Use of a Biometric Image for Authorization

Abstract

A second user can authorize a first user to take or complete an online action by submitting one or more biometric images. For example, the second user can authorize a purchase by the first user on an online store. The second user can submit the one or more biometric images on the electronic device being used by the first user, or the second user can submit the biometric image or images remotely using another electronic device.

1 . A method for a first user to complete a purchase on an online store, the method comprising:
 receiving, at a processing device, a first biometric image associated with a second user;   countersigning an online account token with user identifier data associated with the first user when the first biometric image associated with the second user matches a first reference biometric image associated with the second user, wherein the online account token is associated with an account of the first user on the online store and wherein the countersigned online account token indicates the purchase on the online store is to be completed; and   transmitting the countersigned account token to the online store.   
     
     
         2 . The method as in  claim 1 , further comprising:
 prior to countersigning the online account token, determining if a second biometric image associated with the first user matches a second reference biometric image associated with the first user.   
     
     
         3 . The method as in  claim 1 , prior to receiving the first biometric image associated with the second user, providing a notification to the second user regarding the purchase on the online store by the first user. 
     
     
         4 . The method as in  claim 3 , wherein the notification comprises an identity of the online store. 
     
     
         5 . The method as in  claim 3 , wherein the notification comprises a monetary amount of the purchase on the online store. 
     
     
         6 . The method as in  claim 3 , wherein the notification permits the second user to limit an amount of money the first user can spend in the purchase. 
     
     
         7 . The method as in  claim 3 , wherein the notification permits the second user to limit an amount of time the first user can spend on the online store. 
     
     
         8 . The method as in  claim 3 , wherein the notification comprises an identity of a content of the purchase on the online store. 
     
     
         9 . The method as in  claim 2 , wherein the user identifier data comprises a universally unique identifier that is associated with the first biometric image and a directory services identification (DSID) that represents an account of the first user on the online store. 
     
     
         10 . The method as in  claim 9 , wherein the user identifier data further comprises a password that is associated with the account on the online store. 
     
     
         11 . The method as in  claim 9 , wherein the DSID comprises a hash of the DSID. 
     
     
         12 . The method as in  claim 2 , wherein the user identifier data comprises a universally unique identifier that is associated with the second biometric image and a directory services identification (DSID) that represents an account of the first user on the online store. 
     
     
         13 . The method as in  claim 3 , wherein providing a notification to the second user regarding the purchase on the online store by the first user comprises providing a notification to the second user on a first device regarding the purchase on the online store by the first user, wherein the first user is submitting the purchase on a second device. 
     
     
         14 . A system, comprising:
 a processing device; and   a biometric sensing device operatively connected to the processing device, the processing device being adapted to:
 receive a first biometric image associated with a second user to authorize a purchase on an online store by a first user; and 
   countersign an online account token with user identifier data associated with the first user when the first biometric image received from the second user matches a first reference biometric image associated with the second user, wherein the online account token is associated with an account of the first user on the online store and wherein the countersigned online account token indicates the purchase on the online store is to be completed.   
     
     
         15 . The system as in  claim 14 , wherein the processing device and the biometric sensing device are included in a single electronic device. 
     
     
         16 . The system as in  claim 14 , wherein the processing device is included in a first electronic device and the biometric sensing device is included in a second electronic device. 
     
     
         17 . The system as in  claim 14 , wherein the processing device comprises a secure processing device. 
     
     
         18 . The system as in  claim 14 , wherein the user identifier data comprises a universally unique identifier that is associated with the second biometric image. 
     
     
         19 . The system as in  claim 14 , wherein the processing device is adapted to receive a second biometric image from the first user and countersign the online account token with user identifier data only when the first biometric image received from the second user matches the first reference biometric image and the second biometric image received from the first user matches a second reference biometric image associated with the first user. 
     
     
         20 . The system as in  claim 14 , wherein the user identifier data comprises a universally unique identifier that is associated with the first biometric image 
     
     
         21 . The system as in  claim 20 , wherein the user identifier data comprises a directory services identification (DSID) that represents an account of the first user on the online store. 
     
     
         22 . The system as in  claim 20 , wherein the user identifier data further comprises a password that is associated with the account on the online store. 
     
     
         23 . The system as in  claim 21 , wherein the DSID comprises a hash of the DSID. 
     
     
         24 . The system as in  claim 18 , wherein the user identifier data further comprises a directory services identification (DSID) that represents an account of the first user on the online store. 
     
     
         25 . A method for a first user to complete a purchase transaction on an online store, the method comprising:
 receiving, at a first processing unit, a first biometric image associated with the first user;   determining, by the first processing unit, if the purchase by the first user requires authorization from a second user;   if authorization is required, providing a notification to a second user to authorize the purchase;   receiving, at a second processing unit, a second biometric image associated with the second user based on the notification; and   countersigning an online account token with user identifier data associated with the first user when an identity of the first user and an identity of the second user is confirmed based on the first and second biometric images, wherein the online account token is associated with an account of the first user on the online store and wherein the countersigned online account token indicates the purchase on the online store is to be completed.   
     
     
         26 . The method as in  claim 25 , further comprising transmitting the countersigned account token to the online store. 
     
     
         27 . The method as in  claim 25 , wherein the notification comprises at least one of the following:
 an identity of the online store;   a monetary amount of the purchase on the online store;   an input that permits the second user to limit an amount of money the first user can spend in the purchase; and   an input that permits the second user to limit an amount of time the first user can spend on the online store.   
     
     
         28 . The method as in  claim 25 , wherein the first processing unit and the second processing unit comprise the same processing unit that is included in an electronic device. 
     
     
         29 . The method as in  claim 25 , wherein the first processing unit is included in a first electronic device and the second processing unit is included in a different second electronic device.