AU2016102060A4 - A mobile authentication and sales terminal - Google Patents

Abstract

H:\dxl\Interwoven\NRPortbl\DCC\DXL\2184705_I.docx-30/1/2016 A mobile device including a processor, memory and wireless communications for executing remote transactions; and an integrated palm vein sensor for palm vein authentication of the 5 transactions. (g)

Description

H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 - 1 -

A MOBILE AUTHENTICATION AND SALES TERMINAL

FIELD 5 The present invention relates to a mobile device that can be used for authentication or sales. In particular, the device is a mobile terminal that is wireless, includes integrated palm vein authentication and can be used for local and remotely controlled secure transactions, payments and remote assisted sales.

10 BACKGROUND

There are considerable difficulties associated with providing banking and authentication remotely, particularly in areas where there is small bandwidth. There is also difficulty with biometrics which can be intrusive, slow, inaccurate or ineffective. 15

It is desired to address the above or provide at least a useful alternative.

SUMMARY 20 At least one embodiment of the present invention provides a mobile device including: a processor, memory and wireless communications for executing remote transactions; and an integrated palm vein sensor for palm vein authentication of the transactions. 25 The mobile device may include a kiosk mode to assist with sales or payments, and the device can be remotely controlled, for example over a communications network by a person other than an operator holding the device.

At least one embodiment of the present invention also provides mobile authentication and 30 point of sale terminal including a palm vein biometric sensor for authenticating a customer for H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 -2- sales or secure payments against a palm vein biometric signature of the customer stored in a remote database system.

The mobile terminal can be adapted to connect to an external display, e.g. wirelessly, for 5 generating displays for remote assistance and selling of products and/or services.

The terminal may also operate in a kiosk mode to add customer data stored in association with the customer's palm vein biometric signature. In the kiosk mode a payment request may be brokered to obtain an optimum deal for said customer. 10

The terminal can be adapted to be remotely controlled to control at least one of palm vein scan, taking of photographs, document scanning, voice capture and other data capture using the terminal. The terminal is preferably waterproof. 15 At least one embodiment of the present invention also provides a mobile authentication and point of sale terminal including a palm vein biometric sensor for sales or secure payments and has hand sensing and placement sensing for hand positioning.

At least one embodiment of the present invention provides also mobile authentication palm 20 vein biometric device adapted to identify a person, e.g. at the scene of an accident or students getting off a bus, against a remote central database.

The mobile device may be adapted to automatically switch the orientation of the palm biometric scanning to match the orientation of a user's hand. 25

DRAWINGS

Embodiments of the present invention are described herein, by way of example only, with reference to the accompanying drawings, wherein: 30 Figure 1 is a diagram of views of a preferred embodiment of a mobile device according to the present invention; H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 -3-

Figure 2 is a diagram of the mobile device illustrating operation with a credit or debit card and accessories;

Figure 3 is screen shots of displays generated on a touch screen of the device during an operator setup process executed by the device; 5 Figure 4 is screen shots of displays generated by the device during a payment process executed by the device;

Figure 5 is screen shots of displays generated by the device during an authorisation process executed by the device;

Figure 6 is screen shots of displays generated by the device during a kiosk process executed by 10 the device; and

Figures 7 and 8 are screen shots of displays generated by the device during a customer registration process executed by the device.

DETAILED DESCRIPTION 15

An embodiment provides a multi-mode secure mobile device, as shown in Figure 1, that includes an integrated palm vein sensor 102 such as the Fujitsu PalmSecure sensor for authentication, secure transactions and remote assisted sales. This palm vein sensor 102 physically measures 35(W) x 35(D) x 27(H) mm and the device seamlessly integrates this 20 sensor into a unique rugged hand held mobile device that also includes a touch screen display.

The device can remotely perform card terminal processing of magnetic swipe, chip and contactless payment (eg. RFID) cards secured against a customer’s palm vein biometric signature. Unlike other biometric devices, a palm vein sensor operates sub-dermal (ie. 25 scanning under the skin to obtain vein patterns) and is virtually impossible to compromise. The device provides security measures for secure transactions as documented by the Payment Card Industry Data Security Standard (PCI DSS).

The device can also scan non-credit cards (eg. membership, employment, travel, access cards). 30 A further option enables this device to scan barcoded items and take photos. All of these items can be linked centrally into a remote database system hosted on a computer network accessible H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 -4- by a communications network (e.g. Cloud storage on the internet) against (i.e. associated and linked to) the customer’s palm vein biometric signature.

The device also incorporates a rechargeable battery (which can be optionally wirelessly 5 charged) an external USB and HDMI port to link the device to external devices like docking station, keyboards, document scanners and/or computer monitors to extend the functionality of the device into a self-serve sales kiosk. It also incorporates wireless display technology which allows media to be wirelessly sent to a compatible display device. 10 In kiosk mode a customer can also request the help of a remote skilled and licensed operator. The operator can help the customer with complex product sales remotely without the need for the customer to do any keyboard entry using unified communications (eg. Voice, video and screen sharing). The operator can also remotely control the palm vein biometric scanner, camera, document scanning and other USB devices. 15

The length of the device is approximately 290 mm, the width is 100 mm and the height is 80mm. The surface area is approximately 196,151 mm squared and the volume of the device is 203,810 mm cubed. 20 Physical Device

Figure la is a perspective view of the mobile device;

Figure lb is a top plan view thereof showing the palm vein sensor and the touch screen; Figure lc is a bottom plan view thereof;

Figure Id is a front plan view thereof; 25 Figure le is a right hand side elevation view thereof;

Figure If is a left hand side elevation view thereof; and

Figure lg is a rear elevation view thereof showing the touch screen.

The palm vein sensor 102 is inbuilt along with a magnetic card swipe, tap RFID and smart 30 card chip reader. The device may also constructed to be able to be hinged into a flip, sliding or folding format for optimal mobility/portability. The hand guides above the sensor 102 can also H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/l 1/2016 2016102060 30 Nov 2016 -5- be swapped or rotated so the scanning of the hand can be flipped 180 degrees. This allows scanning of the hand from either in front of the palm vein biometric sensor 102 as well as behind the sensor. 5 Hardware Specifications

Processor Intel CPU or similar (ARM, Snapdragon)

Operating System: Microsoft Windows / Linux / Android or iOS Display high contrast sunlight readable touch screen with multiple video GPU (ie. an external screen can display different screens to inbuilt touch screen if connected to the 10 device)

Memory RAM 2 GB (minimum), Main storage 8 GB SSD (minimum)

Network GSM Quad Band 3G and 4G (worldwide mobile cellular bands) circuits Radio connectivity Wi-Fi b/g/n/ac network card Wireless sending of data (eg. WIDI / Miracast) 15 Location GPS Transceiver

Battery High Capacity Type, Rechargeable, Replaceable, Wireless Charging Camera 2.0 MP (minimum)

Alerts Accelerometer Vibrate Alert, LED

Approx. Dimensions / Weight 290(L) x 100(W) x 80(H) mm / 700 g 20 Light beam hand positioning system

Audio and visual hand positioning indicators

Peripheral Connectivity Micro HDMI

25 Micro USB (OTG) Micro SD

SIM Card Slot Charging & Docking I/O 3.5mm Jack Connector for external speaker or headphone

Wireless display eg. WIDI / Miracast / Chromecast to send to a compatible display 30 Dual Microphones

Stereo Speakers 2016102060 30 Nov 2016 H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 -6-

Hardware Interface

Volume Control +/- buttons Call Key 5 End Key

Power Switch - Sleep/Standby, Screen/Key Lock

Card Readers and Sensors

Magnetic Swipe Car Reader Tap 10 RFID Card Reader Smart Chipped

Card Reader

Modules NFC radio communications 15 Palm vein sensor

Barcode Scanner QR-Code (Quick Response) Scanner Other USB devices

Second High Quality Camera (6 MP minimum) 20 Weather proof device skin

Secure Fixed Desktop Mount with Integrated Charging & Docking IO DLNA

Active hand guide which automatically detects hand orientation Active hand guide which uses acrylic lighting for visual feedback 25 H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 -7-

Device Operation

As shown in Figure 2, the device can accept a magnetic biodirectional swipe card (Figure 2a). The device has an expansion micro USB and micro HDMI interfaces (Figure 2b). The device 5 can accept a card with a security chip when the card is inserted from the top, as shown in Figure 2c. A secure docking station can be provided to charge and connect to the device as shown in Figure 2d. The mobile device can also include RFID and NFC modules so as to accept tap authorisation of a credit or debit card, as shown in Figure 2e. The device may also include a barcode scanner or a camera, as shown in Figure 2f. 10

Device Software

The device includes a software interface that generates on the touch screen displays, as shown in Figures 3 to 8, with large buttons and using a high contrast colour scheme for optimum 15 visibility for outside use in daylight.

The device has software enabling both cellular phone calls and Voice Over IP (VoIP) calls.

The device executes an operator set up process that allows an operator to be registered against 20 one or many devices. An operator is needed to enable the device for customers. An operator palm scan is also needed to authorize transactions that are for example deemed special and/or high value transaction.

The process is invoked when a Gear Icon is selected, as shown in Figure 3a. The Setup 25 Operator Details are then entered in the next display interface that is generated as shown in Figure 3b. Once completed, the next display prompts the user to place their right hand over the sensor 102 to perform an Operator Registration Right hand process, as shown in Figure 3c. This is followed by an Operator Registration Left hand process, as shown in Figure 3d. 30 The device also executes a payment process that allows the operator to process a payment with a customer. The payment parameters can be set using the device or via a communications link H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/l 1/2016 2016102060 30 Nov 2016 -8- to a separate point of sale computer system. The payment process can use a single payment service or merchant or be brokered to multiple payment services or merchants.

The device can also be used to remotely perform transactions and/or identification using 5 distributed ledger technology, such as that provided by a blockchain distributed computing platform (as used by Bitcoin or Ethereum). The ledger of the blockchain is able to store transaction data records with and against (i.e. in association) with a customer’s palm vein biometric signature. 10 The payment process, once invoked, involves firstly generating a display interface, as shown in Figure 4a, where the payment transaction data can be entered, such as the amount, the customer account and then the method of authentication selected. If a Palm button is selected, then the customer is asked to authenticate themselves by entering a personal identification number (PIN) and then scanning their left or right hand using the sensor 102, as shown in the 15 interface of Figure 4c. If authentication is successful, then a payment successful display is generated, as shown in Figure 4c, that advises of the success and a receipt is sent to the customer. If authentication fails, then a failed display interface is generated advising that the payment has been declined, as shown in Figure 4d. 20 The mobile device can also be used to provide authentication for other non financial purposes, such as entry to premises. For example, as shown in Figure 5a, an identification display interface can be generated for entry to a gym, whereby the customer is asked to enter a PIN and then scan their left or right hand using the sensor 102. If the authentication is successful and the customer is considered authorised, then a display interface is generated, as shown in 25 Figure 5b, to advise of correct identification. If authorisation fails, then an invalid identification interface is displayed, as shown Figure 5c.

The mobile device also has a kiosk mode that allows a customer to use the device with a larger external screen if required with or without help from a remote operator. The kiosk mode 30 allows the customer access to a range of additional help services beyond using the device as a mere payment terminal. For example, a kiosk display interface is generated when the mode is H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 -9- selected, as shown in Figure 6a, and it allows the user to select a range of options, such as opening different types of financial accounts, purchasing insurance or requesting remote assistance. If one of the new accounts is selected, as shown in Figure 6b, a display is generated that allows the customer to enter the required details to open the account. The 5 device can connect to an additional display and if an additional large screen display is detected, such as an external computer monitor, then when remote assistance is selected, a large display is generated to allow the entry of customer data and to communicate with a remote call assistance operator, if necessary, as shown in Figure 6c. 10 Once a customer or operator is registered using the device, their identification/authentication data is stored remotely on a secure computer database system accessible by a communications network. Registration is only required to be performed once on any one of the devices and can later not only be used on the device but also other devices using the same palm vein sensor for both financial and non-financial transactions. 15 A customer can be registered to use the mobile device by invoking a customer registration process that generates display interfaces as shown in Figures 7 and 8. A first interface, as shown in Figure 7a, allows a customer to enter their personal details, such as their name and telephone number. A second interface, as shown in Figure 7b allows a customer to enter 20 further personal details such as email address and date of birth. Then a subsequent interface, as shown in Figure 7c, allows a customer to enter details associated personal cards, such as credit or debit cards. Once the personal account details are submitted for a customer, the customer is then asked to scan their right hand using the sensor 102, as shown in Figure 7d, and then scan their left palm, as shown in 8a. On completing two successful scans of their left 25 hand and right hand palms, the customer is then advised, as shown in Figure 8b, that the registration is successful and the cards have been linked. The account data for the cards that have been submitted and the customer personal data is stored and linked to the palm vein scan data for the customer’s palms in a secure remote computer database system that is readily accessible over a communication network, such as the internet, and EFTPOS networks. The 30 palm vein scan data constitutes the customers unique palm vein biometric signature for each hand of the customer. H:\dxl\Interwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 - 10-

The mobile device can remotely perform card terminal processing of magnetic swipe, chip and Tap (RFID/NFC) secured against the customer’s palm vein biometric signature. Unlike other biometric devices, the palm vein is sub-dermal (ie. scanning under the skin for veins) and is 5 virtually impossible to compromise. The palm vein sensor 102 uses a near field camera to take an image of the veins in a palm and uses these as the biometric signature for a customer or operator.

The biometric feature means each device has a unique identification and can only be accessed 10 by approved operators. Operators are preregistered before the device is allocated to them using a device ID (identification) to ensure security. The device ID data is stored in association with the operator biometric data and used for authentication of operators. Each operator can be preregistered with multiple device IDs and each device can be accessed by approved operators for that device. 15

The device can be reconfigured remotely by accessing configuration information from a communications network and remote database system. The device records all activity as well as geographic location where available to enable tracking from a central location to ensure security. If the device is compromised, it can be immediately wiped remotely of all data. 20 Sensitive information, e.g. credit card details, is not stored on the device.

The device is unlocked by an accredited operator using their login and their palm vein biometric before it can be used. After a preset period of inactivity, the device will self-lock to ensure the device is secure should it be lost or stolen. If the device is reported as lost or stolen, 25 it can be remotely disabled and wiped.

Access to the device for both operators and customers can be performed in several ways involving, for example, two factor authentication with one factor being the user’s biometric signature data. For example authentication may require: 30 (i) Palm vein scan only (ii) PIN number and palm vein scan H:\dxl\fiUerwoven\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 2016102060 30 Nov 2016 - 11 - (iii) Password or Pass phrase and palm vein scan (iv) Mobile Phone number and palm vein scan (v) Date of Birth and palm vein scan (vi) Email and palm vein scan 5 (vii) Wearable device with ID chip (eg. ring, necklace, watch etc.) and palm vein scan (viii) RFID/NFC via pc, tablet, card or mobile phone and palm vein scan

Access to the customer’s information may also be available via a dedicated website accessing a computer network using a secure authenticated connection. 10

Once the device has been unlocked by the operator it can be used to perform a number of functions as shown in Figure 2.

The device has more processor power than normal payment or EFTPOS terminals and can not 15 only deal with a single payment service or merchant but can quickly broker a payment request to obtain the best deal for a customer if required. For example, a customer wishes to spend $100 on Visa. The device can quickly shop this customer request amongst several services or merchants to get the best rate to do a Visa transaction for $100. It is possible that if the transaction was for say $1,000 it may be that a different service or merchant may provide a 20 better rate. All this is done in the background and seamless to the customer.

This device can also scan non-credit cards (eg. membership, employment, travel, access cards), barcoded items and take photos. All of these items can be linked remotely in the central computer database system against the customer’s palm vein biometric signature. Once the 25 customer is registered, they will also be able to access all their details and transactions from the central database system via a website. They will have the ability to view amend and add further registered cards, view their emailed receipts from vendors in additional to general profile maintenance. 30 In effect, any personal card can be stored remotely via the device and linked to the customer’s palm biometric signature. This can extend the use of the device from banking and financial 2016102060 30 Nov 2016 H:\dxl\fnterwoveii\NRPortbl\DCC\DXL\12184705_l .docx-30/11/2016 - 12- services into other markets for example health, law enforcement, retail, membership and identity registers. Adding a document scanner and high resolution camera, the device can be extended to the logistics, environmental, data collection industries. Virtually any situation where there is a need to accurately identify an individual using a biometric signature. 5

The device can incorporate a rechargeable battery, an external micro USB, micro HDMI port and/or wireless screen mirroring to link the device to external devices like displays, monitors, mouse, keyboard, document scanners and/or computer monitors to extend the functionality of the device into a self- serve sales kiosk e.g. branchless and mobile banking and authentication. 10

In kiosk mode the customer can either use the kiosk in a do it yourself mode (DIY) or request the help of a remote skilled and licensed operator. The operator can help the customer with complex product sales using unified communications (e.g. voice, video screen sharing) without the need for the customer to do any keyboard entry. The operator can also remotely 15 control the palm vein scanning, camera and document scanning using the communications capabilities of the device via the internet.

If required the remote operator will be able to communicate from a remote call center and share screens, text chat speak and provide video on the mobile device and connected displays. 20 The content of the screens being shared are usually from a dedicated website.

The device can detect if an external screen is connected or available and can output or stream to the external screen. The device readjusts the information and layout on the screen to be optimal for the external screen. 25

Many modifications will be apparent to those skilled in the art without departing from the scope of the present invention.

Claims (14)

1. THE CLAIMS DEFINING THE INVENTION ARE AS FOLLOWS:

   1. A mobile device including: a processor, memory and wireless communications for executing remote transactions; and an integrated palm vein sensor for palm vein authentication of the transactions.
2. 2. A mobile device as claimed in claim 1, including a kiosk mode to assist with sales or payments.
3. 3. A mobile device as claimed in claim 1 or 2 adapted to be remotely controlled over a communications network by a person other than an operator holding the device.
4. 4. A mobile authentication and point of sale terminal including a palm vein biometric sensor for authenticating a customer for sales or secure payments against a palm vein biometric signature of the customer stored in a remote database system.
5. 5. A mobile terminal as claimed in claim 4, wherein the terminal is adapted to connect to an external display for generating displays for remote assistance and selling of products and/or services.
6. 6. A mobile terminal as claimed in claim 4 or 5, wherein the terminal is adapted to operate in a kiosk mode to add customer data stored in association with the customer's palm vein biometric signature.
7. 7. A mobile terminal as claimed in claim 4,5 or 6, wherein in said kiosk mode a payment request is brokered to obtain an optimum deal for said customer.
8. 8. A mobile terminal as claimed in claim 4,5,6 or 7 adapted to be remotely controlled to control at least one of palm vein scan, taking of photographs, document scanning, voice capture and other data capture using the terminal.
9. 9. A mobile terminal as claimed in any one of claims 4 to 8 which is waterproof.
10. 10. A mobile authentication and point of sale terminal including a palm vein biometric sensor for sales or secure payments and has hand sensing and placement sensing for hand positioning.
11. 11. A mobile authentication palm vein biometric device adapted to identify a person at the scene of an accident against a remote central database.
12. 12. A mobile authentication palm vein biometric device adapted to identify a person against a central database.
13. 13. A mobile device as claimed in claim 11 adapted to automatically switch the orientation of the palm biometric scanning to match the orientation of a user's hand.
14. 14. A mobile device or terminal as claimed in any one of the preceding claims configured to execute transactions over a communications network using a blockchain based distributed computer platform.