Remote tokenless authentication of transactions with biometric identifiers

摘要

Multiple organizations store account information relating to financial accounts in machine-readable form, and identity information relating to each account and including machine readable information corresponding to a unique biological identifier (fingerprint) supplied by the individual authorized to access an account is stored in a database. The user submits at the terminal, a fingerprint scan, a transaction request, and a machine-readable card carrying information sufficient to identify only the organization storing the user's unique biological identifier, and no other information about the account, and this information is transmitted to a clearing house where a comparison is made between the information from the fingerprint scan and the stored fingerprint information. If a fingerprint match is established then the transaction information is compared with the account to which the fingerprint information relates to determine if a requested transaction is allowable, and if so the transaction is processed. The user and system are afforded the security of identifying the user by a biological token and the user is afforded the security and convenience of accessing the account using a card that does not actually contain any information about the account except the identity of the account organization.