Method and device for implementing a secure transaction
Patent Information
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2025-12-17
- Publication Date
- 2026-06-25
Smart Images
Figure EP2025087823_25062026_PF_FP_ABST
Abstract
Description
[0001] DESCRIPTION
[0002] TITLE: Method and device for implementing a secure transaction
[0003] FIELD OF INVENTION
[0004] The present invention relates to the field of implementing transactions, particularly payments, more specifically using biometric data.
[0005] STATE OF THE ART
[0006] Solutions exist for processing transactions, such as payments, using biometric data. For example, a user can present the palm of their hand to a payment terminal, and if the palm identifies the user and thus their banking information, the payment is processed through the terminal.
[0007] However, it is possible that the palm of the hand may not be recognized, for example, because an image of the palm acquired by a biometric sensor is of poor quality. In this case, the transaction will not take place.
[0008] There is a need for a solution to carry out a transaction using biometric data that avoids transaction implementation failures while remaining secure.
[0009] DESCRIPTION OF THE INVENTION
[0010] One aim of the invention is to provide a solution for carrying out a transaction using biometric data that avoids transaction implementation failures while remaining secure.
[0011] According to a first aspect, a method for implementing a transaction is proposed, the method being implemented by means of data processing and comprising the following steps of: a) obtaining primary candidate biometric data and secondary candidate biometric data of a user; b) if the primary candidate biometric data coincide with first primary reference biometric data from a first primary database, obtaining first transaction data relating to the user associated with the first primary reference biometric data;(c) if the primary candidate biometric data do not match any primary reference biometric data and if the secondary candidate biometric data match any secondary reference biometric data, implementation of a process for the implementation of the transaction, said process being determined based on said secondary reference biometric data.
[0012] According to advantageous and non-limiting features, taken alone or in any combination: said processing implementation includes: (d) requesting a token for the implementation of the transaction based on secondary biometric reference data; said processing implementation includes: (c1) obtaining additional primary candidate biometric data; (c2) if the additional primary candidate biometric data coincides with first primary biometric reference data from the first primary database (15), obtaining first user-related transaction data associated with said first primary reference biometric data; said processing implementation includes: (c1) obtaining second user-related transaction data associated with the secondary reference biometric data;(c2) verification that second primary reference biometric data from a second primary database (16) associated with the secondary reference biometric data coincide with the primary candidate biometric data; step (c2) includes obtaining, in a secondary database, a secondary user identifier associated with the secondary reference biometric data coinciding with the secondary candidate biometric data and wherein, in step (c2), the second primary reference biometric data from the second primary database associated with the secondary reference biometric data are the second primary reference biometric data associated with the secondary identifier in the second primary database; the method includes a step (d) of ordering the implementation of the transaction;step d) of ordering the implementation of the transaction is carried out from the first transaction data obtained or the second transaction data obtained and from the result of step c2) of verification if the transaction is implemented from the second transaction data; step b) includes obtaining, in the first primary database, a primary user identifier associated with the first primary reference biometric data coinciding with the primary candidate biometric data and in which, in step b), the first transaction data obtained are those associated with the primary identifier in a first transaction database;The process includes a step aO), implemented by a biometric sensor, of acquiring primary candidate biometric data on a primary biometric trait of the user and secondary candidate biometric data on a secondary biometric trait of the user; the primary biometric trait is a vascular network of a hand of the user and the secondary biometric trait is a palm of the user's hand; the transaction is a payment and the transaction data is banking data.
[0013] According to a second aspect, a transaction implementation device is proposed, the device comprising data processing means configured to: a) obtain primary candidate biometric data and secondary candidate biometric data of a user; b) if the primary candidate biometric data coincide with primary reference biometric data from a first primary database, obtain first transaction data relating to the user associated with the primary reference biometric data; c) if the primary candidate biometric data do not coincide with any primary reference biometric data and if the secondary candidate biometric data coincide with secondary reference biometric data, implement a process for the implementation of the transaction, said process being determined according to said secondary reference biometric data.
[0014] Advantageously, the device is a payment terminal.
[0015] A third aspect proposes a system for implementing a transaction comprising a device as described above and including a biometric sensor, the device and the biometric sensor being adapted to communicate with each other. DESCRIPTION OF FIGURES
[0016] Other features and advantages of the present invention will become apparent from the following description of a preferred embodiment. This description will be given with reference to the accompanying figures, of which: Figure 1 represents a system for implementing a transaction and a remote server; Figure 2 represents the steps of a method for implementing a transaction according to a first embodiment; Figure 3 schematically illustrates a first primary database and a first transaction database according to one embodiment; Figure 4 schematically illustrates a first primary database and a first transaction database according to another embodiment; Figure 5 schematically illustrates a secondary database and a second primary database according to one embodiment;Figure 6 schematically illustrates a secondary database and a second primary database according to another embodiment, as well as a second transaction database; Figure 7 represents the steps in the process of implementing a transaction according to several embodiments.
[0017] DETAILED DESCRIPTION OF THE INVENTION
[0018] Device
[0019] With reference to figure 1, a device 1 is proposed to implement a transaction.
[0020] By transaction, we mean any type of computer transaction.
[0021] Preferably, this transaction is a financial transaction such as a payment.
[0022] The transaction may alternatively consist of an exchange of data enabling the identification of a user, for example in order to allow them to access a place (such as company premises).
[0023] Device 1 can be a server or a computer.
[0024] Advantageously, device 1 is a payment terminal. The payment terminal is, for example, an electronic payment terminal (POS) commonly found at retailers, such as supermarkets. The payment terminal can be configured to process a payment or to take a card imprint (for example, in the case of a car rental).
[0025] The payment terminal can be a cash withdrawal terminal, for example an automated teller machine (ATM).
[0026] The payment terminal can be a smartphone.
[0027] Device 1 includes data processing means 10. The data processing means 10 are advantageously a processor. The data processing means 10 are configured to implement, at least in part, the transaction process which will be described later.
[0028] The data processing means 10 are configured to communicate with other servers 3, for example a bank server, either wired or wirelessly.
[0029] System
[0030] With reference to Figure 1, a system 100 is proposed comprising a device 1 as previously presented and at least one biometric sensor 2.
[0031] Device 1 and biometric sensor 2 are configured to communicate with each other, either wired or wirelessly. For example, device 1 and biometric sensor 2 can be configured to communicate with each other via Bluetooth, Wi-Fi, or a near-field communication technology (e.g., NFC).
[0032] More specifically, biometric sensor 2 is configured to communicate acquired candidate biometric data to device 1.
[0033] In one embodiment, the biometric sensor 2 is mounted on the device 1. In other words, the biometric sensor 2 is physically connected to the device 1. Put another way, the biometric sensor 2 is permanently attached to the device 1. For example, the biometric sensor 2 can be clipped or screwed onto the device 1. In another embodiment, the biometric sensor 2 is removably attached to the device 1 so that the biometric sensor 2 can be detached from the device 1, for example, for maintenance purposes.
[0034] Alternatively, biometric sensor 2 is confused with device 1. In other words, device 1 is manufactured in such a way as to be equipped with biometric sensor 2. In other words, biometric sensor 2 and device 1 form the same object.
[0035] Biometric sensor 2 is configured to acquire candidate biometric data on at least one biometric trait of a user.
[0036] The biometric feature could be, for example, the palm of a hand, a finger, the vascular network of a hand, an iris, and / or a face. The iris is the iris of the eye. The iris is a circular, contractile membrane on the anterior surface of the eyeball and constitutes the visible colored part of the eye. The biometric sensor could include, for example, a camera, a fingerprint sensor, and / or an infrared emitter (particularly for detecting hemoglobin in veins), etc.
[0037] Advantageously, the biometric sensor 2 is configured to acquire biometric data from at least two different biometric traits, including a primary biometric trait and a secondary biometric trait. For example, the biometric sensor 2 can be configured to acquire biometric data relating to the palm of a hand and a vascular network of a hand.
[0038] The device 1 comprises, in one embodiment, at least two biometric sensors 2, of which a first biometric sensor 2 is configured to acquire primary candidate biometric data on the primary biometric trait and a second biometric sensor 2 is configured to acquire secondary candidate biometric data on the secondary biometric trait. For example, the first biometric sensor 2 may be a camera configured to acquire biometric data of a face and the second biometric sensor 2 may be a fingerprint sensor configured to acquire biometric data of a finger.
[0039] System 100, for example, is installed in a store, such as a supermarket, and allows for secure payment transactions. System 100 can also be installed in company premises and allows access to be granted or denied, depending on whether the user is authorized to enter.
[0040] Process
[0041] With reference to figures 2 and 7, a method for implementing a transaction is proposed.
[0042] The process can involve implementing the transaction based on user identification. In other words, only biometric data will be used to identify the user and then implement the transaction, as described later. Alternatively, the process can involve implementing the transaction based on user authentication. For example, the user presents their bank card to a terminal, and their identity is then confirmed using biometric data.
[0043] Advantageously, the method includes a step (a0), implemented by at least one biometric sensor 2 of the system 100, for acquiring primary candidate biometric data on the user's primary biometric trait and secondary candidate biometric data on a user's secondary biometric trait. The primary candidate biometric data and the secondary candidate biometric data can be acquired by the same biometric sensor 2 or by different biometric sensors 2.
[0044] Candidate biometric data characterizes a biometric trait. For example, depending on the biometric data acquisition technology, if the biometric trait is the vascular network of a hand, the candidate biometric data includes the coordinates of points where veins intersect. These points, if sufficient, allow for user identification. A person skilled in the art is familiar with the various techniques for acquiring candidate biometric data for a biometric trait.
[0045] Candidate biometric data is called "candidate" because it aims to identify the user and, for this purpose, aims to be compared to reference biometric data which is associated with reference individuals.
[0046] Advantageously, primary candidate biometric data allows for more secure user identification than secondary candidate biometric data. This may be due, for example, to the type of biometric data involved; primary candidate biometric data can be more distinctive than secondary candidate biometric data, resulting in a lower false positive rate (i.e., when a user is identified as another user). Consequently, primary candidate biometric data is initially prioritized for user identification.
[0047] Advantageously, the primary biometric feature is the venous network of a hand, specifically the network visible on the palm, and the secondary biometric feature is the palm of the hand. It can also be the reverse.
[0048] The user is a person wishing to carry out a transaction, for example a payment.
[0049] Advantageously, the user has previously undergone an enrollment process in order to provide reference biometric data and transaction data.
[0050] Referring to Figure 3, a first primary database 15 stores initial primary reference biometric data DBRP1 for a first plurality of reference individuals. The first primary database 15 is advantageously stored in a memory of device 1.
[0051] A first transaction database 17 stores initial DT1 transaction data relating to the individuals in the first plurality of reference individuals for whom the first primary database 15 stores initial primary biometric reference data. The first transaction database 17 is advantageously stored in a memory location of the device 1. The individuals in the first plurality of reference individuals have thus enrolled by providing initial primary biometric reference data and initial transaction data. Enrollment may have been carried out, for example, at a store, possibly via a website or mobile application.
[0052] The first primary reference biometric data and the first transaction data of an individual are associated.
[0053] They can be directly associated. For example, in this case, the first primary database 15 is confused with the first transaction database 17 as illustrated in Figure 3. In other words, the first primary database 15 and the first transaction database 17 form a single database in which, for each individual in the first plurality of reference individuals, first transaction data DT1 are associated with first primary reference biometric data DBRP1.
[0054] Data can be associated indirectly. For example, in this case, for each reference individual, the first primary database 15 contains a primary identifier (PI) associated with the first primary reference biometric data (PRB1), and this primary identifier (PI) is associated with the first transaction data (DT1) in the first transaction database 17, as illustrated in Figure 4. Thus, the primary identifier (PI) allows retrieval, in the first transaction database 17, of the first transaction data (DT1) corresponding to the individual whose first primary reference biometric data (PRB1) is associated with the primary identifier (PI). The primary identifier links the first transaction data to the first primary biometric data.
[0055] A secondary database 18 stores secondary reference biometric data (DBRS) for a second plurality of reference individuals. The secondary database 18 is advantageously stored on a server remote from device 1, for example, a bank server.
[0056] A second primary database 16 stores second primary reference biometric datasets (DBRP2) for a second plurality of reference individuals. The second primary database 16 is advantageously stored on a server remote from device 1, for example, a bank server.
[0057] In this case, it is understood that primary reference biometric data are stored in both the first primary database 15 and the second primary database 16. This primary reference biometric data was advantageously acquired from the same primary biometric feature, for example, a vein pattern in a hand. This primary reference biometric data may be identical, meaning it was acquired at the same time by the same biometric sensor and subsequently recorded in both the first primary database 15 and the second primary database 16.
[0058] Alternatively, these primary reference biometric data sets may be different, meaning they were acquired at different times by different biometric sensors. For example, the first primary reference biometric data set may have been acquired in a store when an individual enrolled at that store, and the second primary reference biometric data set may have been acquired in a bank when an individual enrolled at that bank.
[0059] Advantageously, secondary reference biometric data is associated, directly or indirectly, with the second primary reference biometric data.
[0060] In the example illustrated in Figure 5, the secondary reference biometric data DBRS is directly associated with the second primary reference biometric data DBRP2.
[0061] Advantageously, as illustrated in Figure 6, the secondary reference biometric data (DBRS) is indirectly linked to the second primary reference biometric data (DBRP2). Specifically, in secondary database 18, for each reference individual, the secondary reference biometric data (DBRS) is linked to a secondary identifier (IDS) of the reference individual. Furthermore, in the second primary database 16, for each reference individual, the second primary reference biometric data (DBRP2) is linked to a secondary identifier (IDS) of the reference individual. Thus, the secondary identifier (IDS) allows for the linking of secondary reference biometric data (DBRS) to the second primary reference biometric data (DBRP2) of a reference individual.
[0062] A second transaction database 19 stores second transaction data relating to the individuals in the second plurality of reference individuals for whom the second primary database 16 stores second primary biometric reference data. The second transaction database 19 is advantageously stored on a remote server of device 1.
[0063] The individuals in the second plurality of reference individuals therefore enrolled by providing at least secondary reference biometric data and second transaction data, and possibly second primary biometric data. Enrollment may have been carried out, for example, through a bank, possibly via a website or mobile application.
[0064] An individual's secondary reference biometric data and second transaction data are associated, either directly or indirectly.
[0065] Figure 6 illustrates the second transaction database 19, which includes second transaction data 2 associated with secondary identifiers (IDS). In this example, the secondary reference biometric data (DBRS) and the second transaction data (DT2) are associated indirectly, via the secondary identifier (IDS).
[0066] The first plurality of reference individuals includes at least one reference individual in common with the second plurality of reference individuals.
[0067] The first plurality of reference individuals can be identical to the second plurality of reference individuals.
[0068] Transaction data is data that enables the execution of a transaction. For example, transaction data can be payment data used to process a payment at a payment terminal, such as bank details. For instance, it could be data representing a digital bank card. Alternatively, transaction data can be data used to grant access to a restricted area (for example, via security gates).
[0069] The first transaction data and the second transaction data are advantageously identical.
[0070] The process includes a step a) of obtaining, by means of data processing means 10, the primary candidate biometric data and the secondary candidate biometric data of the user. For this purpose, the data processing means 10 receives the data from the biometric sensor 2, once the biometric sensor 2 has acquired said data.
[0071] Advantageously, the process includes a step bO) of comparing the primary candidate biometric data with the first primary reference biometric data from the first primary database 15. Step bO) aims to determine whether the primary candidate biometric data coincide with the first primary reference biometric data.
[0072] In practice, and preferably, at the end of the comparison, a maximum of one reference individual is identified; that is, the primary reference biometric data of a single reference individual are considered to match the first primary candidate biometric data. It should be noted that, in the case of authentication, the first primary candidate biometric data will be compared only with the primary reference biometric data of the single reference individual whose identity is being verified.
[0073] The comparison may result in the determination of no primary biometric reference data. In other words, no reference individual matches the user, for example, if the user has never been enrolled or if the acquired data is of insufficient quality.
[0074] The methods for comparing biometric data are known to those skilled in the art.
[0075] Step bO) can be implemented by means of data processing 10.
[0076] Alternatively, step b0) can be implemented by a remote server to device 1, which stores, among other things, the first primary database 15 and optionally the first transaction database 17. In this case, the data processing means 10 transmits the primary candidate biometric data to this remote server, which performs the comparison. The remote server then sends the result of the comparison to the data processing means 11, which may be an identifier of a reference individual, enabling the data processing means to identify first transaction data relating to the user in the first transaction database 17. Alternatively, the remote server sends the first transaction data relating to the user directly to the data processing means.
[0077] If the primary candidate biometric data matches the primary reference biometric data, the process includes a step (b) of obtaining, by the data processing means 10, the first transaction data relating to the user. The first transaction data obtained is that associated with the first primary reference biometric data that matches the primary candidate biometric data. As explained, the first transaction data can be directly determined by the data processing means 10 that performed the comparison, directly sent by a remote server to the data processing means 10, or determined by the data processing means 10 from a result of the comparison performed by the remote server.
[0078] Advantageously, step b) involves retrieving, from the first primary database 15, the primary identifier associated with the first primary reference biometric data that coincides with the primary candidate biometric data. Then, the primary identifier is also retrieved from the first transaction database 17 to obtain the first transaction data associated with it. The first transaction data obtained is therefore that associated with the primary identifier in the first transaction database 17. Obtaining the first transaction data is thus more secure because there is no direct association, within the same database, between the first primary reference biometric data and the first transaction data.
[0079] In this case, the transaction can be implemented in a step d) using the initial transaction data.
[0080] If the primary candidate biometric data do not coincide with any primary reference biometric data, the process advantageously includes a step c0) of comparing the secondary candidate biometric data with the secondary reference biometric data.
[0081] Indeed, if the primary reference candidate biometric data does not allow the user to be identified and transaction data to be obtained, secondary candidate biometric data is used to try to obtain transaction data.
[0082] Advantageously, this comparison is implemented by a server remote from device 1, for example, a bank server. The data processing means 10 transmit the secondary candidate biometric data to the remote server, and the remote server, which advantageously stores the secondary database 18, compares the secondary candidate biometric data with the secondary reference biometric data.
[0083] If the primary candidate biometric data does not match any primary reference biometric data, and if the secondary candidate biometric data does not match any secondary reference biometric data, then the transaction cannot be completed using the user's biometrics. To enable the transaction to be completed, the user may advantageously identify (or authenticate) themselves in another way. For example, they may be asked for a username and password, or their identity card may be requested.
[0084] If the primary candidate biometric data does not match any primary reference biometric data, and if the secondary candidate biometric data matches secondary reference biometric data, the process includes implementing a processing step to carry out the transaction, said step being determined based on said secondary reference biometric data. Said secondary reference biometric data is that which matches the secondary candidate biometric data, i.e., the secondary reference biometric data found in the secondary database that matches the secondary candidate biometric data.
[0085] The implementation of the processing advantageously includes: c1) obtaining second user-related transaction data associated with the secondary reference biometric data; and c2) verifying that second primary reference biometric data from a second primary database associated with the secondary reference biometric data match the primary candidate biometric data; or c1') requesting a token for the implementation of the transaction based on the secondary reference biometric data; or c1'') obtaining additional primary candidate biometric data;and c2”) if the additional primary candidate biometric data coincide with first primary reference biometric data from the first primary database 15, obtaining first user-related transaction data associated with said first primary reference biometric data.;
[0086] The different methods of carrying out this treatment will be described later.
[0087] As will be detailed later, according to a first embodiment illustrated in Figures 2 and 7, if the primary candidate biometric data do not coincide with any first primary reference biometric data and if the secondary candidate biometric data do coincide with secondary reference biometric data, the process includes the steps of: c1) obtaining second user-related transaction data associated with the secondary reference biometric data; c2) verifying that second primary reference biometric data from a second primary database (16) associated with the secondary reference biometric data coincide with the primary candidate biometric data.If the secondary candidate biometric data coincide with secondary reference biometric data, the process includes a step c1) of obtaining by data processing means 10 second user-related transaction data associated with the secondary reference biometric data.
[0088] Advantageously, a remote server that has implemented the comparison transmits the second transaction data to the data processing means 10.
[0089] The process further includes a step (c2) of verifying that second primary reference biometric data from the second primary database 16, associated with the secondary reference biometric data, coincide with the primary candidate biometric data. In other words, it is first determined whether second primary reference biometric data is associated with the secondary reference biometric data. Then, the determined second primary reference biometric data is compared with the primary candidate biometric data.
[0090] The verification step c2) is implemented by the data processing means 10. By verification, it is understood that the data processing means 10 themselves implement the verification or that the data processing means 10 require the verification from a server.
[0091] Advantageously, step c2) involves retrieving, from secondary database 18, the secondary identifier associated with the secondary reference biometric data that matches the secondary candidate biometric data. Then, the second primary reference biometric data from the second primary database 16 that is compared to the primary candidate biometric data is that associated with the secondary identifier in the second primary database 16. In other words, here, the secondary identifier is used to determine the second primary reference biometric data associated with the secondary reference biometric data that matches the secondary candidate biometric data. This further secures the second primary reference biometric data.
[0092] The verification step c2) can be implemented prior to step c1), simultaneously with step c1), or after step c1). Preferably, the verification step c2) is implemented before step d) of implementing the transaction using the second transaction data.
[0093] Step c2) ensures a secure transaction even if the transaction could not be implemented from initial transaction data because no initial primary biometric reference data could be determined.
[0094] Indeed, even though identification was performed using secondary candidate biometric data, a verification is still carried out based on the primary candidate biometric data. If this verification is successful (i.e., the primary candidate biometric data matches the secondary primary reference biometric data), the transaction is guaranteed to be secure. This also avoids additional fees for the transaction, as it is guaranteed to be highly secure.
[0095] However, if the verification is unsuccessful (i.e., there are no second primary reference biometrics associated with the user's secondary reference biometrics, or the candidate primary biometrics do not match the second primary reference biometrics associated with the user's secondary reference biometrics), the transaction can still be processed but will be considered less secure. In this case, for example, the fees associated with the transaction will be higher because the transaction is considered less secure, and therefore a bank applies higher insurance fees.
[0096] It should be noted that, according to this embodiment, regardless of the outcome of verification step c2 (provided that the secondary candidate biometric data matches the secondary reference biometric data), the process includes a step d) for implementing the transaction using the second transaction data, if applicable. However, the implementation of the transaction will depend in this case on the outcome of verification step c2.
[0097] Indeed, the transaction can be guaranteed as secure if step c2) is successful (i.e., identification is still achieved using primary biometric data). Thus, even if step b) fails, for example because the initial primary reference biometric data is of poor quality, identification can still be performed based on the primary biometric data.
[0098] This could, for example, allow user access to be determined based on the transaction's security level. For instance, if the transaction is executed based on the first transaction data, or if the transaction is executed based on the second transaction data and step c2) was successful, the transaction can be considered highly secure. In the case of building access control for a user, if the transaction is highly secure, the user can be granted access to the entire building. Conversely, if the transaction is executed based on the second transaction data and step c2) was unsuccessful, the transaction can be considered less secure. In this case, the user might have access to part of the building but not the entire building.
[0099] It is understood that, if step b) is successful (i.e. identification is successful on the basis of the primary candidate biometric data and the first primary reference biometric data), the process includes a step d) of implementing the transaction using the first transaction data.
[0100] If step b) is not successful and step c0) of comparison is successful (i.e. the secondary candidate biometric data coincide with secondary reference biometric data), the process includes a step d) of implementing the transaction using the second transaction data and depending on the result of step c2) of verification.
[0101] Thus, advantageously, according to the first embodiment, the data processing means 10 of device 1 are configured to control the implementation of the transaction from the first transaction data obtained or the second transaction data obtained and from the result of step c2) of verification whether the transaction is implemented from the second transaction data
[0102] According to a second embodiment illustrated in Figure 7, if the primary candidate biometric data does not coincide with any first primary reference biometric data and if the secondary candidate biometric data coincides with secondary reference biometric data, the implementation of the processing includes the request to obtain c1') a token for the implementation of the transaction based on the secondary reference biometric data.
[0103] In other words, it is not transaction data itself that is being sought, but rather a token, which will allow the transaction to be implemented in a highly secure manner. The token is associated with the user identified based on secondary biometric reference data. The token should not be confused with the transaction data, as both are necessary for the transaction to be implemented in this method. The token is a unique security element associated with the transaction to secure the payment. However, the use of such a token may increase transaction fees.
[0104] Data processing methods 10 require, in practice, a token from a remote server such as a banking server. The token will enable the transaction to be carried out securely.
[0105] The data processing means 10 can obtain the token and then implement the transaction. Alternatively, the data processing means 10 can request the token from and through a remote server, for example, a banking server. In other words, it is the remote server (and not the data processing means 10, which will have merely initiated this retrieval) that will obtain the token, based on the secondary biometric reference data, and then implement the transaction.
[0106] The token will allow obtaining transaction data relating to the user, called third transaction data, for example from a bank server which will allow the implementation of d) of the transaction.
[0107] According to a third embodiment illustrated in Figure 7, if the primary candidate biometric data do not coincide with any first primary reference biometric data and if the secondary candidate biometric data do coincide with secondary reference biometric data, the implementation of the processing includes: c1”) obtaining additional primary candidate biometric data; c2”) if the additional primary candidate biometric data coincide with first primary reference biometric data from the first primary database 15, obtaining first user-related transaction data associated with said first primary reference biometric data.
[0108] Advantageously, the method includes a step c0”), prior to step c1”), of acquiring additional primary candidate biometric data by the biometric sensor 2. Step c0”) is advantageously triggered by a request from the data processing means 10 to acquire additional primary candidate biometric data. The additional primary candidate biometric data is different from the primary candidate biometric data acquired in step a0) and obtained in step a). The additional primary candidate biometric data can be called second primary candidate biometric data, and the primary candidate biometric data acquired in step a0) and obtained in step a) can be called first primary candidate biometric data.
[0109] Additional primary candidate biometric data is advantageously acquired on the user's primary biometric trait.
[0110] Step c1) therefore consists of attempting to re-identify the user based on biometric data acquired for the user's primary biometric trait. If the secondary candidate biometric data matches secondary reference biometric data, the user has been identified, and therefore there are normally primary reference biometric data recorded in the primary database for that user, which could allow the transaction to be carried out securely. The initial primary candidate biometric data may have been acquired incorrectly, so it is necessary to repeat the acquisition of such data.
[0111] It is therefore verified, similarly to step b0), whether the additional primary candidate biometric data matches the primary reference biometric data in the first primary database 15. If so, initial transaction data relating to the user is obtained, and the transaction can advantageously be implemented d) based on this transaction data. If not, the transaction cannot be implemented using the user's biometrics. To enable the user to implement the transaction, advantageously, the user may identify (or authenticate) themselves in another way. For example, they may be asked for a username and password, or their identity card may be requested.
[0112] Thus, the transaction can be implemented securely even if, in step b), the primary candidate biometric data did not match the initial primary reference biometric data. This third embodiment is both secure and highly efficient because it repeats the biometric data acquisition step for the user's primary trait only if there is strong suspicion that the user is indeed present in the primary database 15, that is, if the secondary candidate biometric data match the secondary reference biometric data.
[0113] Conversely, if there is no match for either the primary or secondary data, further processing is unnecessary (for example, re-acquiring biometric data on the primary biometric trait) since the user is very likely not authorized to carry out the transaction. Regardless of the embodiment, advantageously, step d) of transaction implementation means that Device 1 commands the execution of said transaction. The transaction is implemented in practice by Device 1 and by other elements such as one or more remote servers (for example, a banking server). In other words, the data processing means 10 of Device 1 are advantageously configured to command the execution of the transaction.
Claims
DEMANDS 1. A method for implementing a transaction, the method being implemented by means of data processing (10) and comprising the following steps of: a) obtaining primary candidate biometric data and secondary candidate biometric data of a user; b) if the primary candidate biometric data coincide with first primary reference biometric data from a first primary database (15), obtaining first transaction data relating to the user associated with the first primary reference biometric data;(c) if the primary candidate biometric data do not match any primary reference biometric data and if the secondary candidate biometric data match any secondary reference biometric data, implementation of a process for the implementation of the transaction, said process being determined based on said secondary reference biometric data.
2. Method according to claim 1, wherein said implementation of the processing comprises: c1') request to obtain a token for the implementation of the transaction based on the secondary biometric reference data.
3. A method according to claim 1, wherein said implementation of the processing comprises: (c1) obtaining additional primary candidate biometric data; (c2) if the additional primary candidate biometric data coincide with first primary reference biometric data from the first primary database (15), obtaining first user-related transaction data associated with said first primary reference biometric data.
4. A method according to claim 1, wherein said implementation of the processing comprises: c1) obtaining second user-related transaction data associated with the secondary reference biometric data; c2) verifying that second primary reference biometric data from a second primary database (16) associated with the secondary reference biometric data coincide with the primary candidate biometric data.
5. A method according to claim 4, wherein step c2) comprises obtaining, in a secondary database (18), a secondary user identifier associated with the secondary reference biometric data coinciding with the secondary candidate biometric data and wherein, in step c2), the second primary reference biometric data of the second primary database (16) associated with the secondary reference biometric data are the second primary reference biometric data associated with the secondary identifier in the second primary database (16).
6. A method according to any one of claims 1 to 5, comprising a step d) of ordering the implementation of the transaction.
7. A method according to claim 6 when it depends on any one of claims 4 and 5, wherein step d) of ordering the implementation of the transaction is carried out from the first transaction data obtained or the second transaction data obtained and from the result of step c2) of checking whether the transaction is implemented from the second transaction data.
8. A method according to any one of claims 1 to 7, wherein step b) comprises obtaining, in the first primary database (15), a primary user identifier associated with the first primary reference biometric data coinciding with the primary candidate biometric data and wherein, in step b), the first transaction data obtained are those associated with the primary identifier in a first transaction database (17).
9. A method according to any one of claims 1 to 8, comprising a step a0), implemented by a biometric sensor, of acquiring primary candidate biometric data on a primary biometric trait of the user and secondary candidate biometric data on a secondary biometric trait of the user.
10. Method according to claim 9, wherein the primary biometric feature is a vascular network of a user's hand and the secondary biometric feature is a palm of the user's hand.
11. A method according to any one of claims 1 to 10, wherein the transaction is a payment and the transaction data is bank data.
12. Device (1) for implementing a transaction, the device (1) comprising data processing means (10) configured to: a) obtain primary candidate biometric data and secondary candidate biometric data of a user; b) if the primary candidate biometric data coincide with primary reference biometric data from a first primary database (15), obtain first transaction data relating to the user associated with the primary reference biometric data; c) if the primary candidate biometric data do not coincide with any primary reference biometric data and if the secondary candidate biometric data coincide with secondary reference biometric data, implement a process for implementing the transaction, said process being determined based on said secondary reference biometric data.
13. Device (1) according to claim 12, characterized in that the device (1) is a payment terminal.
14. System (100) for implementing a transaction comprising a device (1) according to any one of claims 12 and 13 and comprising a biometric sensor (2), the device (1) and the biometric sensor (2) being adapted to communicate with each other.