Systems and methods for securely processing a payment

Abstract

A device for use in making a payment in an electronic environment. Said device comprising a processor and a memory accessible to the processor. The memory includes payment data and a biometric template of a user stored therein an application stored therein. The application, when activated, causes the processor to perform the steps of receive a request from an access device to access the payment data stored in the memory and receive a biometric sample from a user. The application also cause the process to perform the steps of compare the biometric sample from the user to the biometric template and provide the requested payment data to the access device if the biometric sample and biometric template match.

What is claimed is: 
     
         1 . A device for use in making a payment in an electronic environment, said device comprising:
 a processor; and   a memory accessible to the processor, the memory including:
 payment data and a biometric template of a user stored therein; and 
 an application stored therein which, when activated, causes the processor to perform the steps of:
 receive a request from an access device to access the payment data stored in the memory; 
 receive a biometric sample from a user; 
 compare the biometric sample from the user to the biometric template; and 
 provide the requested payment data to the access device if the biometric sample and biometric template match. 
 
   
     
     
         2 . The device of  claim 1 , further comprising a biometric sensor in communication with the processor configured to receive the biometric sample from the user and provide the biometric sample to the processor. 
     
     
         3 . The device of  claim 2  wherein the biometric sensor includes a fingerprint scanner. 
     
     
         4 . The device of  claim 2  wherein the biometric sensor includes an image capturing device. 
     
     
         5 . The device of  claim 1 , wherein the requested payment data is encrypted before being sent to the access device. 
     
     
         6 . The device of  claim 5  wherein the application further causes the processor to perform the steps of:
 requesting a non-sensitive equivalent of the payment data stored in the memory from a centralized system over a network; 
 receiving the non-sensitive equivalent of the payment data from the centralized system over the network; and 
 providing the non-sensitive equivalent as the encrypted requested payment data to the access device. 
 
     
     
         7 . The device of  claim 1 , wherein the request to access payment data is received wirelessly. 
     
     
         8 . The device of  claim 7 , wherein the requested payment data is provided wirelessly. 
     
     
         9 . A method for use in securely transferring data in an electronic environment, said method comprising:
 an access device wirelessly sending a payment request to a personal information device;   the personal information device receiving a biometric sample from a user via a biometric sensor;   the personal information device comparing the biometric sample from the user to a biometric template;   the personal information device accessing stored payment data when the biometric sample and biometric template match;   the personal information device wirelessly sending payment information to the access point;   the access point processing payment using the payment information received from the personal information device; and   the access point sending a receipt to the personal information device.   
     
     
         10 . The method of  claim 9  wherein the payment information includes the stored payment data. 
     
     
         11 . The method of  claim 9  wherein the payment information includes a non-sensitive equivalent of the stored payment data. 
     
     
         12 . The method of  claim 11  wherein the non-sensitive equivalent of the stored payment data is the same length as the stored payment data. 
     
     
         13 . The method of  claim 9  wherein the stored payment data is a credit card number. 
     
     
         14 . The method of  claim 9  wherein:
 the payment information includes a non-sensitive equivalent of the credit card number; and 
 the non-sensitive equivalent is a single use credit card number. 
 
     
     
         15 . A method for use in securely transferring data in an electronic environment, said method comprising:
 an access device wirelessly sending a payment request to a personal information device;   the personal information device receiving a biometric sample from a user;   the personal information device comparing the biometric sample from the user to a biometric template;   the personal information device accessing stored payment data;   the personal information device sending the information contained in the payment request and the stored payment data to a centralized server when the biometric sample and biometric template match;   the centralized server creating a non-sensitive equivalent of the payment data and sending the non-sensitive equivalent of the payment data to the personal information device;   the personal information device providing the non-sensitive equivalent of the payment data as the requested payment data to the access device; and   the access point processing payment using the payment information received from the personal information device.   
     
     
         16 . The method of  claim 15  wherein the personal information device includes a cellular telephone. 
     
     
         17 . The method of  claim 15  wherein the stored payment data includes a credit card number. 
     
     
         18 . The method of  claim 15  further comprising:
 the access point sending a payment processing request to the centralized server, wherein the payment processing request includes the non-sensitive equivalent of the payment data; 
 the centralized server confirming the non-sensitive equivalent of the payment data is matched to the payment data; and 
 the centralized server authorizing payment to the access point. 
 
     
     
         19 . The method of  claim 15  further comprising:
 the access point sending a payment receipt to the personal information device; and 
 the personal information device displaying the payment receipt to the user. 
 
     
     
         20 . The method of  claim 15  wherein the non-sensitive equivalent may be used only for the exact amount in the payment request.