct a transaction check in process 1000.

[0162] In a first step, the consumer checks in at the relevant point-of-interaction 110, 211, e.g., the point-of-sale device. This may include initiating an application at the point-of- interaction device 110, 21 land providing necessary biometric information at the point-of- interaction (via a biometric module 130, 350, for example).

[0163] In a second step, a biometric software module (sometimes referred to as the ‘Bio SDK’ or the biometric kernel) residing within the biometric module 130, 350 converts the biometric information to a template format based on an orchestration template.

[0164] In some embodiments, the template format may be a proprietary biometric vector that encodes one or more biometric parameters (e.g., VI, Rl, x2, xl, zl, etc. shown in FIG. 10) based on the biometric information submitted by the consumer during the check-in process 1000. In other embodiments, the biometric information may be converted directly into an orchestration-specified biometric vector, i.e., without any reliance on or knowledge of a proprietary biometric vector.

[0165] As described herein, the formatted biometric information can include at least the biometric vector, but may also include other data, such as a consumer platform identifier, the raw biometric data (e.g., raw image, fingerprint, etc.), and / or the like. The consumer platform identifier may also be referred to as a vault identifier, which identifies a particular biometric vault associated with the consumer’s biometric enrollment.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0166] The formatted (e.g., vectorized) biometric information may then be transmitted to the biometric orchestration system 320, which uses the received information to look up the consumer’s biometric vector and the target biometric vault 241A, 241B, 241C using a biometric registry according to a third step.

[0167] Next, in a fourth step, the biometric orchestration system 320 may then transmit at least the raw biometric information and the biometric vector to the target consumer biometric vault 241A, 241B, 241C based on the consumer platform identifier. The consumer biometric vault 241 A, 241B, 241C receives the raw biometric information and the orchestration-specified biometric vector. In a fifth step, the consumer biometric vault 241 A, 241B, 241C uses the raw biometric information and the orchestration-specified biometric vector to perform matching and authentication. As described herein, it will be appreciated that the fourth and fifth steps may be performed with the biometric vault 241A, 241B, 241B, 340 in conjunction with a corresponding biometric verification system 330, as described above.

[0168] Turning now to FIGS. 11 to 15, certain systems, devices, and components used in the biometric transaction systems 100, 200, 300 of the present disclosure are described and illustrated in further detail.

[0169] For example, with reference to FIG. 15, a schematic illustration of a payment or POS terminal 1100 is shown in accordance with aspects of the present disclosure. In particular embodiments, the terminals described above, e.g., terminals 120, 211, 360, may be embodied as described below.

[0170] In embodiments, the terminal 1100 comprises one or more processors 1120 capable of executing instructions stored in memory 1130 or storage 1160 or otherwise processing data to, for example, perform one or more steps of the method. Processor 1120 may be formed of one or multiple modules. Processor 1120 may take any suitable form, including but not limited to a microprocessor, microcontroller, multiple microcontrollers, circuitry, field programmable gate array (FPGA), application-specific integrated circuit (ASIC), a single processor, or plural processors.

[0171] Memory 1130 can take any suitable form, including a non-volatile memory and / or RAM. The memory 1130 may include various memories such as, for example LI, L2, or L3 cache or system memory. As such, the memory 1130 may include static random access memory (SRAM), dynamic RAM (DRAM), flash memory, read only memory (ROM), or other similar memory devices. The memory can store, among other things, an operating system. The RAM is used by the processor for the temporary storage of data. According to an embodiment, anPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO operating system may contain code which, when executed by the processor, controls operation of one or more components of terminal 1100. It will be apparent that, in embodiments where the processor implements one or more of the functions described herein in hardware, the software described as corresponding to such functionality in other embodiments may be omitted.

[0172] User interface 1140 may include one or more devices for enabling communication with a user. The user interface 1140 can include, for example and without limitation, a display, a mouse, a keyboard, and / or the like, for receiving user commands. In some embodiments, user interface 1140 may include a command line interface or graphical user interface that may be presented to a remote terminal via communication interface 1150. The user interface 1140 may be located with one or more other components of the system 1100, or may located remote from the system 1100 and in communication via a wired and / or wireless communications network 140. According to an embodiment, the user interface 1140 enables the user and / or a merchant to initiate a transaction, enter information about goods or services, request biometric verification of age or access to loyalty programs, and / or any other functions described herein. For example, the user interface may enable a request to initiate a transaction by requesting to make a purchase of goods or services.

[0173] Communication interface 1150 may include one or more devices for enabling communication with other hardware devices, such as a biometric module 130, 350, as well as external systems like an acquirer / payment processor 160. For example, communication interface 1150 may include a network interface card (NIC) configured to communicate according to the Ethernet protocol. Additionally, communication interface 1150 may implement a TCP / IP stack for communication according to the TCP / IP protocols. Various alternative or additional hardware or configurations for communication interface 1150 will be apparent.

[0174] Storage 1160 may include one or more machine-readable storage media such as readonly memory (ROM), random-access memory (RAM), magnetic disk storage media, optical storage media, flash-memory devices, or similar storage media. In various embodiments, storage 1160 may store instructions for execution by processors 1120 or data upon which processors 1120 may operate. For example, storage 1160 may store an operating system 1161 for controlling various operations of terminal 1100.

[0175] It will be apparent that various information described as stored in storage 1160 may be additionally or alternatively stored in memory 1130. In this respect, memory 1130 may alsoPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO be considered to constitute a storage device and storage 1160 may be considered a memory. Various other arrangements will be apparent. Further, memory 1130 and storage 1160 may both be considered to be non-transitory machine-readable media. As used herein, the term non- transitory will be understood to exclude transitory signals but to include all forms of storage, including both volatile and non-volatile memories.

[0176] While terminal 1100 is shown as including one of each described component, the various components may be duplicated in various embodiments. For example, as mentioned above, processor 1120 may include multiple microprocessors that are configured to independently execute the methods described herein or are configured to perform steps or subroutines of the methods described herein such that the multiple processors cooperate to achieve the functionality described herein. Further, where one or more components of terminal 1100 is implemented in a cloud computing system, the various hardware components may belong to separate physical systems. For example, processor 1120 may include a first processor in a first server and a second processor in a second server. Other variations and configurations are possible.

[0177] According to an embodiment, storage 1160 of terminal 1100 may store one or more algorithms, modules, and / or instructions to carry out one or more functions or steps of the methods described or otherwise envisioned herein. For example, storage 1160 may comprise, among other instructions or data, contactless transaction instructions 1162. In particular embodiments, the terminal 1100 may include a biometric applet and a bio ID interface as shown in FIGS. 3, 5, and 8, which enable the terminal 1100 to interoperate with a biometric module 130, 350. According to an embodiment, contactless transaction instructions 1162 direct the system 1100 to carry out one or more steps of the contactless transaction methods using the biometric modules 130, 350, as described or otherwise envisioned herein.

[0178] With reference to FIG. 12, additional aspects of the terminals 1100 are described and illustrated. In particular, as shown in FIG. 12, the terminals 120, 211, 360, 1100 may be a POI device 1200, or may form part of a POI device 1200. In addition to the aspects described above, the point-of-interaction device 1200 can include one or more processors 1202 and a machine- readable memory 1204 interconnected and / or in communication via a system bus 1206 containing conductive circuit pathways through which instructions (e.g., machine-readable signals) may travel to effectuate communication, tasks, storage, and the like. The point-of- interaction device 1200 can be connected to a power source (not shown), which can include an internal power supply and / or an external power supply. As mentioned above, the point-of-PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO interaction device 1200 can also include one or more additional components, such as a user interface 1213, a display 1214, an input / output (I / O) interface 1212, a networking unit 1216, one or more card readers 1201, and the like, including combinations thereof. As shown, each of these components may be interconnected and / or in communication via the system bus 1206, for example.

[0179] In embodiments, the one or more card readers 1201 may include a magnetic stripe reader 1208 for reading and processing magnetic stripe data (e.g., Track I and Track II data) of payment cards, a smartcard reader 1203 for reading and processing chip-enabled payment cards, a contactless reader 1205 for reading and processing contactless data from a contactless- enabled payment card, and / or the like.

[0180] In embodiments, the one or more processors 1202 can include one or more highspeed data processors adequate to process payment card information, execute the program components described herein, and / or perform one or more operations of the methods described herein. In particular embodiments, the one or more processors 1202 can include at least a secure processor 1230. The secure processor 1230 may be a processor that is housed in a secured or fortified part of the point-of-interaction device 1200, may be configured to control the high- security functions of the point-of-interaction device 1200, including but not limited to, managing encryption keys and libraries 1234 and / or protocols (e.g., VeriShield Crypto Library, AES, etc.), encrypting and decrypting sensitive cardholder information, managing card-reading interface modules 1201 to receive and process sensitive cardholder information, receive and transmit sensitive cardholder information to external destinations, and / or the like.

[0181] In further embodiments, the one or more processors 1202 can also include at least an application processor 1232. The application processor 1232 may be housed within the point- of-interaction device 1200 and may be configured to control the less sensitive functions of the point-of-interaction device 1200, including but not limited to controlling the display 1214.

[0182] In embodiments, the user interface 1213 may be configured to receive various forms of input from a user associated with the point-of-interaction device 1200. The user interface 1213 can include, but is not limited to, one or more of a keyboard, keypad, trackpad, trackball(s), capacitive keyboard, controller (e.g., a gaming controller), computer mouse, computer stylus / pen, a voice input device, and / or the like, including combinations thereof.

[0183] In embodiments, the display device 1214 may be configured to display information, including text, graphs, biometric information, selection menus, and / or the like. In particular embodiments, the display device 1214 may be configured to display transaction informationPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO related to one or more payment transactions. The display device 1214 can include, but is not limited to, a liquid crystal display (LCD), a light-emitting diode (LED) display, a touch screen or other touch-enabled display, a foldable display, a projection display, and so on, or combinations thereof.

[0184] In embodiments, the input / output (TO) interface 1212 may be configured to connect and / or enable communication with one or more peripheral devices (not shown), including but not limited to additional machine-readable memory devices, diagnostic equipment, and other attachable devices. The EO interface 1212 may include one or more EO ports that provide a physical connection to the one or more peripheral devices. In some embodiments, the EO interface 1212 may include one or more serial ports.

[0185] In embodiments, the communication interface 1216 may include one or more types of networking interfaces that facilitate wired and / or wireless communication between the point- of-interaction device 1200 and one or more external devices or systems, such as the acquirers / payment processors 160. That is, the communication interface 1216 may operatively connect the point-of-interaction device 1200 to one or more types of communications networks, which can include a direction interconnection, the Internet, a local area network (“LAN”), a metropolitan area network (“MAN”), a wide area network (“WAN”), a wired or Ethernet connection, a wireless connection, a cellular network, and similar types of communications networks, including combinations thereof. In some embodiments, the point-of-interaction device 1200 may communicate with one or more remote / cloud-based servers and / or cloudbased services, in order to verify payment card information and process financial transactions.

[0186] In embodiments, the memory 1204 can be variously embodied in one or more forms of machine accessible and machine-readable memory. In some embodiments, the memory 1204 includes a storage device (not shown), which can include, but is not limited to, a non-transitory storage medium, a magnetic disk storage, an optical disk storage, an array of storage devices, a solid-state memory device, and / or the like, as well as combinations thereof. The memory 1204 may also include one or more other types of memory, such as dynamic random-access memory (DRAM), static random-access memory (SRAM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), Flash memory, and / or the like, as well as combinations thereof. In embodiments, the memory 1204 may include a combination of different types of memory, including different types of transitory memory and different types of non-transitory memory.PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO

[0187] The point-of-interaction device 1200 can be configured by software components stored in the memory 1204 to perform one or more processes of the methods described herein. More specifically, the memory 1204 can be configured to store data / information 1220 and computer-readable instructions 1222 that, when executed by the one or more processors 202, causes the point-of-interaction device 1200 to coordinate the biometric check-in, biometric loyalty access, biometric age verification, biometric transaction, and / or biometric payment methods described herein. Such data 1220 and the computer-readable instructions 1222 stored in the memory 1204 may form a biometric applet that may be incorporated into, loaded from, loaded onto, or otherwise operatively available to and from the point-of-interaction device 1200. Thus, in some embodiments, the biometric applet and / or one or more individual software packages may be stored in a local storage device of the memory 1204. However, in other embodiments, the biometric applet and / or one or more individual software packages may be loaded onto and / or updated from a remote server or service via a communications network.

[0188] In particular embodiments, the memory 1204 may be configured to store a cryptographic library 1234, including the algorithms and keys necessary to support the secure encryption / decryption functions of the point-of-interaction device 1200. In embodiments, the portion of the memory 1204 storing the cryptographic library 1234 may be disposed within a secured or fortified section of the point-of-interaction device 1200 along with the secure processor 1230.

[0189] In further embodiments, the memory 1204 may include an application program interface (API) 1236 configured to facilitate the low-security features of the point-of- interaction device 1200, as described herein. In certain embodiments, this may include operating the display device 1214, generating / printing receipts, and / or the like. The API 1236 may be based on or otherwise compatible with one or more types of operating systems 1226, including but not limited to Verifone Secure OS, Engage VOS2, VAOS based on Android, and / or the like.

[0190] Accordingly, provided herein is a computer program product comprising a non- transitory computer-readable storage medium 1204 having stored thereon computer-readable instructions 1222 that, when executed by one or more processors (such as processors 1202), cause the one or more processors to perform one or more operations of the methods described herein.

[0191] Turning now to FIG. 13, a schematic illustration of a biometric module 1300 is shown in accordance with aspects of the present disclosure. The biometric modules 130, 350PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO described herein may be embodied in accordance with one or more aspects of the biometric module 1300 shown in FIG. 13.

[0192] According to an embodiment, biometric module 1300 comprises a processor 1320 capable of executing instructions stored in memory 1330 or storage 1360 or otherwise processing data to, for example, perform one or more steps of the method. Processor 1320 may be formed of one or multiple modules. Processor 1320 may take any suitable form, including but not limited to a microprocessor, microcontroller, multiple microcontrollers, circuitry, field programmable gate array (FPGA), application-specific integrated circuit (ASIC), a single processor, or plural processors.

[0193] Memory 1330 can take any suitable form, including a non-volatile memory and / or RAM. The memory 1330 may include various memories such as, for example LI, L2, or L3 cache or system memory. As such, the memory 1330 may include static random access memory (SRAM), dynamic RAM (DRAM), flash memory, read only memory (ROM), or other similar memory devices. The memory can store, among other things, an operating system. The RAM is used by the processor for the temporary storage of data. According to an embodiment, an operating system may contain code which, when executed by the processor, controls operation of one or more components of biometric module 1300. It will be apparent that, in embodiments where the processor implements one or more of the functions described herein in hardware, the software described as corresponding to such functionality in other embodiments may be omitted.

[0194] Communication interface 1350 may include one or more devices for enabling communication with other hardware devices. For example, communication interface 1350 may include a network interface card (NIC) configured to communicate according to the Ethernet protocol. Additionally, communication interface 1350 may implement a TCP / IP stack for communication according to the TCP / IP protocols. Various alternative or additional hardware or configurations for communication interface 1350 will be apparent.

[0195] Storage 1360 may include one or more machine-readable storage media such as readonly memory (ROM), random-access memory (RAM), magnetic disk storage media, optical storage media, flash-memory devices, or similar storage media. In various embodiments, storage 1360 may store instructions for execution by processor 1320 or data upon which processor 1320 may operate. For example, storage 1360 may store an operating system 1361 for controlling various operations of biometric module 1300.PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO

[0196] It will be apparent that various information described as stored in storage 1360 may be additionally or alternatively stored in memory 1330. In this respect, memory 1330 may also be considered to constitute a storage device and storage 1360 may be considered a memory. Various other arrangements will be apparent. Further, memory 1330 and storage 1360 may both be considered to be non-transitory machine-readable media. As used herein, the term non- transitory will be understood to exclude transitory signals but to include all forms of storage, including both volatile and non-volatile memories.

[0197] While biometric module 1300 is shown as including one of each described component, the various components may be duplicated in various embodiments. For example, processor 1320 may include multiple microprocessors that are configured to independently execute the methods described herein or are configured to perform steps or subroutines of the methods described herein such that the multiple processors cooperate to achieve the functionality described herein. Further, where one or more components of biometric module 1300 is implemented in a cloud computing system, the various hardware components may belong to separate physical systems. For example, processor 1320 may include a first processor in a first server and a second processor in a second server. Other variations and configurations are possible.

[0198] According to an embodiment, storage 1360 of biometric module 1300 may store one or more algorithms, modules, and / or instructions to carry out one or more functions or steps of the methods described or otherwise envisioned herein. For example, storage 1360 may comprise, among other instructions or data, contactless transaction instructions 1362. According to various embodiments, contactless transaction instructions 1362 may direct the biometric module 1300 to carry out one or more steps of the biometric check-in, biometric loyalty access, biometric age verification, biometric transaction, and / or biometric payment methods described herein. Such computer-readable instructions 1362 stored in the memory 1360 may form a biometric kernel that may be incorporated into, loaded from, loaded onto, or otherwise operatively available to and from the biometric module 1300, as shown in FIGS. 3, 5, 8, and 9. Thus, in some embodiments, the biometric kernel and / or one or more individual software packages may be stored in a local storage device of the memory 1304. However, in other embodiments, the biometric kernel and / or one or more individual software packages may be loaded onto and / or updated from a remote server or service via a communications network 140.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0199] According to preferred embodiments, the biometric modules 1300 of the present disclosure comprises one or more sensor 1340 configured to obtain biometric information about user 1310. In the case of a biological / physical characteristic, the sensor 1340 may be a camera - using visible light or other wavelengths of light - configured to obtain an image such as an image of a user’s face. In further embodiments, biometric module 1300 can also include a sensor 1340 that is a fingerprint or palm scanner utilized to obtain fingerprint or palm biometric information. In still further embodiments, the sensor 1340 may be an audio sensor utilized to obtain voice information. Other sensors configured to obtain biometric information are possible.

[0200] With further reference to FIG. 14, a schematic representation a payment or POS terminal 120 and a biometric module 130 is shown in accordance with still further aspects of the present disclosure. The POS terminal 120 can be any of the terminals described or otherwise envisioned herein. Similarly, the biometric module 130 can be any of the biometric modules described or otherwise envisioned herein.

[0201] More specifically, according to an embodiment, the terminal 120 comprises one or more of hardware components (“hw”), an operating system (OS), a biometric applet (sometimes referred to as a biometric SDK), a payment application, and / or a live preview application. The terminal 120 can be in communication with other components of a transaction system 100, 200, 300, such as through a communications network 140.

[0202] According to further embodiments, the biometric module 130 can comprise a user space with an encryption key management component, a biometric module services module, an estate management module or agent, and a biometric kernel. According to some embodiments, the biometric module 130 comprises a platform space with an operating system and drivers, and firmware. The platform space can further comprise physical components such as a face camera, palm camera, LEDs, Bluetooth, SOC, memory, 4G or other wireless communication module, USB, and power / battery source. The biometric module 130 can be a component of the payment terminal 120, or is otherwise in wired and / or wireless communication with the payment terminal 120.

[0203] Turning now to FIG. 15, a schematic representation of a remote, cloud-based biometric orchestration system 1500 is illustrated in accordance with aspects of the present disclosure. As described herein, the biometric orchestration system 150, 221, 320 may be embodied in accordance with the description of the biometric orchestration system 1500. That is, the biometric orchestration system 1500 may be any of the platforms 150, 221, 320PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO described or otherwise envisioned herein, and may comprise any of the components described or otherwise envisioned herein.

[0204] According to an embodiment, biometric orchestration system 1500 comprises a processor 1520 capable of executing instructions stored in memory 1530 or storage 1560 or otherwise processing data to, for example, perform one or more steps of the verification / authentication methods described herein. Processor 1520 may be formed of one or multiple modules. Processor 1520 may take any suitable form, including but not limited to a microprocessor, microcontroller, multiple microcontrollers, circuitry, field programmable gate array (FPGA), application-specific integrated circuit (ASIC), a single processor, or plural processors.

[0205] Memory 1530 can take any suitable form, including a non-volatile memory and / or RAM. The memory 1530 may include various memories such as, for example LI, L2, or L3 cache or system memory. As such, the memory 1530 may include static random access memory (SRAM), dynamic RAM (DRAM), flash memory, read only memory (ROM), or other similar memory devices. The memory can store, among other things, an operating system. The RAM is used by the processor for the temporary storage of data. According to an embodiment, an operating system may contain code which, when executed by the processor, controls operation of one or more components of biometric orchestration system 1500. It will be apparent that, in embodiments where the processor implements one or more of the functions described herein in hardware, the software described as corresponding to such functionality in other embodiments may be omitted.

[0206] Communication interface 1550 may include one or more devices for enabling communication with other hardware devices. For example, communication interface 1550 may include a network interface card (NIC) configured to communicate according to the Ethernet protocol. Additionally, communication interface 1550 may implement a TCP / IP stack for communication according to the TCP / IP protocols. Various alternative or additional hardware or configurations for communication interface 1550 will be apparent.

[0207] Storage 1560 may include one or more machine-readable storage media such as readonly memory (ROM), random-access memory (RAM), magnetic disk storage media, optical storage media, flash-memory devices, or similar storage media. In various embodiments, storage 1560 may store instructions for execution by processor 1520 or data upon which processor 520 may operate. For example, storage 1560 may store an operating system 1561 for controlling various operations of biometric orchestration system 1500.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0208] It will be apparent that various information described as stored in storage 1560 may be additionally or alternatively stored in memory 1530. In this respect, memory 1530 may also be considered to constitute a storage device and storage 1560 may be considered a memory. Various other arrangements will be apparent. Further, memory 1530 and storage 1560 may both be considered to be non-transitory machine-readable media. As used herein, the term non- transitory will be understood to exclude transitory signals but to include all forms of storage, including both volatile and non-volatile memories.

[0209] While biometric orchestration system 1500 is shown as including one of each described component, the various components may be duplicated in various embodiments. For example, processor 1520 may include multiple microprocessors that are configured to independently execute the methods described herein or are configured to perform steps or subroutines of the methods described herein such that the multiple processors cooperate to achieve the functionality described herein. Further, where one or more components of biometric orchestration system 1500 is implemented in a cloud computing system, the various hardware components may belong to separate physical systems. For example, processor 1520 may include a first processor in a first server and a second processor in a second server. Many other variations and configurations are possible.

[0210] According to an embodiment, storage 1560 of biometric orchestration system 1500 may store one or more algorithms, modules, and / or instructions to carry out one or more functions or steps of the methods described or otherwise envisioned herein, such as the biometric check-in, biometric loyalty access, biometric age verification, biometric transaction, and / or biometric payment methods described herein. For example, storage 1560 may comprise, among other instructions or data, user information 1562. The user information may be, for example, information about registered uses of the biometric orchestration system 1500. The information may be biometric information about each of the users, and may comprise other identification such as name, age, date of birth, address, and / or other information. The identification information is thus associated in storage with the biometric information.

[0211] Also described herein are certain user interface application flows which improve upon typical consumer interactions, including simplifying and expediting check-out processes, among other benefits. For example, as described herein, the biometric systems and payment terminals comprising or operatively connected to a biometric module as described above may include an application and / or software kit configured to provide a unique user interface according to a biometric user interface application flow. In particular embodiments, thePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO application and / or software kit may provide such user interfaces via a POS terminal or POI device.

[0212] More specifically, with reference to FIG. 16, the application and / or software kit can be configured to provide a user interface according to a first exemplary biometric user interface application flow. As shown, the biometric user interface application flow includes: in a step1.1.1, providing a biometric check-in screen or portal; in one or more steps 1.2.1 and 1.2.2, providing a biometric scanning interface and performing a biometric identification process; optionally, in one or more steps 1.2.3 to 1.2.6, providing biometric exception interfaces in the event of a failure to verify the user’s identity biometrically; in one or more steps 1.3.1 and1.3.2, providing a user interface tailored to the user’s identity based on information connected with the user’s biometric identification; in a step 1.4.1, providing a customer cart showing intended purchases by the user; in a step 1.5.1, providing a user interface enabling the user to complete the intended purchases; and in one or more steps 1.6.1 to 1.6.3, processing the payments and providing a user interface enabling confirmation of the purchases.

[0213] More specifically, as shown in FIGS. 17A through 17N, the first user interface application flow is illustrated in connection with a point-of-interaction terminal configured with a biometric module.

[0214] In FIG. 17 A, a biometric check-in screen or portal is illustrated in connection with the step 1.1.1, which enables a user to select a biometric identification option to initiate the transaction process.

[0215] In FIG. 17B, a biometric scanning interface is provided in connection with steps 1.2.1 and 1.2.2, which may include one or more indicators signifying that a biometric scan is being performed. In embodiments, the biometric scanning interface may provide feedback or instructions assisting the user in completing the biometric scan (e.g., a viewing frame surrounding a live camera feed from the biometric module, etc.). In particular embodiments, the one or more indicators, the feedback, and instructions may be visual, audible, tactile, haptic, and / or combinations thereof. As shown in FIG. 17C, the biometric scanning interface may also indicate when a biometric scan was completed and is being processed.

[0216] In FIGS. 17D through 17F, a biometric exception interface may be provided via the point-of-interaction terminal in connection with one or more steps 1.2.3 to 1.2.6, in the event of a failure to verify the user’s identity biometrically. For example, as shown in FIG. 17D, the biometric exception interface can include a timeout exception wherein an adequate biometric scan is not captured within a predetermined period of time. In such embodiments, the interfacePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO may include recommendations for improving the quality of the biometric scan (e.g., by removing a hat or sunglasses, etc.).

[0217] In FIG. 17E, the biometric exception interface can include a “no match” exception, indicating that no biometric match was found for the user. In such embodiments, the interface may include information enabling the user to create and register a biometric profile.

[0218] In FIG. 17F, the biometric exception interface can include an “invalid face” exception, indicating that a biometric scan was completed but that the scan does not meet one or more biometric parameters set by the biometric module. In such embodiments, the interface may include the reason for the error and recommendations for improving the quality of the biometric scan (e.g., by removing a hat or sunglasses, etc.).

[0219] In FIG. 17G, the biometric exception interface can also include a “PIN requirement” exception, indicating that further verification of the user’s identity is required. In some embodiments, the additional verification of the user’s identity may be completed by inputting a PIN code. However, other verification methods are contemplated.

[0220] Once the user’s identity is verified biometrically in accordance with the present disclosure, a merchant-specific user interface can be provided that is tailored to the user’s identity based on information connected with the user’s biometric identification. For example, as shown in FIG. 17H, the interface can display the purchase history connected with the biometrically verified user, as well as provide options and / or recommendations based thereon. Then, as shown in FIG. 171, the interface can include a merchant-specific selections that are not tailored to the user’s identification.

[0221] As shown in FIG. 17J, once the user makes one or more selections via the user interface, those selections may be added to the user’s “cart.” It should be appreciated that the user’s cart may itemize all of the user’s selections and generate a summary (e.g., subtotal, tax, fees, total, etc.) for the transaction.

[0222] As shown in FIG. 17K, once the user is ready to complete the transaction, the user interface may provide a checkout interface including options for providing payment. In embodiments, the payment options can include one or more biometric payment options, and / or can automatically pull one or more card-on-file (COF) options based on the user’s biometric identification. In some embodiments, the payment options can include an option to pay with a conventional physical payment card.

[0223] As shown in FIG. 17L, interface can provide an indication that the selection payment option for the transaction is being processed. Then, as shown in FIG. 17M, the interface canPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO provide an indication that the payment was successful (or not successful). Finally, as shown in FIG. 17N, the interface can provide receipt information, such as a digital receipt and / or a scannable code (e.g., a bar code or QR code) for accessing a digital version of the receipt.

[0224] Turning now to FIG. 18, another embodiment of a user interface provided in accordance with a second exemplary biometric user interface application flow is illustrated. As shown, the biometric user interface application flow includes: in a step 2.1.1, providing a biometric check-in screen or portal; in one or more steps 2.2.1 and 2.2.2, providing a biometric scanning interface and performing a biometric identification process; optionally, in one or more steps 2.2.3 to 2.2.6, providing biometric exception interfaces in the event of a failure to verify the user’s identity biometrically; in a step 2.3.1, providing a user interface tailored to the user’s identity based on information connected with the user’s biometric identification; in a step 2.4.1, providing a user interface enabling the user to complete an intended transaction; and in one or more steps 2.5.1 to 2.5.3, processing the payments and providing a user interface enabling confirmation of the purchases.

[0225] More specifically, as shown in FIGS. 19A through 19L, the second user interface application flow is illustrated in connection with a point-of-interaction terminal configured with a biometric module.

[0226] In FIG. 19 A, a biometric check-in screen or portal is illustrated in connection with the step 2.1.1, which enables a user to select a biometric identification option to initiate the transaction process.

[0227] In FIGS. 19B and 19C, a biometric scanning interface is provided in connection with steps 2.2.1 and 2.2.2, which may include one or more indicators signifying that a biometric scan is being performed. In embodiments, the biometric scanning interface may provide feedback or instructions assisting the user in completing the biometric scan (e.g., a viewing frame surrounding a live camera feed from the biometric module, etc.). In particular embodiments, the one or more indicators, the feedback, and instructions may be visual, audible, tactile, haptic, and / or combinations thereof. As shown, the biometric scanning interface may also indicate the progress / status of the biometric scan and whether the biometric scan was completed and is being processed.

[0228] In FIGS. 19D through 19G, a biometric exception interface may be provided via the point-of-interaction terminal in connection with one or more steps 2.2.3 to 2.2.6, in the event of a failure to verify the user’s identity biometrically. For example, as shown in FIG. 19D, the biometric exception interface can include a timeout exception wherein an adequate biometricPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO scan is not captured within a predetermined period of time. In such embodiments, the interface may include recommendations for improving the quality of the biometric scan (e.g., by removing a hat or sunglasses, etc.).

[0229] In FIG. 19E, the biometric exception interface can include a “no match” exception, indicating that no biometric match was found for the user. In such embodiments, the interface may include information enabling the user to create and register a biometric profile.

[0230] In FIG. 19F, the biometric exception interface can include an “invalid face” exception, indicating that a biometric scan was completed but that the scan does not meet one or more biometric parameters set by the biometric module. In such embodiments, the interface may include the reason for the error and recommendations for improving the quality of the biometric scan (e.g., by removing a hat or sunglasses, etc.).

[0231] In FIG. 19G, the biometric exception interface can also include a “PIN requirement” exception, indicating that further verification of the user’s identity is required. In some embodiments, the additional verification of the user’s identity may be completed by inputting a PIN code. However, other verification methods are contemplated.

[0232] Once the user’s identity is verified biometrically in accordance with the present disclosure, a merchant-specific user interface can be provided that is tailored to the user’s identity based on information connected with the user’s biometric identification. For example, as shown in FIG. 19H, the interface can display rewards or loyalty -program information connected with the biometrically verified user, as well as provide options and / or recommendations based thereon. In particular embodiments, the interface can enable the user to select and / or otherwise apply one or more rewards, points, or loyalty -program benefits to a transaction based on the biometric verification.

[0233] As shown in FIG. 191, once the user is ready to complete the transaction, the user interface may provide a checkout interface including options for providing payment. In embodiments, the payment options can include one or more biometric payment options, and / or can automatically pull one or more card-on-file (COF) options based on the user’s biometric identification. In some embodiments, the payment options can include an option to pay with a conventional physical payment card.

[0234] As shown in FIGS. 19 J, interface can provide an indication that the selection payment option for the transaction is being processed. Then, as shown in FIG. 19K, the interface can provide an indication that the payment was successful (or not successful). Finally, as shown in FIG. 19L, the interface can provide receipt information, such as a digital receiptPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO and / or a scannable code (e.g., a bar code or QR code) for accessing a digital version of the receipt.

[0235] As described herein, certain embodiments of a user interface application flow are described, which may be provided via a point-of-interaction device connected to a biometric module of the present disclosure. It should be appreciated that, in accordance with these embodiments, the point-of-interaction device can be configured to receive user input, such as menu selections, payment selections and / or the like, and to update the interface based thereon.

[0236] Additionally, while certain user interface application flows, similar methods of operating the POI device and / or POS terminal will be apparent based on the present disclosure, including but not limited to methods of operating the POI device and / or POS terminal for verifying an enrolled user’s age, storing and retrieving loyalty or other historical or relevant information about an enrolled user, providing payment information about or for the user, and / or other functions.

[0237] Thus, in accordance with these and other aspects described herein, methods of authenticating a user for a biometric transaction are described. With reference to FIG. 20, an exemplary method 2000 is illustrated according to some of these aspects.

[0238] At step 2005 of the method 2000, a biometric transaction system 100, 300 is provided.

[0239] At step 2010 of the method 2000, the payment or POS terminal 120, 360, 380 receives a request for a biometric transaction. As mentioned above, a consumer would typically need to present a payment card to the merchant or to the payment or POS terminal 120, 360, 380 to initiate the financial transaction. However, according to the embodiments of the present disclosure, the user is able to provide biometric information and thus a payment card is not required to be physically present. In further embodiments, the biometric transaction system 100, 300 may be used in lieu of a loyalty program card. That is, the biometric information (described below) may advantageously be used separately and / or in addition to the financial transaction request in order to access merchant-specific benefits, rewards, personalized recommendations, stored payment methods, and / or the like.

[0240] According to an embodiment, the request for a contactless transaction is initiated by the user requesting to purchase the goods or services. This can be accomplished, for example, by the merchant providing information about the goods or services being purchased by the purchaser or user, and / or the cost of those goods or services, to the payment or POS terminal 120, 360, 380. The terminal 120, 360, 380 will then initiate a verification protocol to verify thePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO identity of the purchaser or user, which will allow the merchant to ultimately process the transaction via a payment processor.

[0241] At step 2015 of the method 2000, biometric module 130, 350 obtains biometric information of the user. The biometric module 130, 350 can be triggered or initiated to obtain biometric information of the user by a request or command from the payment or POS terminal 120, 360. For example, the terminal may receive or initiate a request for a contactless transaction, typically in response to a transaction request from a user, and thus may communicate that request for a contactless transaction to the biometric module 130, 350. In response to the command or request from the terminal, the biometric module 130, 350 initiates a preprogrammed or predetermined protocol to obtain biometric information from a user. Accordingly, the user typically must be in proximity to the biometric device or module 130, 350 in order to provide the biometric information. Thus, the biometric module 130, 350 obtains the biometric information from the user in response to initiation of the preprogrammed or predetermined protocol.

[0242] At step 2020 of the method 2000, the biometric module 130, 350 may transmit information to a remote biometric verification service 150 (e.g., biometric orchestration system 320) for the purpose of verifying the user. The information is transaction information that comprises at least the obtained biometric information. According to an embodiment, the transaction information further comprises merchant information such as an identity of the merchant or any other relevant or necessary merchant information. According to another embodiment, the transaction information further comprises information about the transaction itself, such as an amount of the transaction, the goods or services intended to be purchased, date and time information, and / or any other relevant or necessary information. The transaction information can be encrypted or otherwise secured or packaged by the biometric module before it is communicated to the remote biometric verification service 250.

[0243] At step 2025 of the method 2000, the remote biometric verification service 150 identifies a biometric identification associated with the obtained biometric information. For example, as described above, the biometric verification service 320 interoperate with a biometric verification system 330 to process the obtained biometric information and search through the database of biometric information associated with registered users to identify a match to the obtained biometric information.

[0244] The search of the database of biometric information for registered users can have several possible outcomes. According to one possible outcome, no match is made between thePATENT APPLICATIONAtorney Docket No.: VFI-4048-WO obtained biometric information and any of the biometric information for registered users of the biometric verification service 150, 320, 330. For example, the user at the merchant requesting a contactless transaction may not be a registered user of the biometric verification service. As another example, the biometric information obtained by the biometric module 130, 350 may be of insufficient quality to allow for a match. According to another possible outcome, the search tentatively identifies a user, but the tentative match may not be of sufficient quality or above a predetermined threshold to definitively identify the user. Thus, the system 320, 330 may return information that no match was found, or may issue a request for new or updated biometric information by the biometric module 130, 350. The method may then return to step 2015 to obtain new or updated biometric information.

[0245] According to yet another possible outcome, the search may find a match of sufficient quality or above a predetermined threshold thus definitively identifying the user at the payment terminal as being a registered user of the biometric verification service. According to an embodiment, the biometric identification comprises a payment card token as described above.

[0246] Thus, according to an embodiment, once an identification is made, the biometric verification service 150, 320, 330 can communicate relevant or necessary information to the biometric module 130, 350. The relevant or necessary information can comprise, for example, the identification of the user and the network token, among other possible information.

[0247] The biometric orchestration system 320 can package the information in any way sufficient to communicate the information, including with any encryption. Thus, for example, the biometric verification service 320 can encrypt the information communicated to the biometric module 130, 350, and the biometric module 130, 350 or the payment terminal 120, 360 will comprise the encryption keys necessary to decrypt the information.

[0248] At step 2030 of the method 2000, the biometric module 130, 350 receives the information communicated from the biometric verification service 150, 320, via the communications network 140. According to an embodiment in which the search at the biometric verification service found a match of sufficient quality or above a predetermined threshold thus definitively identifying the user at the payment terminal as being a registered user of the biometric verification service, the communicated information received by the biometric device or module comprises the identified network token. Other communicated information is possible.

[0249] At this stage, the identified network token may be utilized by the merchant’s payment terminal in order to access a merchant-specific loyalty network, including merchant-PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO specific purchase histories, rewards, benefits, services, and / or the like. In embodiments, the customer information stored by the merchant in the merchant’s loyalty network may be used to authenticate and / or personalize customer experience, including by providing recommendations or personalized messaging, simplifying the checkout experience, and reducing wait times. In particular embodiments, the merchant-specific loyalty network can include stored payment methods authorized by the user for purchases at the trusted merchant, which can be used subsequently to perform payment transactions.

[0250] At step 2035 of the method 2000, a unique identifier (e.g., a transaction nonce) can be generated as described above for the particular transaction. According to an embodiment, the payment or POS terminal 120, 360 generates the transaction nonce and communicates it to the biometric module 130, 350. Alternatively, the biometric module 130, 350 can generate the transaction nonce and communicate it to the payment or POS terminal 120, 360.

[0251] At step 2040 of the method 2000, the biometric transaction system 100, 200, 300 generates a transaction payload comprising at least the identified network token and the random transaction nonce. In embodiments, the transaction payload comprises other information such as information about the merchant, information about the transaction such as the amount of the transaction, and / or any other relevant or necessary information. According to an embodiment, the biometric module 130, 350 generates the contactless payload. Alternatively, the payment or POS terminal 120, 360 may generate the transaction payload.

[0252] At step 2045 of the method 2000, the biometric transaction system 100, 200, 300 communicates the generated transaction payload to a payment processor 160. The payment processor 160 can be any payment processor that the merchant engages for payment processing, as described above. According to an embodiment, the biometric transaction system 100, 200, 300 may communicate the generated transaction payload via a payment gateway that facilitates online transactions and serves to ensures that user funds are available and authorize the payment transfer. The payment gateway can be any of the known or developed payment gateways used for payments. The transaction payload can be encrypted or otherwise secured or packaged by the biometric transaction system 100, 200, 300 before it is communicated to the payment processor 160.

[0253] At step 2050 of the method 2000, the biometric transaction system 100, 200, 300 may receive information back from the payment processor 160 regarding the transaction. According to one embodiment, the information received by the biometric transaction systemPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO100, 200, 300 is a denial of the transaction. According to another embodiment, the information received by the contactless transaction system 100, 200, 300 is approval of the transaction.

[0254] At step 2055 of the method 2000, the biometric transaction is completed. According to an embodiment in which the payment processor 160 denies the transaction, the biometric transaction is denied and no financial transfer is completed. According to an embodiment in which the payment processor 160 approves the transaction, a financial transfer is completed.

[0255] It should be appreciated that all combinations of the foregoing concepts and additional concepts discussed in greater detail below (provided such concepts are not mutually inconsistent) are contemplated as being part of the inventive subject matter disclosed herein. In particular, all combinations of claimed subject matter appearing at the end of this disclosure are contemplated as being part of the inventive subject matter disclosed herein. It should also be appreciated that terminology explicitly employed herein that also may appear in any disclosure incorporated by reference should be accorded a meaning most consistent with the particular concepts disclosed herein.

[0256] All definitions, as defined and used herein, should be understood to control over dictionary definitions, definitions in documents incorporated by reference, and / or ordinary meanings of the defined terms.

[0257] The terms “individual”, “user”, and “consumer” are used herein synonymously and interchangeably unless otherwise specified explicitly or implicitly by the context of its use.

[0258] The indefinite articles “a” and “an,” as used herein in the specification and in the claims, unless clearly indicated to the contrary, should be understood to mean “at least one.”

[0259] The phrase “and / or,” as used herein in the specification and in the claims, should be understood to mean “either or both” of the elements so conjoined, i.e., elements that are conjunctively present in some cases and disjunctively present in other cases. Multiple elements listed with “and / or” should be construed in the same fashion, i.e., “one or more” of the elements so conjoined. Other elements may optionally be present other than the elements specifically identified by the “and / or” clause, whether related or unrelated to those elements specifically identified.

[0260] As used herein in the specification and in the claims, “or” should be understood to have the same meaning as “and / or” as defined above. For example, when separating items in a list, “or” or “and / or” shall be interpreted as being inclusive, i.e., the inclusion of at least one, but also including more than one, of a number or list of elements, and, optionally, additional unlisted items. Only terms clearly indicated to the contrary, such as “only one of’ or “exactlyPATENT APPLICATIONAttorney Docket No.: VFI-4048-WO one of,” or, when used in the claims, “consisting of,” will refer to the inclusion of exactly one element of a number or list of elements. In general, the term “or” as used herein shall only be interpreted as indicating exclusive alternatives (i.e. “one or the other but not both”) when preceded by terms of exclusivity, such as “either,” “one of,” “only one of,” or “exactly one of.”

[0261] As used herein in the specification and in the claims, the phrase “at least one,” in reference to a list of one or more elements, should be understood to mean at least one element selected from any one or more of the elements in the list of elements, but not necessarily including at least one of each and every element specifically listed within the list of elements and not excluding any combinations of elements in the list of elements. This definition also allows that elements may optionally be present other than the elements specifically identified within the list of elements to which the phrase “at least one” refers, whether related or unrelated to those elements specifically identified.

[0262] As used herein, although the terms first, second, third, etc. may be used herein to describe various elements or components, these elements or components should not be limited by these terms. These terms are only used to distinguish one element or component from another element or component. Thus, a first element or component discussed below could be termed a second element or component without departing from the teachings of the inventive concept.

[0263] Unless otherwise noted, when an element or component is said to be “connected to,” “coupled to,” or “adjacent to” another element or component, it will be understood that the element or component can be directly connected or coupled to the other element or component, or intervening elements or components may be present. That is, these and similar terms encompass cases where one or more intermediate elements or components may be employed to connect two elements or components. However, when an element or component is said to be “directly connected” to another element or component, this encompasses only cases where the two elements or components are connected to each other without any intermediate or intervening elements or components.

[0264] In the claims, as well as in the specification above, all transitional phrases such as “comprising,” “including,” “carrying,” “having,” “containing,” “involving,” “holding,” “composed of,” and the like are to be understood to be open-ended, i.e., to mean including but not limited to. Only the transitional phrases “consisting of’ and “consisting essentially of’ shall be closed or semi -closed transitional phrases, respectively.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO

[0265] It should also be understood that, unless clearly indicated to the contrary, in any methods claimed herein that include more than one step or act, the order of the steps or acts of the method is not necessarily limited to the order in which the steps or acts of the method are recited.

[0266] The above-described examples of the described subject matter can be implemented in any of numerous ways. For example, some aspects can be implemented using hardware, software or a combination thereof. When any aspect is implemented at least in part in software, the software code can be executed on any suitable processor or collection of processors, whether provided in a single device or computer or distributed among multiple devices / computers.

[0267] The present disclosure can be implemented as a system, a method, and / or a computer program product at any possible technical detail level of integration. The computer program product can include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present disclosure.

[0268] The computer readable storage medium can be a tangible device that can retain and store instructions for use by an instruction execution device. The computer readable storage medium can be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium comprises the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing. A computer readable storage medium, as used herein, is not to be construed as being transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire.

[0269] Computer readable program instructions described herein can be downloaded to respective computing / processing devices from a computer readable storage medium or to anPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and / or a wireless network. The network can comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and / or edge servers. A network adapter card or network interface in each computing / processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing / processing device.

[0270] Computer readable program instructions for carrying out operations of the present disclosure can be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, stateseting data, configuration data for integrated circuitry, or either source code or object code written in any combination of one or more programming languages, comprising an object oriented programming language such as Smalltalk, C++, or the like, and procedural programming languages, such as the “C” programming language or similar programming languages. The computer readable program instructions can execute entirely on the user’s computer, partly on the user’s computer, as a stand-alone software package, partly on the user’s computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, comprising a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider). In some examples, electronic circuitry comprising, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) can execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present disclosure.

[0271] Aspects of the present disclosure are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to examples of the disclosure. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer readable program instructions.

[0272] The computer readable program instructions can be provided to a processor of a, special purpose computer, or other programmable data processing apparatus to produce aPATENT APPLICATIONAtorney Docket No.: VFI-4048-WO machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks. These computer readable program instructions can also be stored in a computer readable storage medium that can direct a computer, a programmable data processing apparatus, and / or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture comprising instructions which implement aspects of the function / act specified in the flowchart and / or block diagram or blocks.

[0273] The computer readable program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0274] The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various examples of the present disclosure. In this regard, each block in the flowchart or block diagrams can represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the blocks can occur out of the order noted in the Figures. For example, two blocks shown in succession can, in fact, be executed substantially concurrently, or the blocks can sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and / or flowchart illustration, and combinations of blocks in the block diagrams and / or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions.

[0275] Other implementations are within the scope of the following claims and other claims to which the applicant can be entitled.

[0276] While several inventive embodiments have been described and illustrated herein, those of ordinary skill in the art will readily envision a variety of other means and / or structures for performing the function and / or obtaining the results and / or one or more of the advantages described herein, and each of such variations and / or modifications is deemed to be within thePATENT APPLICATIONAttorney Docket No.: VFI-4048-WO scope of the inventive embodiments described herein. More generally, those skilled in the art will readily appreciate that all parameters, dimensions, materials, and configurations described herein are meant to be exemplary and that the actual parameters, dimensions, materials, and / or configurations will depend upon the specific application or applications for which the inventive teachings is / are used. Those skilled in the art will recognize, or be able to ascertain using no more than routine experimentation, many equivalents to the specific inventive embodiments described herein. It is, therefore, to be understood that the foregoing embodiments are presented by way of example only and that, within the scope of the appended claims and equivalents thereto, inventive embodiments may be practiced otherwise than as specifically described and claimed. Inventive embodiments of the present disclosure are directed to each individual feature, system, article, material, kit, and / or method described herein. In addition, any combination of two or more such features, systems, articles, materials, kits, and / or methods, if such features, systems, articles, materials, kits, and / or methods are not mutually inconsistent, is included within the inventive scope of the present disclosure.

Claims

PATENT APPLICATIONAtorney Docket No.: VFI-4048-WOClaimsWHAT IS CLAIMED IS:

1. A method of authenticating a customer for a biometric payment transaction, the method comprising: receiving, at a payment terminal, a request for a biometric payment transaction; obtaining, by a biometric device, biometric information of the customer; communicating, from the biometric device, a secured information package to a biometric orchestration system, wherein the secured information package comprises at least the biometric information of the customer obtained by the biometric device; performing, by at least the biometric orchestration system, a biometric identification protocol using the biometric information of the customer contained in the secured information package, wherein the biometric identification protocol returns a positive biometric identification indicating that a match for the biometric information of the customer was found; generating a positive identification data packet in response to returning the positive biometric identification, wherein the positive identification data packet comprises at least a payment card token associated with an authorized payment method of the customer; and communicating, from the biometric orchestration system and to the biometric device, the positive identification data packet comprising the payment card token associated with the authorized payment method of the customer.

2. The method of claim 1, wherein performing the biometric identification protocol using the biometric information of the customer includes: determining, at the biometric orchestration system, biometric routing information for the biometric information of the customer, wherein the biometric routing information indicates a target biometric identification system to use to generate a biometric identification for the customer; communicating, to the target biometric identification system, at least the biometric information of the customer obtained by the biometric device, wherein the target biometric identification system is configured to determine whether a match for the biometric information of the customer exists within a target biometric vault; and receiving, from the target biometric identification system, at least the positive biometric identification.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO3. The method of claim 2, further comprising: retrieving, from a digital wallet of the customer, the payment card token associated with the authorized payment method of the customer.

4. The method of claim 3, wherein the payment card token is retrieved by the biometric orchestration system in response to receiving the positive biometric identification from the target biometric identification system.

5. The method of claim 3, wherein the payment card token is retrieved by the target biometric identification system in response to returning the positive biometric identification from the target biometric identification system.

6. The method of claim 2, further comprising: encoding, using the biometric device, a first set of one or more biometric parameters from the biometric information of the customer into a first biometric data structure having a first predetermined format; wherein the secured information package further comprises the first biometric data structure.

7. The method of claim 6, wherein the first predetermined format is defined by the biometric orchestration system.

8. The method of claim 6, wherein the biometric orchestration system comprises a biometric registry storing a plurality of encoded biometric data structures and corresponding biometric routing information for a plurality of customers, wherein each encoded biometric data structure of the plurality of encoded biometric data structures also has the first predetermined format, and wherein the biometric routing information for the customer is determined by: searching the plurality of encoded biometric data structures stored in the biometric registry and returning the biometric routing information corresponding to the encoded biometric data structure matching the first biometric data structure.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO9. The method of claim 6, further comprising: encoding, using the biometric device, a consumer platform identifier and / or a biometric vault identifier into the first biometric data structure; wherein the biometric routing information for the customer is determined by extracting the consumer platform identifier and / or the biometric vault identifier from the first biometric data structure.

10. The method of claim 6, further comprising: encoding, using the biometric device, a second set of one or more biometric parameters from the biometric information of the customer into a second biometric data structure having a second predetermined format, the second predetermined format being different than the first predetermined format; wherein the secured information package further comprises the second biometric data structure.

11. The method of claim 1, wherein the biometric information of the customer comprises a fingerprint, palm print, palm vein geometry, retina or iris scan, vein pattern, facial geometry, voice patern, and / or speech data.

12. The method of claim 1, wherein the secured information package further includes nonbiometric information, the non-biometric information comprising at least one of transaction information and / or merchant information associated with the biometric payment transaction.

13. The method of claim 1, wherein the payment card token is generated prior to receiving the request for the biometric payment transaction at the payment terminal.

14. The method of claim 1, wherein the payment card token is generated by a payment card network.

15. The method of claim 1, wherein the payment card token is uniquely generated in connection with a digital wallet of the customer.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO16. The method of claim 1, wherein the payment card token is uniquely generated in connection with the biometric orchestration system.

17. The method of claim 1, wherein the payment card token comprises a token value, a token type, a token domain, a token expiration, token metadata, cryptographic elements, and / or a mapping reference.

18. The method of claim 2, further comprising: retrieving, from the target biometric vault, customer engagement information associated with the customer in response to returning the positive biometric identification, wherein the positive identification data packet generated further comprises the customer engagement information retrieved; communicating, from the biometric device to the payment terminal, at least a portion of the customer engagement information contained within the positive identification data packet; and providing, via a user interface device or a display of the payment terminal, a user interface tailored to the customer based on the customer engagement information.

19. The method of claim 18, wherein the customer engagement information comprises information related to an incentives program, a loyalty program, a rewards program, and / or a membership that the customer participates in.

20. A method of performing a biometric payment transaction, the method comprising: authenticating a customer for the biometric payment transaction according to the method of one of claims 1 to 19; generating a transaction payload for the biometric payment transaction, wherein the transaction payload comprises the payment card token contained in the positive identification data packet; and transmitting, from the payment terminal, the transaction payload including the payment card token to a payment processor as part of a payment request for the biometric payment transaction.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO21. The method of claim 20, wherein the transaction payload further comprises nonbiometric information, the non-biometric information comprising at least transaction information and merchant information associated with the biometric payment transaction.

22. The method of claim 21, wherein the transaction information includes a transaction amount, a description of the goods and services, and / or a date and time; and wherein the merchant information includes a merchant identifier and / or a description of the merchant.

23. The method of claim 20, further comprising: transmitting, from the biometric device and to the payment terminal, at least the payment card token contained in the positive identification data packet.

24. The method of claim 20, wherein the transaction payload is generated by the payment terminal.

25. The method of claim 20, wherein the transaction payload is generated by the biometric device, and the payment card token is transmited to the payment terminal as part of the transaction payload.

26. The method of claim 20, further comprising: receiving, from the payment processor, a payment status code generated based on the payment request for the biometric payment transaction, wherein the payment status code indicates whether the payment request for the biometric payment transaction was approved or denied.

27. A method of performing a biometric payment transaction, the method comprising: receiving, at a payment terminal, transaction information for the biometric payment transaction, the transaction information including an initial transaction amount and optionally a description of the goods and services and / or a transaction date and time; authenticating a customer for the biometric payment transaction according to the method of claim 18;PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO modifying, at the payment terminal, the transaction information of the biometric payment transaction based on the customer engagement information received to generate modified transaction information; generating a transaction payload for the biometric payment transaction, wherein the transaction payload comprises the payment card token contained in the positive identification data packet and the modified transaction information; and transmitting, from the payment terminal, the transaction payload to a payment processor as part of a payment request for the biometric payment transaction.

28. A payment terminal adapted to facilitate biometric payment transactions, the payment terminal comprising: a user interface configured to receive requests to perform a biometric payment transaction from customers; a communication interface configured to enable communication with an associated biometric device and one or more payment processors; one or more processors; and a non-transitory computer-readable storage medium storing instructions that, when executed by the one or more processors, cause the payment terminal to perform a biometric payment transaction process including: receiving, via the user interface, a request from a customer to perform a biometric payment transaction; transmitting a request for the biometric payment transaction to the associated biometric device, wherein the associated biometric device is configured to capture biometric information of the customer; receiving, from the biometric device, a positive biometric identification indicating that a match for the biometric information of the customer was found; receiving, from the biometric device, a payment card token associated with an authorized payment method of the customer; and transmitting, using the communication interface, a transaction payload for the biometric payment transaction to a payment processor, wherein the transaction payload includes at least the payment card token.PATENT APPLICATIONAtorney Docket No.: VFI-4048-WO29. The payment terminal of claim 28, wherein the transaction payload further comprises non-biometric information, the non-biometric information comprising at least transaction information and merchant information associated with the biometric payment transaction.

30. The payment terminal of claim 29, wherein performing the biometric payment transaction process further includes: receiving the non-biometric information associated with the biometric payment transaction; and generating the transaction payload.

31. The payment terminal of claim 29, wherein performing the biometric payment transaction process further includes: receiving the non-biometric information associated with the biometric payment transaction; transmitting, to the biometric device, the non-biometric information associated with the biometric payment transaction; and receiving, from the biometric device, the transaction payload via the communication interface, wherein the positive biometric identification and the payment card token are received from the biometric device as part of the transaction payload.

32. The payment terminal of claim 31, wherein the transaction payload is received by the communication interface of the payment terminal as a wireless, contactless communication from the biometric device.

33. The payment terminal of claim 28, further comprising the associated biometric device.

34. The payment terminal of claim 28, wherein the payment terminal is part of a point-of- interaction device.

35. The payment terminal of claim 28, wherein the non-transitory computer-readable storage medium stores instructions that, when executed by the one or more processors, further cause the payment terminal to:PATENT APPLICATIONAttorney Docket No.: VFI-4048-WO receive transaction information for the biometric payment transaction, the transaction information including an initial transaction amount and optionally a description of the goods and services and / or a transaction date and time; receiving customer engagement information retrieved for the customer, wherein the customer engagement information comprises information related to incentives program, a loyalty program, a rewards program, and / or a membership that the customer participates in; and modifying, at the payment terminal, the transaction information of the biometric payment transaction based on the customer engagement information received to generate modified transaction information; wherein the transaction payload transmitted to the payment processor further comprises the modified transaction information.

Images