CA2970007A1 - The bioid nfc smart card - Google Patents

The bioid nfc smart card Download PDF

Info

Publication number
CA2970007A1
CA2970007A1 CA2970007A CA2970007A CA2970007A1 CA 2970007 A1 CA2970007 A1 CA 2970007A1 CA 2970007 A CA2970007 A CA 2970007A CA 2970007 A CA2970007 A CA 2970007A CA 2970007 A1 CA2970007 A1 CA 2970007A1
Authority
CA
Canada
Prior art keywords
smart card
card
nfc
ecg
contactless
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CA2970007A
Other languages
French (fr)
Inventor
Yan Ru An
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to CA2970007A priority Critical patent/CA2970007A1/en
Publication of CA2970007A1 publication Critical patent/CA2970007A1/en
Pending legal-status Critical Current

Links

Classifications

    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/117—Identification of persons
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/24—Detecting, measuring or recording bioelectric or biomagnetic signals of the body or parts thereof
    • A61B5/316—Modalities, i.e. specific diagnostic methods
    • A61B5/318—Heart-related electrical modalities, e.g. electrocardiography [ECG]
    • A61B5/333—Recording apparatus specially adapted therefor
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G06F21/35—User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/0716—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips at least one of the integrated circuit chips comprising a sensor or an interface to a sensor
    • G06K19/0718—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips at least one of the integrated circuit chips comprising a sensor or an interface to a sensor the sensor being of the biometric kind, e.g. fingerprint sensors
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
    • G06K19/07309—Means for preventing undesired reading or writing from or onto record carriers
    • G06K19/07345—Means for preventing undesired reading or writing from or onto record carriers by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches
    • G06K19/07354—Means for preventing undesired reading or writing from or onto record carriers by activating or deactivating at least a part of the circuit on the record carrier, e.g. ON/OFF switches by biometrically sensitive means, e.g. fingerprint sensitive
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352—Contactless payments by cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/24—Detecting, measuring or recording bioelectric or biomagnetic signals of the body or parts thereof
    • A61B5/316—Modalities, i.e. specific diagnostic methods
    • A61B5/318—Heart-related electrical modalities, e.g. electrocardiography [ECG]

Abstract

The BiolD NFC Smart Card is an integrated system that describes a method for application Near Field Communication (NFC) wireless technology and wearable technology to transfer an Electrocardiogram (ECG) biometric authentication of a card holder from an ECG
sensor to a smart card through an NFC interface chip (NFiC) embedded in the smart card as a contactless bridge. This way can confirm a card holder as a legal one who can make a secure contactless payment through chip technology in order to prevent any card holder with an unauthorized smart card or with a duplicate smart card from payment.

Description

The BiolD NFC Smart Card Field of the Invention [0001]The present invention relates to a BiolD NFC Smart Card which is a contactless smart card with integrated system by incorporating Near Field Communication (NFC) wireless technology and wearable technology. The BiolD NFC Smart Card system can transfer an Electrocardiogram (ECG) biometric authentication of a card holder from an ECG
sensor to a smart card through an NFC interface chip (NFiC) embedded in the smart card as a contactless bridge. This way can confirm a card holder as a legal one who can make a secure contactless payment through chip technology in order to prevent any card holder with an unauthorized smart card or with a duplicate smart card from payment. The BiolD NFC Smart Card describes a method for an authorized card holder who has an authorized smart card and who makes a contactless payment security.
Background of the Invention
[0002] NFC payments are called contactless payments like Apple Pay that apples to fingerprint technology via Touch ID to confirm personal data of a device holder, so even if the device is stolen, no one would be able to get at that personal information. Apple Pay takes the credit or bank card information from a photo, encrypts it, programs it into the phone, and lets the card holder pay for stuff via Apple fingerprint ID and NFC technology (1). As additional security, the mobile wallet application may require "unlocking" before making a contactless payment (e.g., by entering a code on the phone or providing a fingerprint). Therefore, a consumer device card holder verification method (e.g., fingerprint) may also be able to be used for the transaction (2).
[0003]The biometric smart card describes a stand-alone biometric authentication system that employs fingerprint technology to the smart card. The fingerprint sensor embedded in the smart card only allows the legitimate owner of the card to access the smart card functionality. If the card user is not authenticated, the card will be seen as blank or dummy card (3). The biometric smart card offers contact and contactless operations and is compatible with current identification and payment global infrastructure (PUS, ATM, smart card readers). It will allow the infallible binomial of payments and biometrics. Due to the biometric data, namely the fingerprint template, is stored in the encrypted memory of the card, it cannot be accessed from the outside, and also it is never transmitted. Therefore, this state-of-the-art smart card guarantees top level security thanks to the "system on card" biometric verification (4).
[0004] A contactless smart card has advantage of security, fast, convenience and low value payment. It includes an embedded smart card secure microcontroller or equivalent intelligence, internal memory and a small antenna and communicates with a reader through a contactless radio frequency (RF, 13.56 MHz) interface. Most of these protective measures are independent of the technology used to transfer the consumer payment account information from the payment card or device to the merchant point-of-sale (PUS) terminal (i.e., swiping, inserting or tapping) and are used for Europay, Mastercard and Visa (EMV) chip and contactless transactions (2). EMV chips create a unique code that cannot be used again to authenticate each credit card transaction when every time an EMV card is used for payment. EMV cards can support NFC
contactless card reading and NFC-equipped cards are tapped against a terminal scanner that can pick up the card data from the embedded computer chip (5). Contactless smart cards have the ability to securely manage, store and provide access to data on the card, perform on-card functions (e.g., encryption and mutual authentication) and interact intelligently with a contactless smart card reader.
Contactless smart card technology is used in applications that need to protect personal information and/or deliver fast, secure transactions, such as transit fare payment cards and financial payment cards being issued by American Express, Discover, MasterCard and Visa.
Contactless smart card technology and applications conform to international standards (ISO/IEC
14443 and ISO/1EC 7816) (6). Contactless payment devices are designed to operate at very short ranges ¨ less than 1-2 inches ¨ so that the consumer needs to make a deliberate effort to present the card or mobile device to the PUS reader to initiate the payment transaction (2). Therefore, a contactless smart card requires only close proximity to an antenna to complete a transaction.
When any transaction must be processed quickly or hands-free, a smart card can be used without even removing it from a wallet (7).
[0005] While each of the foregoing systems appears to meet all functional requirements of their intended purposes, a need exists to continue development of new and improved a contactless smart card function via the ECG biometric authentication, especially the type involving NFC and wearable technology.
Summary of the Invention
[0006]The goal of the present invention is to assure security and safety of an authorized card holder who makes a contactless payment with an authorized smart card. Through ECG biometric authentication as an identification to confirm a card holder as a legal one, any card holder can make a secure contactless payment through chip technology in order to prevent any card holder with an unauthorized smart card from payment as well as to prevent the authorized smart card from being fraud and theft. The present invention integrates NFC wireless, chip and wearable technologies.
[0007] In every-day life, many authorized card holders use contactless smart debit cards to pay for stuff and are usually worried about its security. Some card holders may inevitably lose or be stolen their contactless smart cards. Because it is common for low value transactions (bank credit or debit card purchase, or public transport fare payment) not to require a PIN, contactless technology does not necessarily prevent use of a PIN for authentication of the user. In fact, EMV
technology will not prevent data breaches from occurring, but it will make it much harder for criminals to successfully profit from what they steal. This may make such cards more likely to be stolen, or used fraudulently by the finder of someone else's lost card (5, 7).
When an authorized card holder cannot find his or her card in one or a few days, he or she will report it to the issued bank. If other unauthorized card holders paid for stuff using the lost or stolen smart cards via the tapping way, the issued bank will pay back the cost to the authorized card holder. For example, depending on the card's terms and conditions, if an in-store transaction is conducted using a counterfeit, stolen or otherwise compromised card, consumer losses from that transaction fall back on the payment processor or issuing bank (5). However, it could be difficult for contactless smart card readers to distinguish who an authorized card holder is, even if the issued bank applies to big data technology in accordance with customers' habits, because other unauthorised card holders can find and use the same way as lost or stolen smart card holders to pay low value amount for stuff every day. Therefore, legitimate card holders are worried about losing money from their smart cards and then don't want to use its tapping function.
[0008]In recent technological developments, NFC wireless technology applications provide NFC
devices including an NFC tag and an NFC reader. Both NFC reader and tag devices have functioned to communicate contactless to exchange data at a relatively close distance, usually within the range of 10 centimetres. For example, if someone can take a powerful portable NFC
reader or contactless smart card reader to close and pass a card holder's wallet within less than cm, it is possible for the NFC reader or contactless smart card reader to read the card holder's personal information and then take low value amount money from the contactless smart card in his wallet via contactless like tapping way. By employing contactless smart cards, that can be read without having to remove the card from the wallet or even the garment it is in, therefore, one can add even more authentication value like the biometric authentication to the human carrier of the cards (7) will be necessary. How people prevent personal data and banking information from stealing becomes priority. Because these smart cards can exchange personal information with NFC reader or contactless smart card readers via radio frequency, one of suggestion is to cover contactless smart cards with aluminum foil. The metal foil can hinder radio frequency to transmit and protect personal information in smart cards from fraud or duplication, however, it is not convenient for card holders.
[0009] Information stolen from a data base can be misused to construct artificial biometrics to impersonate people. Creation of artificial biometrics is possible even if only part of the template is available (8). As the traditional biometric authentication system, fingerprint technologies are with some shortage. Fingerprint images that can be scanned at a single point in time. When the system rejects a user, the user has to swipe or scan their fingers again for their claim to be reconsidered (9). For example, fingerprint can be faked through card holders' high-definition video or photos on the social media, because someone can capture card holders' fingerprint via raising palms to post fingers with 'V' or through contact surfaces such as glass or others. One of the earliest biometrics used were fingerprints because they were mostly universal, unique, permanent, and easy to capture. More recently, facial recognition has become common for applications ranging from access control to surveillance. One of the challenges associated with these biometrics is that they can often be lifted or captured without a person's consent (known as skimming) (9).
[0010] In accordance with the present invention, the BiolD NFC smart card is used application in the ECG as the biometric authentication, because ECG is the electrical signal generated by heart and ECG trace expresses cardiac features that are unique to an individual. As a biometric, heart data are difficult to disguise, reducing the likelihood of successfully applying falsified credentials into an authentication system. For human identification, attributes were extracted from the P, R and T complexes. The sensor position does not affect the observed timing of the P, R and T complexes. The expression of the ECG trace is a function of sensor placement for electrical potential magnitude only. To use ECG as biometric, individuals will be enrol their information into the security system (10). By comparison to fingerprint as the biometric authentication with ECG, ECG has some advantages because it cannot easily be captured without cooperation from the person and latent ECG samples are not left behind on contact surfaces.
Additionally, ECG can be captured in a way that is still very seamless, convenient and continuous property for the user, because the ECG signal has a constant flow that allows it to be continuously reassessed to identity a user. Medical heart conditions such as cardiac arrhythmias, arterial fibrillations, or implants (e.g., pacemakers) do not impact ECG's performance. Every heartbeat, even an irregular one, has a unique signature. In addition, mild variations in heart rate caused by activities such as moderate exercise, consuming caffeine or taking medication do not impact ECG's ability to authenticate the user (9). Therefore, ECG cannot be duplicated anytime because it must be noticed by a person and cooperate with the person. When combined with ECG biometrics, smart cards can provide two- factor authentication (7) to guarantee card holders who make a secure contactless payment.
[0011] The Nymi Band with HeartID is a wearable product to confirm a card holder via ECG
biometric data, but it does not monitor or track the heart's activity during normal use or access to personal information. The Nymi Band supports to communicate NFC applications, because this Band also has an NFC antenna. The biometric data of heartbeat (ECG) for authentication is stored locally on the Nymi Band in an encrypted state. When an authorized card holder clasp the Nymi Band on his or her wrist and place the finger on the top sensor, the Nymi Band reads his or her ECG data and can authenticate who an authorized card holder is. Once he or she is confirmed his or her identity by the Nymi Band, it will remain in an authenticated state until it is removed from his or her wrist. The Nymi Band can verify his or her identity in a number of strong and secure ways. If his or her Nymi Band is lost, all of its stored information (including the biometric profile and links to services) will be inaccessible to anyone who has the band in their possession.
The authorized card holder cannot recover his or her profile without his or her original Nymi Band so losing his or her band will require the authorized card holder to enrol on a new Nymi Band (11). Therefore, Nymi band can confirm people who you are.
[0012] According to the present invention, the BiolD NFC smart card envisages an NFC
interface chip (NFiC) like an NFC tag embedded on an authorized smart card.
The NFiC offers unique energy harvesting and data transfer capabilities and provides a contactless bridge between an NFC reader (for instance, a smartphone or tablet) and any microcontroller of the smart card because the NFiC is fully compliant with IS014443A standard and is designed according to EMVCo requirement to enable the emulation of contactless smart cards. The NFiC
has characteristics with a number of applications requiring non-volatile memory to be accessed when the system is not powered (12).
[0013] Because the Nymi band can read ECG biometric data of the card holder for authentication and can store ECG biometrics authentication in an encrypted state, it can programme personal data as ECG biometrics authentication (even in case SPI / I2C is not powered) and transfer ECG
data to the NFiC via NFC communication protocol. As a contactless bridge, the NFiC can allow bidirectional communication between the external NFC device including NFC
compliant device or ISO I443A reader device and the microcontroller of the smart card. The NFC
or contactless smart card reader can then read the ECG biometric data from the smart card via NFC
communication protocol even when the microcontroller of the smart card is not powered. The NFiC exchanges ECG biometric data with the NFC Nymi band stored in the internal EEPROM
because the NFiC also offers 32-bit password protection of its EEPROM memory.
The NFiC
exchanges ECG biometrics authentication with the external microcontroller of the smart card through an SPI / I2C interface. The microcontroller of the smart card can also exchange data with the NFC device stored in the external memory. Therefore, this operation can be performed concurrently with NFC communication because the NFiC supports ISO I4443A
standard (12).
[0014] Personalization data is programmed by the NFiC device (even in case SPI
/ I2C is not powered) and it is later read by microcontroller of the smart card through SPI
/ I2C interface. The logged personal data is stored periodically by the microcontroller and then can be read by the NFiC device even when the microcontroller is not powered (12). In addition, the individual's biometric information would never leave the card in order to prevent virtually any possibility of compromise (6). Therefore, the ECG biometric data can later be read by microcontroller of the smart card through SPI / PC interface and is stored periodically, but is never leave the smart card because ECG biometrics authentication from Nymi band is continuous property.
[0015] In a smart card-based application, the individual's biometric data can be captured by a reader and passed it to the smart card for matching, rather than passing the stored biometric information to the reader for matching (6). The NFC or contactless smart card reader can first read the ECG biometrics authentication from NFiC's internal EEPROM memory via NFC

communication protocol and then pass the ECG data to the smart card via the NFiC for matching, because the NFiC can exchange the data with the microcontroller of smart card.
The NFC or contactless smart card reader can read the ECG biometric data that is stored periodically from the microcontroller of the smart card even when the microcontroller of smart card is not powered.
Therefore, this way can confirm the ECG biometric data as an identification of a legal card holder.
[00161After matching, the NFC or contactless payment reader can confirm via the ECG
biometric data as an identification way the authorized card holder as a legal one who can carry the smart card and read the smart card holder personal bank payment information to make the secure contactless payment through chip technology within an inch via NFC
communication protocol. Therefore, this way can prevent any card holder without an authorized smart card or with a duplicate smart card from payment.
[0017] In accordance with ISO 7810 ID-1 and ISO 7816 standard, it allows the authentication of the user through biometrics, increasing the security level which is today entrusted to the simple and weak PIN (4). Smart cards with embedded microprocessors contain all of the information and functions needed to complete transactions and can perform a dynamic series of complex calculations (13). NFC is a communications technology and smart card technology is a payments technology. NFC technology is compatible with the current contactless payment acceptance infrastructure, which is an NFC-compliant mobile device, can communicate with a POS system that currently accepts contactless payment cards. NFC and smart card technology are companion technologies. Therefore, NFC applies to how devices communicate; smart card technology applies to how payments make with contact and contactless chip cards or with a mobile NFC
device emulating a contactless chip card (14).
[0018] Broadly stated, the present invention relates to a system for authorizing a smart card to be paid, the system comprising: a card holder's ECG biometric identification means; a first verification means permitting an Nymi band with HeartID captures ECG biometric information of the card holder; ECG biometric information and transfers data to an NFiC;
and a second verification means permitting the card holder to make a contactless payment, wherein the first and second verification means confirm ECG biometric data of the card holder stored periodically on the smart card as a legal one therein and authorize making a contactless payment.

[0019]The system comprises a first measurement means for determining a first biometric characteristic of the card holder. The first verification means also communicates wirelessly with the first measurement means and transfers the first biometric characteristic to NFiC and data stored periodically on the smart card is read by the microcontroller of the smart card through SPI/ I2C interface means to confirm a card holder as a legal one and authorize making a contactless payment.
[0020]The first biometric characteristic comprises an ECG biometric data of the card holder. The first measurement means comprises an Nymi band wearing the wrist of the card holder.
[0021] The system comprises a second measurement means for determining a first biometric characteristic of the card holder and reading data stored on the smart card.
The second verification means also read the second measurement means and reads the first biometric characteristic data stored periodically on the smart card means to authorize making a contactless payment.
[0022]The first biometric characteristic comprises ECG biometric data stored periodically on the smart card. The second measurement means comprises an NFC or contactless smart card reader.
[0023]The first verification means comprises an NFiC. The first NFiC is embedded on the smart card.
[0024]The second verification means comprises an NFC or contactless smart card reader. The NFC or contactless smart card reader is a terminal payment infrastructure.
[0025]The card holder' biometric identification means is ECG captured by the Nymi band with HeartID. The Nymi band with HeartID is worn the card holder wrist.
Brief Description of the Drawings [0026]The drawings described herein are for illustrative purposes only of selected embodiments and are not intended to limit the scope of the present disclosure. The inventive concepts will be more readily understood by reference to the following description in combination with the accompanying drawings where:
Fig. 1 illustrates a block diagram showing a complete overview of the various functions of the BiolD NFC smart card;
Detailed Description of the Preferred Embodiments Overview of System [0027] Referring now to Fig.!, the BiolD NFC Smart Card (100) contains an NFC
Nymi Band with HeartID (200) and an NFiC tag (400) embedded on a smart card (500). The NFC Nymi Band with HeartID (200) is a wearable product to confirm a card holder via ECG
biometric data (201) who an authorized card holder (300) is.
[0028] The Nymi band (200) can captures and read ECG biometric data (201) from a card holder (300) for authentication and store ECG biometrics authentication (201) in an encrypted state. The Nymi band (200) can programme personalization ECG biometric data (201) and transfer ECG
data (201) to the NFiC (400) via NFC communication protocol.
[0029] The NFiC (400) offers unique energy harvesting and data transfer capabilities and provides a contactless bridge between an NFC reader and any microcontroller of the smart card (500). As a contactless bridge, the NFiC (400) can allow bidirectional communication between the external NFC reader (600) and the microcontroller of the smart card (500).
The said reader (600) can then read the ECG biometric data (201) from the smart card (500) via NFC
communication protocol even when the microcontroller of the smart card (500) is not powered.
The NFiC (400) exchanges ECG biometric data (201) with the NFC Nymi band (200) stored in the internal EEPROM because the NFiC (400) also offers 32-bit password protection of its EEPROM memory. The NFiC (400) exchanges ECG biometrics authentication (201) with the microcontroller of the smart card (500) through an SPI /12C interface with NFC
communication.
The microcontroller of the smart card (500) can also exchange data with the NFC reader (600) stored in the external memory. Therefore, this operation can be performed concurrently with NFC communication because the NFiC supports IS014443A standard.
[0030] Personalization data is programmed by the NFiC (400) device (even in case SP1 / I2C is not powered) and it is later read by the microcontroller of the smart card (500) through SPI / PC
interface. The logged personal ECG biometric data (201) is stored periodically by the microcontroller (500) and then can be read by the NFC reader (600) even when the microcontroller (500) is not powered. Therefore, the ECG biometric data (201) can never leave the smart card (500) because ECG biometrics authentication (201) from Nymi band (200) is continuous property.
[0031] The NFC or contactless smart card reader (600) can first read the ECG
biometrics authentication (201) from NFiC's (400) internal EEPROM memory via NFC
communication protocol and then pass the ECG data (201) to the smart card (500) via the NFiC
(400) for matching, because the NFiC (400) exchanges the data with the microcontroller of smart card (500). The said reader (600) can first read the said data (201) that is stored periodically from the microcontroller of the smart card (500) even when the microcontroller of smart card (500) is not powered. Therefore, this way can confirm the ECG biometric data (201) as an identification of a legal card holder (300).
[0032] After matching, the said reader (600) can confirm via the ECG biometric data (201) as an identification the authorized card holder (300) as a legal one who can carry the smart card (500) and read the smart card holder (300) personal bank payment information to make the secure contactless payment through chip technology within an inch via NFC
communication protocol.
Therefore, this way can prevent any card holder (300) without an authorized smart card (500) or with a duplicate smart card (500) from payment.
[0033] Various exemplary embodiments of the present invention have been shown and described herein, and it will be obvious to those skilled in the art that such embodiments are provided by way of example only. Numerous variations, changes, and substitutions will now occur to those skilled in the art without departing from the invention. It should be understood that various alternatives to the exemplary embodiments of the invention described herein may be employed in practicing the invention. The scope of the claims should not be limited by the exemplary embodiments set forth in the description, but should be given the broadest interpretation consistent with the description as a whole.

Reference 1. The Ultimate NFC Guide: Everything You Need to Know About Near Field Communication https://squareup.com 2. Contactless Payments Security Questions & Answers http://www.smartcardalliance.org/publications-contactless-payment-security-qa/?redirect=http%3A%2F%2Fwww.smartcardalliance.org%2Fpublications-contactless-payment-security-qa 3. Biometric Smartcards http://www.qafis.com 4. Card Tech http://www.card-tech.it 5. 8 FAQs about EMV credit cards http://www.creditcards.com/credit-card-news/emv-faq-chip-cards-answers-1264.php 6. Smart Card Technology FAQ http://www.smartcardalliance.org/smart-cards-faq/
7. Contactless smart card https://en.wikipedia.org/wiki/Contactless_smart_card 8. Private biometrics https://en.wikipedia.org/wiki/Private biometrics 9. Nymi band whitepaper https://nymi.com/sites/default/files/Nymi%20Whitepaper.pdf 10. ECG to identify individuals, Steven A. Israela, John M. Irvineb, Andrew Chengb, Mark D. Wiederholdc, Brenda K. Wiederholdd (2004) https://www.researchgatemet/publication/222533849_ECG_to_identify_individuals 11. Nymi band https://support.nymi.com/hc/en-us/sections/202858286-Using-the-Nymi-Band 12. AMS www.ams.com/NFC/A53955 13. Smart Card Chips Information http://www.globalspec.com/learnmore/semiconductors/microprocessors microcontrollers /smart_card chips 14. EMV and NFC: Complementary Technologies Enabling Secure Contactless Payments http://www.smartcardalliance.org/publications-emv-and-nfc-complementarv-technologies-enabling-secure-contactless-payments/
I

Claims (15)

1. A system for authorizing a smart card to be paid, the system comprising:
a card holder's ECG biometric identification means;
a first verification means permitting an Nyrni band with HeartID captures ECG biometric information of the card holder and transfers data to an NFiC;
and a second verification means permitting the card holder to make a contactless payment, wherein the first and second verification means confirm ECG biometric data of the card holder stored periodically on the smart card as a legal one therein and authorize making a contactless payment.
2. The system of claim I, further comprising a first measurement means for determining a first biometric characteristic of the card holder.
3. The system of claim 2, wherein the first verification means also communicates wirelessly with the first measurement means and transfers the first biornetric characteristic to NFiC and data stored periodically on the smart card is read by the microcontroller of the smart card through S131/ I2C
interface means to confirm a card holder as a legal one and authorize making a contactless payment.
4. The system of claim 2, wherein the first biometric characteristic comprises an ECG biometric data of the card holder.
5. The system of claim 2, wherein the first measurement means comprises an Nymi band wearing the wrist of the card holder.
6. The system of claim I, further comprising a second measurement means for determining a first biometric characteristic of the card holder and reading data stored on the smart card.
7. The system of claim 6, wherein the second verification means also read the second measurement means and reads the first biometric characteristic data stored periodically on the smart card means to authorize making a contactless payment.
8. The system of claim 6, wherein the first biometric characteristic comprises ECG biometric data stored periodically on the smart card.
9. The system of claim 6, wherein the second measurement means comprises an NFC or contactless smart card reader.
10. The system of claim 1, wherein the first verification means comprises an NFiC.
1 1 . The system of clairn 10, wherein the first NFiC is embedded on the smart card.
12. The system of claim 1, wherein the second verification means comprises an NFC or contactless smart card reader.
13. The system of claim 12, wherein the NFC or contactless smart card reader is a terminal payment infrastructure.
14. The system of claim 1, wherein the card holder' biometric identification means is ECG captured by the Nymi band with FleartID.
15. The system of claim 14, wherein the Nymi band with Heart1D is worn the card holder wrist.
CA2970007A 2017-06-09 2017-06-09 The bioid nfc smart card Pending CA2970007A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CA2970007A CA2970007A1 (en) 2017-06-09 2017-06-09 The bioid nfc smart card

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CA2970007A CA2970007A1 (en) 2017-06-09 2017-06-09 The bioid nfc smart card

Publications (1)

Publication Number Publication Date
CA2970007A1 true CA2970007A1 (en) 2018-12-09

Family

ID=64655295

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2970007A Pending CA2970007A1 (en) 2017-06-09 2017-06-09 The bioid nfc smart card

Country Status (1)

Country Link
CA (1) CA2970007A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023211396A1 (en) * 2022-04-25 2023-11-02 Altindas Erhan Secure finger sensing contactless card

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023211396A1 (en) * 2022-04-25 2023-11-02 Altindas Erhan Secure finger sensing contactless card

Similar Documents

Publication Publication Date Title
US7922077B2 (en) System and method for activating telephone-based payment instrument
US20140210589A1 (en) Smart card and smart system with enhanced security features
US7961913B2 (en) Portable data carrier, external arrangement, system and methods for wireless data transfer
US20170289127A1 (en) Smart data cards that enable the performance of various functions upon activation/authentication by a user's fingerprint, oncard pin number entry, and/or by facial recognition of the user, or by facial recognition of a user alone, including an automated changing security number that is displayed on a screen on a card's surface following an authenticated biometric match
US20050137977A1 (en) Method and system for biometrically enabling a proximity payment device
US20030046228A1 (en) User-wearable functional jewelry with biometrics and smartcard to remotely sign and/or authenticate to e-services
US20150100485A1 (en) Biometric confirmation for bank card transaction
US20050240528A1 (en) Smartcard with visual display
KR20230002568A (en) Multi-Purpose Smart Card with User Trust Bonding
WO2013093118A1 (en) Method to perform a transaction using a biometric reader and associated biometric reader
US20170169424A1 (en) Delegation of transactions
WO2013001133A1 (en) Bank-card fraud detection and prevention for bank automats
KR101812637B1 (en) Method, institution card, and system for verifing identity using identification code
Alhothaily et al. Towards more secure cardholder verification in payment systems
RU143577U1 (en) DEVICE FOR PAYING GOODS AND SERVICES USING CUSTOMER'S BIOMETRIC PARAMETERS
US20200387765A1 (en) Security Measures in Relation to Data Tags and Contactless Cards
CA2970007A1 (en) The bioid nfc smart card
KR20010069593A (en) System of smart card for fingerprinting cognition
US11836232B1 (en) Secure biometric-based smart card activation method and system
US20220215079A1 (en) Authentication by a facial biometric
US20200226610A1 (en) Fingerprint Verification System for Financial Transactions
Lavadkar et al. Fingerprint Biometric Based Online Cashless Payment System
KR20190007196A (en) Apparatus and methods for providing card activation control and digital wallet exchange using card owner's identity verification
WO2013155040A1 (en) Smart connect devices for the interconnectivity of data cards with computing devices to enable the performance of various functions upon authentication by a user's fingerprint and/or a user's photograph
GB2571305A (en) Security of contactless cards and data tags

Legal Events

Date Code Title Description
EEER Examination request

Effective date: 20221117

EEER Examination request

Effective date: 20221117