Biometric multi-purpose biometric terminal, payroll and work management system and related methods

CROSS-REFERENCE TO RELATED APPLICATIONS

0001This patent application is a continuation-in-part patent application of U.S. non-provisional patent application Ser. No. 11/761,938, filed on Jun. 12, 2007, which is a continuation-in-part patent application of U.S. non-provisional patent application Ser. No. 10/894,498, filed on Jul. 20, 2004, now U.S. Pat. No. 7,229,013, which is a continuation-in-part patent application of U.S. non-provisional patent application Ser. No. 10/183,767, filed on Jun. 27, 2002, now U.S. Pat. No. 6,764,013, which in turn is a non-provisional patent application of provisional patent application Ser. No. 60/372,983, filed on Apr. 17, 2002, the rights of priority of which are hereby claimed for this patent application.

FIELD OF THE INVENTION

0002The present invention relates in general to a biometric multi-purpose terminal, payroll and work management system and related methods, and more particularly, to a multi-purpose terminal that employees may use after authentication with a biometric device, such as a finger print detector to check-in and check-out of work, to receive new work instructions or assignments, to review payroll details, to print a payroll stub, to execute financial transactions, to print a receipt of a financial transaction or to request a payroll advance based upon work hours accrued, and to perform other financial transactions. The invention also relates to systems and methods which utilize such multi-purpose APW biometric terminals, including deposit of net pay in a bank account associated with each employee's bankcard so that the pay is immediately accessible by each employee.

BACKGROUND OF THE INVENTION

0003Most commercial biometric clocks give only text feedback when an employee punches in or punches out. Thus, if a user's fingerprint is not matched, the system displays a text message telling the user that access was denied, or emits an audible tone, such as a high pitch or buzzing sound, that can be annoying.

0004When using biometric fingerprint matching devices for purposes of access control to a secured building or for purposes of employee time and attendance tracking, most systems compare the person's captured and processed fingerprint (usually called “minutiae”) with a previously stored fingerprint impression, such as a finger print impression which was captured during registration of the employee on the system. Then, based upon the matching threshold, the system makes one of the following two decisions: (1) person is authenticated or (2) person is NOT authenticated.

0005Biometric time clock devices are used in the marketplace to electronically track employees, especially the clock-in and clock-out times of the employee. However, such devices are often expensive to install and operate, and most such devices require an upfront investment in hardware, software and installation services.

0006Unfortunately, in remote locations which may only require one or two employees, installing such a prior art biometric time clock may not be economically justifiable. This is primarily because the cost of installing and operating a remote biometric time clock may actually exceed the profits generated from a remote location with only one or two employees. As a result, many employers, in order to electronically track employees in remote locations, ask their employees to use a telephone timekeeping system to clock-in and clock-out. Such telephone systems may be easy to use and the applicable telephone number can be called from any remote work location. One example of such a telephone timekeeping system is disclosed in U.S. Pat. Nos. 5,646,839 and 5,963,912, both to Katz.

0007One of the main problems of using a telephone timekeeping systems to track remote employees at remote locations, is that employers do not have the ability to truly confirm the real identity of the remote employee, especially in a low cost way. Such telephone timekeeping solutions primarily consist of an employee dialing into an automated Interactive Voice Response (IVR) system, which interacts with the employee and asks him/her to key in his/her employee number and other work related information by pressing entries into the keypad of the telephone. Some solutions also require tracking of the caller identification number (caller-ID) by looking-up the telephone number which the employee uses to engage the IVR system, and matching it with a pre-registered number in a database. Using caller-ID lookup matching, enables the employer to confirm that the employee is calling from the work location (via caller-ID lookup) instead of calling from home or a non-business location and/or billing for non-worked hours. Although such methods establish that “an” employee called from the work location, such methods still fail to guarantee the identity of the employee.

0008Thus, although IVR-based telephone timekeeping systems are accurate in identifying the location of the call, such systems still can not eliminate “buddy punching”. Buddy punching is when a buddy who is on time at the work site clocks-in or clocks-out for a late or absent employee, usually a friend or buddy. This allows the absent employee to fraudulently collect full pay for non-worked hours.

0009The installation process for a time and attendance or an all purpose APW biometric terminal may be the most costly component of the system. That is, in some instances, the cost of installation may actually exceed the price of the APW biometric terminal, especially if travel by qualified personnel to a remote location is required. Moreover, configuration of the APW biometric terminal after installation is not infrequently beyond the capabilities of the customer and requires technical support.

0010For example, a typical installation procedure may involve sending a trained technician to the site. The technician configures the APW biometric terminal either via a Local Area Network (LAN) connection or via a phone line connection. The client pays for the technician's time, travel and lodging expenses. The technician sets up the APW biometric terminal's internet protocol (IP) address, gateway and domain name server (DNS) settings. The technician then connects the time clock to a local area network (LAN) connection which consists of plugging the system's RJ45 cable to the APW biometric terminals jack plug, or connecting it to a phone line by plugging an RJ11 jack plug to the system. The technician then configures the time clock for connection to a server. The technician leaves and another technical person may arrive to install polling software which communicates to the time clock and polls its data. Thereafter, it is the customer's responsibility to make sure that all connections are maintained on a daily basis and that the clock is connected on a daily basis.

0011One of the problems encountered when servicing low wage, non-English speaking employees is their lack of technology sophistication in using a time and attendance system. Furthermore, due to the distributed nature of the labor environment, other significant issues are encountered, such as that employees move from one remote location to another without much advance notice. In many cases employees quit or give managers little notice that they will be late. As a result, managers have to move their distributed labor around continuously. Thus, the registration of new employees becomes difficult since the location or site where they were originally registered is not necessarily where they will end up working. Furthermore, in the case of low wage employee, employee registration and paper-work is usually done at a “hiring office”. Once the employee is hired, has signed his/her employment related paperwork, he/she may be sent to work at the remote location.

0012The main objective of companies that pay employees electronically is to avoid costs associated with mailing and over-nighting paper paychecks and paper payroll stubs. The employer deposits the funds into the employee's bank account, or payroll card, then follows up with an email to the employee containing detail of his or her payroll stub information. However, if the employer has low wage employees that do not have access to the internet or to a computer, such employee is suddenly faced with an option to receive electronic payment without knowing his or her payroll stub receipt details. The employee, without access to a computer or the internet, is now forced to take on this solution without ever finding how much was his payroll check gross, net, deductions, FICA or any other deductions and bonuses. There is therefore a need to send an electronic payroll stub to an employee that has no access to a computer or the internet.

0013In a distributed remote location labor environment, employees are usually unsupervised. As a result, sometimes it takes a few weeks to truly discover what certain remote employees do in such remote locations. However, what if the employee in the remote location decided to remove the all purpose APW biometric terminal, place it at home, connect it to the internet, clock-in and clock-out of it on a daily basis; and receive pay for hours non-worked at the client site? How would someone find out without having to send a manager to the remote location on a daily basis to police the APW biometric terminal location and inventory? The present invention addresses these issues.

0014Some of the major problems when assigning work orders to remote employees are that (1) it is hard to track down employees that are running all over a large building location, (2) a manager needs to be dispatched to the work location in order to communicate the work to the specific employee, and (3) once the work is done, in most cases, there is no feedback mechanism to tie back to the customer and have him/her confirm that the work was actually done to the customer's satisfaction. How would you assign, track and get feedback from a low wage employee that has no mobile phone and might not speak English, and be able to tie his assigned work with customer satisfaction? What if the employee were foreign, how would you communicate the work to them, if the work was requested in English? How could you do it remotely without seeing him/her? The present invention addresses these issues.

0015Accordingly, there has been a long felt need for ways of providing for fast and economical installation of a APW biometric terminal.

0016An object of the present invention is to provide a wireless APW biometric terminal which will self-install and self-configure itself, thereby avoiding costly installation procedures.

0017Another object of the present invention is to provide a time and attendance APW biometric terminal which communicates with a payroll system via general packet radio service (GPRS) protocol.

0018Yet another object of the present invention is to provide a payroll stub at a facsimile machine.

0019A further object of the present invention is to provide a payroll stub at a remote printer.

SUMMARY OF THE INVENTION

0020Another aspect of the present invention provides a low cost and simple way to confirm an employee's identity for time and attendance applications via the usage of an Interactive Voice Response (IVR) system and voice matching technology through real-time voice matching processing via a computer, or off-line with the help of a human operator. The person's voice and sound waves are captured, then computer-based voice-matching technology is applied in real-time, or the voice files are placed on a secure web site for a manager to review and confirm at a later time.

0021Typically, an employee goes to the remote work site, picks up a phone, dials an IVR system by calling a local or long distance number, and then follows the prompt given to him/her by the IVR system. For example, the IVR system may ask him/her to enter their employee number by using the telephone keypad. The IVR system then asks the employee to randomly speak a specific sentence. Such a sentence was spoken by the employee at the time of registration of the employee on the system. The system plays back a sentence which the employee spoke white being registered the first onto the system. The employee speaks the sentence. The system then tries to match the employee's current spoken sentence with the sentence which was previously stored on the system.

0022If the sentences match, the system accepts the clock-in or clock-out transaction and places it in the employee's timesheet. Thus, the employee will receive full pay for this transaction. If the sentences do not match, the system may ask the employee to try another attempt. This may involve speaking the same sentence again, or speaking an alternative sentence. The number attempts can be 2, 3 or more depending upon the setting selected by the employer.

0023If the employee does NOT speak or say anything, then the system recognizes that there are no words being spoken by the employee. Through a preset noise threshold, the telephone system asks the employee to speak something. If the employee refuses to speak, thus a true buddy punching situation where the buddy does not want to get caught, then the computer system will NOT accept the punch. If the employee speaks into the system, and the IVR computer cannot match the voice sentence sound file, then computer stores the files on the server and places them (securely) on the web for a manager to listen and authorize.

0024If there is no match again, then based on the number of attempts, the system captures the voice sentence from the last attempt, and instructs the employee to go ahead and start working. The system then highlights the clock-in or clock-out transaction as a “miss-matched” transaction, and notifies a human operator, such as the employee's manager. The manager, is then prompted to view a secure web report which displays all of the clock-in or clock-out transactions which require his/her attention. When the manager clicks on the actual link, and the voice files from the last attempt are presented to the manager for review. Based upon his/her familiarity with the employee's voice, the employee manager accepts or rejects the actual clock-in or clock-out.

0025In order to facilitate quick and economical installation, the all purpose APW biometric terminal preferably communicates in plurality of wireless modes. For example, the wireless communication protocols may include GPRS (General Packet Radio Service). GPRS wireless technology may be preferable in remote locations where a wired phone line is not available. WiFi (Wireless Fidelity) may be the best solution for a high speed wireless connection within a client's local office location. However, other communication protocols may be used including Wi-Max (Worldwide Interoperability for Microwave Access), SMS (Short Message Service), MMS (Multi-Media Messaging Service), or simply via cordless 56K wireless connection, where a local 900 MHz cordless modem is connected to a local fax line, and a transceiver on the all purpose APW biometric terminal connects to the cordless modem.

0026Thus, a time and attendance APW biometric terminal preferably communicates with a payroll system via general packet radio service (GPRS) protocol. The payroll system may also include a work management system. The time and attendance APW biometric terminal includes circuitry for encoding and decoding communications between the time and attendance APW biometric terminal and the payroll system in accordance with general packet radio service (GPRS) protocol.

0027Another aspect of the present invention is a method of providing for fast and economical installation of a APW biometric terminal including the steps of giving the APW biometric terminal a serial number and an internal activation token prior to sale, storing the serial number and an internal activation token in a secure database containing paired serial numbers and activation tokens, requesting whether the customer wants to operate the unit in a networked mode or in an off-line non-networked mode, downloading and uploading information directly from the APW biometric terminal's USB port if operating in the off-line mode, requesting the user to enter a code token in order to activate the APW biometric terminal if in the networked mode, requesting the customer to enter an activation key, logging onto a secure web site and entering the APW biometric terminal's serial number, and entering the customer's billing and payment information. When the entered information is verified and authenticated, payment is drawn, and the user is presented with the right activation token paired with the APW biometric terminal's serial number. When the customer enters the activation token on the APW biometric terminal, it becomes operational.

0028The APW biometric terminal knows automatically where to communicate, the usage of wireless communication enables it to dial home and send/receive transactions and setup information. Once the device is activated, the customer is being billed for the length of the APW biometric terminal's ongoing communication service. If the customer fails to pay his or her bills, then device is automatically deactivated, and the customer has to go back to the activation step again.

0029The problem displays itself when one tries to sell a wireless SPRS APW biometric device at a retail store. Since GPRS communication requires a Subscriber Identification Module (SIM) card, in order to communicate on a GPRS network such as AT&T, T-Mobile or Sprint service; it becomes almost impossible for a consumer to buy a non-communicating wireless APW biometric device at a retail store, walk to the local wireless service provider store, buy a SIM card (Subscriber Identification Module card), sign a contract with the wireless service provider (AT&T, T-Mobile or Sprint service), commit to a specific level of wireless data and voice communication plan, take the SIM card and stick it into the wireless APW device, unlock and configure the device to connect to the service provider, then start the device and point its wireless modem to communicate to a wireless gateway, then configure the wireless gateway to communicate the device's data to a remote and dedicated server onto which the client can view employee attendance, payroll, timesheet, messaging and payroll stub information. All such steps are very difficult for a typical consumer to do in a coordinated and error free way.

0030Furthermore, currently when a client purchases a biometric device, the manufacturer (or selling organization) either sends a trained technician to help install and setup the device for the client, or expecs the client to train themselves and install and setup the device on their own. Such activation and implementation logic works fine when the client is known after the sale. However, when the client is unknown, and he or she buys an off the shelf unit, there is no way for them to self-activate the device without the intervention and presence (local or via a remote conversation) of trained support person. Furthermore, if the client were to rent the device, and if the client is current on his or her wireless communication fees, but non-current on his or her monthly hardware rental fees, then because the wireless service is offered via a different provider than the hardware owner, it becomes difficult to stop the device from communicating on the wireless network, primarily because the wireless service company has no intention to stop the user from using its network. An idea comes to mind, which to bundle the wireless service with the rental of the device, however, such action means that the SIM card installed into the device (to enable GPRS wireless service) has to be activated at manufacturing, this way, the buyer of the device does not have to go through the hassle of pulling the SIM card, walking to the wireless service store, signing a wireless contract and activating it after the sale of the unit. Activating the SIM card at manufacturer results in the wireless service provider invoicing the APW manufacturer for wireless services from the first day of inception of the APW biometric device. This is a very unattractive business model for the APW manufacturer because the device could be sitting for a year or two in the retail store before sale. Thus, providing an intelligent remote activation and communication method saves the manufacturer and the user a lot of time and money and simplifies the process of selling a wireless APW biometric device.

0031The present invention therefore includes methods of automating the remote sale, activating and implementing a wireless, LAN or dialup APW biometric device operation when sold at a retail location, even though the client is unknown. This method manifests itself greatly when selling a wireless GPRS device with a pre-installed SIM card.

0032These intelligent remote activation and communication methods are made effective by enabling the device to always communicate to a home server (in LAN, dialup, or wireless connectivity mode) independently of system knowledge of the customer and his or her payment status. To solve the problem, the APW biometric device is pre-manufactured to support multiple communication capabilities: LAN, dialup, and wireless simultaneously. The device is pre-installed with a dormant inactive SIM card which can only be activated electronically. The pre-installed dormant inactive SIM card increases the cost of the device. However, it simplifies its activation and communication once sold to a consumer.

0033Our approach includes building a live 24×7×365 activation server via secure web technology, which is always on and which is accessible to users who purchase a new APW biometric device off-the-shelf from a retail store, via a distributor, or via the web. The APW biometric device is pre-manufactured with a SIM card (in the case of a GPRS device) or present internal password in the case of a LAN or dialup device. Every time the APW biometric device communicates, it has to get a token from the activation server. If the device does not have an activation server, it is allowed to only talk to the home server, while a message is displayed to the user asking them to enter an activation token, and by giving them the option to go to a secure website and attain an activation token.

0034The user logs onto the activation server system, answers a few questions, enters his or her payment methodology, and then submits his information for processing. The activation server processes the information, receives approved payment, and then presents the user with an activation token.

0035The user enters the activation token onto the device, the device runs an internal off-line hashing methodology which deciphers the activation token and validates it. If the code is authentic and if it is valid, the device stores the activation token in memory and proceeds forward to the next step. Otherwise, it reverts back to asking the user to enter a valid activation token.

0036To activate the unit, the user is now asked to place the device on a dialup phone line or high speed LAN line such as DSL or other Cat-5 high speed network connections (at home or at the office). The device diagnoses the connectivity mode (either dialup dial-tone or high speed LAN), connects to a pre-defined remote server and communicates its activation token and SIM card number. The remote server then connects to the wireless service company (AT&T, T-Mobile, Sprint, or the like) secure servers and registers the SIM card number. This automatically activates SIM card communication service billing to the company and notifies the wireless service to allow communication from the SIM card number on the APW biometric device. The system then alerts the device to reboot itself, activates the dormant SIM card and start communicating via the wireless GPRS methodology using the newly registered and activated SIM card. This approach is the easiest and simplest for the user in order to automatically activate and start using his or her off-the-shelf purchased APW biometric device with multiple communication capabilities: wireless GPRS, dialup or LAN connectivity.

0037Another method, in case the user does not have access to a dialup connection or LAN, which is slightly more complicated for a user, is to ask the user to log into a secure web site where he or she is asked to enter the serial number of the device (serial number is always on the back of device). Upon entering the serial number, the system looks up such serial number and matches it with the corresponding SIM card number. The server then connects to the wireless service company (AT&T, T-Mobile, Sprint, or the like) secure servers and registers the SIM card number. This automatically activates SIM card communication service billing to the company and notifies the wireless service to allow communication from the SIM card number on the APW biometric device. The system then displays an activation code to the user, and asks the user to enter it on the device, which validates it and, if successful moves to the next step. If the code is not valid, then the user is prompted to enter a valid activation token. Once the user enters a valid activation token, the device automatically saves it in non-erasable memory, activates the dormant SIM, and then reboots itself. After the reboot sequence, the device starts communicating via the wireless GPRS methodology using the newly registered and activated SIM card. This approach is slightly more complicated for an unsophisticated user. However, it is an efficient approach to automatically activate and start using an off-the-shelf purchased APW biometric device via multiple communication capabilities: wireless GPRS, dialup or LAN connectivity.

0038The second major component of the intelligent remote activation and communication method is to build an authentication “Gateway” to police all communication from all remotely installed and activated devices. Once the device is activated, the device will always communicate to its home server (provided by the device's manufacturer) and to the client's dedicated information server. When communicating to the home server, the device communicates its activation token, then checks through the gateway if the client is in good standing in order to communicate to the client's dedicated server and pass information about client's employee attendance, timesheets, messages, payroll stubs, and the like. Using this process, If the user is current on his or her payment, then the communication Gateway server will route the information collected from the remote device to the user's dedicated server, which can be accessed by the user via a secure web login and password. If the user is not current on his or her payments, then the communication Gateway redirects communication traffic and blocks the information from being transferred onto the user's dedicated servers until payment is received. Another aspect of the present invention is to use the APW Biometric device color screen interface to enable the employee to correct and close his or her punches right off of the APW biometric device, instead of having the employee ask for manager permission to close his or her punch.

0039In the case an employee forgets to punch-out the day prior, the next day when they return to punch-in again, the system will tell the employee that he or she has an open punch-out from yesterday's shift which needs to be corrected. In order to save the manager time, especially in larger employee sites where 100 or more employees are working at the site, the system asks the employee to close and correct his or her own punch-out before he or she can punch-in again. The employee enters his or her estimated punch-out time at the end of the shift yesterday, upon completing such task, the device will now allow the employee to punch-in normally. Upon the manager accessing the APW biometric device or the labor management web site connected to the APW biometric device, the manager receives an immediate notification of the employee which manually corrected the punch-out. At that point, the manager is prompted to use his or her personal diligence to either accept the corrected punch as is, or override it with a different time and date set of values.

0040In the case an employee forgets to punch-in earlier in the shift, next time, when the user returns to punch-out, the system will tell the employee that he or she has an open punch-in from earlier in the shift which needs to be corrected. In order to save the manager time, especially in larger employee sites where 100 or more employees are working at the site, the system asks the employee to close and correct his or her own punch-in before he or she could punch-out again. The employee enters his or her estimated punch-in time earlier in the shift, upon completing such task, the device will now allow the employee to punch-out normally. Upon the manager accessing the APW biometric device or the labor management web site connected to the APW biometric device, the manager receives an immediate notification of the employee which manually corrected the punch-in. At that point, the manager is prompted to use his or her personal diligence to either accept the corrected punch as is, or override it with a different time and date set of values.

0041Another aspect of the present invention is the use of the APW biometric device to print hours worked, schedule, assignments and timesheet receipts.

0042Still another aspect of the present invention is the installation of a camera and the use of video or still picture to capture the image of the user at the moment his or her fingerprint image is captured. Taking a picture or video via a camera then storing it on the device, then sending it to a remote secure web server for further review either in real time via a web site, can greatly help both security personnel and employers have better audit tracking of people who used the APW biometric device to access a secure facility or work at the site.

0043APW biometric device may also be used to secure a door, thus only users with registered fingerprints are allowed through the door. A user places his or her fingerprint on the device, which reads their fingerprint, generates a minutia and compares it to the set of minutiae stored on the device. In case of a match or no match, the device captures a quick video, or a still picture of the user which attempted to enter the facility using his or her fingerprint. Then the device immediately sends the transaction and the video or image to a remote secure database. A secure web server then picks up the transactions and the corresponding video and still pictures and presents them in a web based report; so that security service personnel can review either at a later date or in real time; thus have an eye on intruders who have failed the fingerprint test, or help identify a familiar face who may need training in the use of the system.

0044In the case of using the APW biometric device to track employee attendance, thus only employees with registered fingerprints are allowed to punch-in and punch-out. A user places his or her fingerprint on the device, which reads their fingerprint, generates a minutia and compares it to the set of minutiae stored on the device. In case of a match or no match, the device captures a quick video, or a still picture of the user which attempted to punch-in or punch-out using his or her fingerprint. Then immediately sends the transaction and the video or image to a remote secure database. A secure web server then picks up the transactions and the corresponding video and still pictures and presents them in a web based report; so that a manager can review either at a later date or in real time: thus have an eye on employees that are using the system or help train users that are having trouble with the system or stop certain individuals from trying to buddy punch for each other.

0045Another aspect of the present invention is that, unlike other biometric time clocks that need a polling server to call them and download information from them, the APW biometric device dials out to a predefined phone number. This approach lowers the cost of communication for the installation. In the case of other devices which need a polling server and a dedicated phone line, clients pay a sizeable dedicated non-sharable phone line fee. However, by making the APW biometric device dial-out, the device can now split a phone line with a fax machine for example, or split a dialout office line and be able to communicate to a remote server without incurring any additional telecommunication fees.

0046Yet another aspect of the present invention is to position the fingerprint reader on the device's left hand side. Other biometric device manufacturers place the fingerprint reader on the right hand side of the device. We believe that only about 20 percent of the population is left-handed and, as such, use their left hands and fingers extensively. The remaining about 80 percent of the population keeps their left hands and left fingers relatively unused. By positioning the fingerprint reader on the left-hand side of the device, better quality, undamaged, un-scratched fingerprint impressions are obtained, thus increasing the likelihood of fingerprint matching success.

0047The payroll stub information is captured and stored on the server, then is placed in secure repository so it is easily sent to all the all purpose APW biometric terminals. The information is secured along employee information, fingerprint and profiles. The APW biometric terminals would also send employee hours worked, and would mark which hours have received payment from the employer and which did not. This gives us the ability to assess the amount of money to loan the employee, so we do not loan the employee money based on hours that were worked and paid. We will only pay the employee advances for hours that were worked but were unpaid by the employer.

0048The repository is then shared with financial institutions that want to be part of this network. Belonging to the repository of employee payroll stub and outstanding hours network enables them to lower the risk of their loans and increase the amount of volume, since in most economic situations, lowering prices results in increased business volume.

0049The employee then visits the subscribed financial service location, networked to the repository, and either finds a all purpose APW biometric terminal, paces his/her fingerprint and receives a lower risk, lower cost payday loan. Or, the local service counter operator, logs into the repository via a secure location and runs a credit history on the employee directly from the repository network. Once done, the employee leaves with the cash, and debt payments are automatically deducted from the employee's next payroll check.

0050This invention organizes and simplifies the delivery of an electronic stub to an employee that has no access to internet or computers. For example, a method of printing a payroll stub at a facsimile machine may include the steps of identifying a person, communicating with a payroll database to obtain payroll information for the identified person, providing a telephone number associated with the facsimile machine, communicating the payroll information for the identified person to the facsimile machine, and printing the obtained payroll information at the facsimile machine as a payroll stub. The identified person provides the telephone number associated with the facsimile machine. The person may be identified by at least one of the group consisting of a bankcard, a biometric reader, a voice segment, a video segment or caller ID. The person may also or alternatively be identified by an interactive voice response system.

0051The present invention also provides for printing a payroll stub at a facsimile machine. Typical steps include identifying a person, communicating with a payroll database to obtain payroll information for the identified person, communicating the payroll information for the identified person to the remote printer, and printing the obtained payroll information at the remote printer as a payroll stub. The person may be identified by at least one of the group consisting of a bankcard, a biometric reader, a voice segment, a video segment or caller ID. The person may also or alternatively be identified by an interactive voice response system.

BRIEF DESCRIPTION OF THE DRAWINGS

0052The features of the present invention which are believed to be novel are set forth with particularity in the appended claims. The invention, together with the further objects and advantages thereof, may best be understood by reference to the following description taken in conjunction with the accompanying drawings, in the several figures in which like reference numerals identify like elements, and in which:

0053<figref idref="DRAWINGS">FIG. 1</figref> is a front diagrammatic view of an electronic APW terminal, with a biometric device suited for reading biometric information from an employee, and that provides a plurality of functions in accordance with the present invention.

0054<figref idref="DRAWINGS">FIG. 2A</figref> is a diagrammatic view of the electronic APW terminal illustrated in <figref idref="DRAWINGS">FIG. 1</figref> in combination with a bar code scanner to monitor an inventory of supplies at a job site.

0055<figref idref="DRAWINGS">FIG. 2B</figref> is a diagrammatic view of the electronic APW terminal illustrated in <figref idref="DRAWINGS">FIG. 1</figref> in combination with a wireless bar code scanner to monitor or track equipment at a job site.

0056<figref idref="DRAWINGS">FIG. 3</figref> is a block diagram of the internal structure and functionality of the electronic APW illustrated in FIGS. <b>1</b> and <b>2</b>A-<b>2</b>B.

0057<figref idref="DRAWINGS">FIG. 4</figref> is a simplified block diagram illustrating one embodiment of the present invention in which payroll funds are credited from an account in the employer's bank to the employee's bankcard account for access at an ATM or a point of sale terminal.

0058<figref idref="DRAWINGS">FIG. 5</figref> is another simplified block diagram, similar to <figref idref="DRAWINGS">FIG. 4</figref>, illustrating another embodiment in which the employer's bank is also the card-issuing bank.

0059<figref idref="DRAWINGS">FIGS. 6A and 6B</figref> are a flowchart illustrating the steps employed by the electronic APW terminal and a computer to authenticate a bankcard number and PIN including the various options available after authentication, such as checking-in or checking-out of work on the electronic APW terminal illustrated in <figref idref="DRAWINGS">FIGS. 1-5</figref>.

0060<figref idref="DRAWINGS">FIG. 7</figref> is block diagram illustrating the entire ATM, payroll and work management system in greater detail than <figref idref="DRAWINGS">FIGS. 4 and 5</figref>.

0061<figref idref="DRAWINGS">FIG. 8</figref> is an exploded block diagram of the central processing server array shown in <figref idref="DRAWINGS">FIGS. 4</figref>, <b>5</b> and <b>7</b>.

0062<figref idref="DRAWINGS">FIGS. 9A-9G</figref> illustrate typical screens that may be used on the display of the electronic APW terminal shown in <figref idref="DRAWINGS">FIG. 1</figref> during authentication of an employee or supervisor before he/she can gain access to initiate additional functions or procedures.

0063<figref idref="DRAWINGS">FIGS. 10A-10C</figref> illustrate typical screens that may be used on the display of the electronic APW terminal during punching in at work.

0064<figref idref="DRAWINGS">FIGS. 11A-11B</figref> illustrate typical screens that may be used on the display of the electronic APW terminal during punching out at work.

0065<figref idref="DRAWINGS">FIGS. 12A-12F</figref> illustrate the typical screens used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> to enable an employee to correct any missed punch-ins.

0066<figref idref="DRAWINGS">FIGS. 13A-13G</figref> illustrate the typical screens used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> to enable an employee to correct any missed punch-outs.

0067<figref idref="DRAWINGS">FIGS. 14A-14B</figref> illustrate the typical screens used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> to review and print any messages.

0068<figref idref="DRAWINGS">FIGS. 15A-15D</figref> illustrate typical screens that may be used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> to review a payroll and to print a pay stub.

0069<figref idref="DRAWINGS">FIGS. 16A-16D</figref> illustrate typical screens that may be used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> to review the balance remaining on the bankcard and to print the balance.

0070<figref idref="DRAWINGS">FIGS. 17A-17D</figref> illustrate the typical screens used on the display of the electronic APW terminal of <figref idref="DRAWINGS">FIG. 1</figref> by an employee to obtain a payroll advance against currently accrued pay.

0071<figref idref="DRAWINGS">FIG. 18</figref> is a flow chart of typical steps involved in interactive messaging, such as between a manager and an employee with the employee sending a reply to the manager from the electronic APW terminal.

0072<figref idref="DRAWINGS">FIG. 19</figref> is a flow chart of typical alerts that the system of the present invention may generate upon monitoring the system or upon employee input into the system.

0073<figref idref="DRAWINGS">FIGS. 20A and 20B</figref> are a flow chart of typical steps involved in calculating and approving a payroll advance.

0074<figref idref="DRAWINGS">FIG. 21</figref> is a flow chart that provides further detail on authentication with the fingerprint reader.

0075<figref idref="DRAWINGS">FIG. 22</figref> is a flow chart providing details of printing a payroll stub from an electronic APW terminal.

0076<figref idref="DRAWINGS">FIG. 23</figref> is a front diagrammatic view of the preferred embodiment of an electronic APW biometric terminal in accordance with the present invention, with a biometric device suited for reading biometric information from an employee and alternative means for providing a second opinion concerning the authentication of a person, and which provides a plurality of other functions in accordance with the present invention.

0077<figref idref="DRAWINGS">FIGS. 24A and 24B</figref> are flowcharts illustrating the steps employed by the electronic APW biometric terminal shown in <figref idref="DRAWINGS">FIG. 23</figref> in providing a second opinion to authenticate an employee or to permit a person to have access to a secure building, respectively.

0078<figref idref="DRAWINGS">FIG. 25</figref> is a flowchart illustrating in more detail typical steps which may be employed by the electronic APW biometric terminal shown in <figref idref="DRAWINGS">FIG. 23</figref> in providing a second opinion to authenticate an employee or person.

0079<figref idref="DRAWINGS">FIGS. 26A and 26B</figref> are flowcharts illustrating typical steps which may be employed to remotely authenticate employees in an interactive voice response (IVR) system, with a second opinion provided by human intervention when the IVE system is unable to confirm a match.

0080<figref idref="DRAWINGS">FIGS. 27R and 27B</figref> are flowcharts illustrating typical steps which may be employed in quickly activating a APW biometric terminal upon installation of the APW biometric APW biometric terminal in its place of use.

0081<figref idref="DRAWINGS">FIGS. 28A and 28B</figref> are flowcharts illustrating typical steps which may be employed to provide a payroll stub at a facsimile machine or at a remote printer.

0082<figref idref="DRAWINGS">FIG. 29</figref> is a flowchart illustrating the difficulties that a typical customer has with respect to purchasing a non-communicating wireless GPRS APW biometric terminal and configuring the terminal into a communicating mode.

0083<figref idref="DRAWINGS">FIG. 30</figref> is a flowchart illustrating the difficulties that a typical customer has with respect to having third parties assist in installing an off-the-shelf GPRS APW biometric terminal.

0084<figref idref="DRAWINGS">FIG. 31</figref> is a flowchart illustrating methods of enabling a customer to activate a GPRS APW biometric terminal.

0085<figref idref="DRAWINGS">FIG. 32</figref> is a flowchart illustrating the activation details for a GPRS APW biometric terminal.

0086<figref idref="DRAWINGS">FIG. 33</figref> is a flowchart illustrating a method for acquiring an activation token for a GPRS APW biometric terminal.

0087<figref idref="DRAWINGS">FIG. 34</figref> is a flowchart illustrating how the GPRS APW biometric terminal and the system use the activation token.

0088<figref idref="DRAWINGS">FIG. 35</figref> is a flowchart illustrating a method of remotely activating a GPRS APW biometric terminal by a typical customer.

0089<figref idref="DRAWINGS">FIG. 36</figref> is a flowchart illustrating method of remotely activating a GPRS APW biometric terminal by a typical customer when an LAN and dialup services are not available.

0090<figref idref="DRAWINGS">FIG. 37</figref> is a flowchart of an authentication gateway.

0091<figref idref="DRAWINGS">FIG. 38</figref> is a flowchart illustrating a method for handling a missed punch-out by an employee.

0092<figref idref="DRAWINGS">FIG. 39</figref> is a flowchart illustrating a method for handling a missed punch-in by an employee.

0093<figref idref="DRAWINGS">FIG. 40</figref> is a flowchart illustrating the printing capabilities of a GPRS APW biometric terminal.

0094<figref idref="DRAWINGS">FIG. 41</figref> is a flowchart illustrating methods of using a camera on a GPRS APW biometric terminal.

0095<figref idref="DRAWINGS">FIG. 42</figref> is a flowchart illustrating methods of using a GPRS APW biometric terminal to control access to a secure door, to a secure building or the like.

0096<figref idref="DRAWINGS">FIG. 43</figref> is a flowchart illustrating methods for controlling buddy punching at a GPRS APW biometric terminal.

0097<figref idref="DRAWINGS">FIG. 44</figref> is a flowchart illustrating a method for dialing out on demand from a GPRS APW biometric terminal.

0098<figref idref="DRAWINGS">FIG. 45</figref> is a flowchart <b>690</b> illustrating the left-hand position of the biometric reader.

DETAILED DESCRIPTION OF THE INVENTION

0099Referring to the Figures, and particularly to <figref idref="DRAWINGS">FIG. 1</figref>, an electronic APW terminal is generally designated <b>20</b>. Electronic APW terminal <b>20</b> has ATM, payroll and work management (APW) capability, and may hereinafter also be referred to as an APW terminal <b>20</b>. Disposed near an upper end of APW terminal <b>20</b> is a display screen <b>21</b> for displaying information, options, commands, work assignments, messages or the like. Display <b>21</b> may be of the liquid crystal display (LCD) type for displaying a plurality of different screens of information, as will be presented in greater detail below. The APW terminals may be located wherever employees usually check-in or check-out of work, such as at the employer's facilities, or at the customer's facilities in those instances where the employees work at the customer's facilities, such as for example, janitorial or cleaning staff.

0100APW terminal <b>20</b> is equipped with a card reader <b>38</b> (<figref idref="DRAWINGS">FIG. 3</figref>) disposed alongside a slot <b>22</b> for reading a bankcard <b>23</b>, a keyboard or keypad <b>25</b>, a display <b>21</b>, a printer port <b>28</b> and a biometric device <b>30</b>. Card reader <b>38</b> reads the information contained on a magnetic stripe <b>24</b> of the bankcard <b>23</b>, such as a bank account number. For example, card <b>23</b> may be a bankcard issued by a bank and the magnetic stripe may have a unique identifying number encoded therein which corresponds to one or more accounts at said bank. Of course, APW terminal <b>20</b> could alternatively be equipped to read information from smartcards. Since bankcard <b>23</b> is also used in the APW terminal as an ATM, payroll and work management (APW) card, card <b>23</b> may hereinafter also be referred to as an APW card.

0101Keypad <b>25</b> contains a plurality of keys for entering numeric information, for scrolling through the information displayed on display <b>26</b>, for accessing a prior page or the next page, for entering selected information, and the like. For example, in addition to the ten numerals <b>0</b>-<b>9</b>, keyboard <b>25</b> may have four keys; one each for scrolling up, down, right and left. In addition, keyboard <b>25</b> may have a key with a period for separating dollar and cent amounts, a key with circular indicia for starting desired functions such as reading a fingerprint on biometric device <b>30</b>, a key with a printer symbol for printing the current screen appearing on display <b>21</b>, a star button to continue a desired function, a key with a check mark for approving or responding to specific inquiries or options and a key with an “X” indicia for exiting the present function or for deleting information entered into APW terminal <b>20</b>. Examples of the use of the various keys of keyboard <b>25</b> will be explained in greater detail below with respect to initiating and executing specific functions that are provided by APW terminal <b>20</b>.

0102Printer port <b>28</b> has a printer <b>47</b> (<figref idref="DRAWINGS">FIG. 3</figref>) disposed behind an access door <b>27</b> and provision for containing a source of paper, such as a roll of paper, behind the access door. When the APW terminal <b>20</b> is instructed to print, the printed paper from a roll is dispensed through the printer port <b>28</b> such that the user may tear it off against the forward edge of the port. For example, an authenticated employee may obtain a print-out of a payroll stub relating to the most recent pay period including details about gross pay, deductions and net pay. Other types of printed information from APW terminal <b>20</b> may include current work assignments and/or locations, recent activity and balances in bank accounts related to the unique number of the bankcard, and the like. The results of work quality audits may also be made available for printing.

0103APW terminal <b>20</b> also preferably includes a biometric device <b>30</b>, such as a fingerprint reader and comparator (hereinafter fingerprint reader). Due to the unique characteristics of human fingerprints, the fingerprint reader <b>30</b> may be used as the preferred form of employee identification, or to supplement the card reader <b>22</b> in its reading of the bankcard <b>23</b>. For example, one of the frequently encountered problems of using the APW terminal <b>20</b> of <figref idref="DRAWINGS">FIGS. 1-5</figref> is that the employee may forget or lose their bankcard and then be unable to check-in or checkout of work on the APW terminal <b>20</b> if only bankcard access to APW terminal <b>20</b> is permitted. However, with a biometric device <b>30</b> provided on APW biometric terminal <b>20</b>, the employee will be able to check-in or checkout by applying their finger against the fingerprint reader even if their bankcard is not available at the time of check-in or checkout. This form of identification also provides excellent immunity to the buddy punching problem.

0104An infrared communications port <b>29</b> may be provided, as along the bottom edge of APW biometric terminal <b>20</b> in the embodiment shown in <figref idref="DRAWINGS">FIG. 1</figref>, to communicate with other devices that also utilize infrared communication means. For example, a supervisor of employees or a customer of employment services may enter information about new work assignments, or may provide information about previous work assignments that were not completed or that were unsatisfactorily completed. The supervisor or customer may also enter the new work assignments or the feedback on prior work assignments on a portable or laptop personal computer (PC) or a personal digital assistant (PDA) that is also equipped with an infrared communications port. Such information may then be received by the APW biometric terminal and communicated to a computer for processing, storage and/or later retrieval.

0105As shown in <figref idref="DRAWINGS">FIG. 2A</figref>, APW biometric terminal <b>20</b> may be equipped with a bar code reader <b>31</b>, which may be used to read the bar codes on supplies, such as a container <b>48</b> of cleaning fluid or the like. Thus, the inventory of supplies may be tracked. Likewise, the bar code reader <b>31</b> may be used for convenient ordering or replenishing of supplies. In <figref idref="DRAWINGS">FIG. 2B</figref>, bar code reader <b>31</b> is of the wireless type and may be used for monitoring the usage of equipment, such as the floor cleaner <b>49</b>, or for tracking such equipment.

0106The internal structure and functionality of APW biometric terminal <b>20</b> is illustrated in <figref idref="DRAWINGS">FIG. 3</figref>. As previously described, APW biometric terminal <b>20</b> has a magnetic card reader <b>38</b> disposed in the card slot <b>22</b> to read encoded information from the magnetic stripe <b>24</b> disposed on the bankcard <b>23</b>. APW biometric terminal <b>20</b> may also be provided with a smartcard reader <b>39</b> to read information from a smartcard. As also previously described, APW biometric terminal <b>20</b> has an infrared port <b>29</b> to communicate with other devices having infrared ports, such as PCs and PDAs. Information signals from the magnetic card reader <b>38</b>, the smartcard reader <b>39</b>, bar code reader <b>31</b> and the infrared port <b>35</b> are preferably conditioned by signal conditioning circuitry <b>40</b> to provide input signals that are compatible with input terminals of a microprocessor <b>41</b>. The biometric device <b>30</b> may interface directly with microprocessor <b>41</b>. A LAN card <b>32</b> also interfaces with microprocessor <b>41</b> to provide further connectivity in the APW system <b>50</b> via and I/O port <b>33</b>. Microprocessor <b>41</b> also receives inputs from the keypad <b>25</b>. Microprocessor <b>41</b> may be any suitable microprocessor, microcontroller, data processor or the like.

0107Any of the information provided to APW biometric terminal <b>20</b> may be communicated to a computer or database, which may be remotely located. To this end, microprocessor <b>41</b> may supply input information to a radio frequency (RF) transceiver <b>42</b> for transmission via an antenna <b>43</b>. The path of RF transmission may be by conventional antenna-to-antenna RF transmission, a microwave link, a satellite link, or the like. APW biometric terminal <b>20</b> also receives information from a remotely located computer or database via RF transmission in the reverse direction, such as from antenna <b>43</b> to RF transceiver <b>42</b> to microprocessor <b>41</b>. Typically, microprocessor <b>41</b> will provide some of the received information for display on the display screen <b>21</b>.

0108The microprocessor <b>41</b> in APW biometric terminal <b>20</b> preferably has sufficient dedicated memory, either internally or externally, to store the unique account numbers of the bankcards and the PINs of the employees that frequently use any particular APW biometric terminal <b>20</b>. Authentication of those employees may then be done internally at APW biometric terminal <b>20</b> without having to communicate with a remote computer to access the appropriate account numbers and PINs. However, in such instances, APW biometric terminal <b>20</b> continues to communicate with a remote computer or database to provide the check-in and checkout times for processing of the payroll.

0109APW biometric terminal <b>20</b> may also communicate, separately or in tandem with the REF link, via a modem <b>45</b>. Modem <b>45</b> has an output terminal or jack <b>46</b> to communicate bi-directionally with a remotely located computer or database either by means of the public switched telephone network (PSTN), by means of the internet, or the like.

0110An internal printer <b>47</b> may be activated by the printer key on keypad <b>25</b> (<figref idref="DRAWINGS">FIG. 9B</figref>) to print information on display screen <b>21</b>. The printed copy is provided through printer slot <b>28</b>. Printer <b>47</b> may be of the thermal paper type or any other suitable type.

0111With reference to <figref idref="DRAWINGS">FIG. 4</figref>, there is shown an ATM, payroll and work management (APW) system, generally designated <b>50</b>. One or more APW biometric terminals <b>20</b> are included in the APW system <b>50</b>. One of the APW biometric terminals <b>20</b> is shown with an antenna <b>43</b> to transmit radio waves to the antenna <b>52</b> of a transceiver <b>53</b>, which in turn communicates with a payroll and work management center <b>55</b> via one or more lines <b>54</b>. While antennas <b>43</b> and <b>52</b> of APW biometric terminal <b>20</b> and transceiver <b>53</b>, respectively, are shown as external for purposes of the illustration in <figref idref="DRAWINGS">FIG. 5</figref>, it will be appreciated that these antennas <b>43</b> and <b>52</b> could be internally disposed within the respective APW biometric terminals. The other APW biometric terminal <b>20</b> is shown communicating with center <b>55</b> via the internet or the PSTN <b>56</b>. Yet another APW biometric terminal <b>20</b> communicates with center <b>55</b> via a LAN <b>51</b> and the internet <b>56</b>.

0112The payroll and work management center <b>55</b> has a computer with memory for storing the names of employees, the pay rate for each employee, any deductions from pay for health insurance or the like, the number of the unique bankcard that has been assigned to each employee and the PIN associated with each bankcard. Payroll and work management center <b>55</b> may have additional pertinent information concerning each employee, such as a mailing address and a home telephone number. Center <b>55</b> previously received such information from the employer's human relations (HR) system <b>58</b> via a communication line <b>59</b>. From time to time as new employees are hired, or when the status of an employee changes, employer's HR system <b>58</b> provides updated employee information to the payroll and work management center <b>55</b>. Dashboard web access <b>57</b> enables real-time monitoring of the status the APW system, including information on employees that are registered on the system, the number of employees that have checked into work at any particular site, and the like.

0113Center <b>55</b> also records the time of check-in and the time of checkout for each employee to determine the amount of work time. The pay for each employee is calculated based upon the recorded work time and the pay rate for each employee. These calculations may occur as frequently as directed by the employer, such as each day or each week. Payroll and work management center <b>55</b> then advises the employer of the amount of the payroll. Center <b>55</b> then performs an electronic funds transfer (EFT) from employer's bank in the amount of the payroll so that each employee's bank account associated with each APW card will be credited in the net amount of pay for that pay period.

0114Payroll and work management center <b>55</b> may advise employer's HR system <b>58</b> on line <b>59</b>, employer's bank <b>61</b> on line <b>63</b> and/or the ATM, POS financial transaction processor <b>61</b> on line <b>64</b> of the break-down of the payroll. Each employee with earnings in the respective pay period will have his/her account associated with the bankcard credited with the appropriate amount of net pay. Thereafter, the employee may access his/her available funds, such as by making cash withdrawals at an ATM <b>65</b>. The APW card may also be used as a debit card against available funds at any point of sale (POS) <b>66</b>, such as at department stores, grocery stores, gas stations or the like.

0115<figref idref="DRAWINGS">FIG. 5</figref> illustrates a payroll and work management system, generally designated <b>60</b>, similar to the system <b>50</b> illustrated in <figref idref="DRAWINGS">FIG. 4</figref>. However, in the system <b>60</b>, there is no intermediate bank, such as employer's bank <b>69</b> in <figref idref="DRAWINGS">FIG. 5</figref>. Otherwise, the operation of the system <b>60</b> is generally similar to the already described operation of system <b>50</b>.

0116<figref idref="DRAWINGS">FIGS. 6A and 6B</figref> are flowcharts of the functions and communications between one or more APW biometric terminals <b>20</b> and the payroll and work management center <b>55</b>. As seen in block <b>70</b>, the APW biometric terminal <b>20</b> is initially in a stand-by mode and display <b>21</b> may display a request, such as “Please Swipe or Insert Card” or use the biometric reader <b>30</b>. When the user swipes or inserts his/her card or enters a fingerprint on the fingerprint reader <b>30</b>, the unique account number is read and transmitted, or the fingerprint data is read and transmitted, to the payroll and work management center <b>55</b>, as indicated in block <b>71</b>. Center <b>55</b> then searches to see if the card number or fingerprint data exists on its local database as shown in decision block <b>72</b>. If not, center <b>55</b> may poll a remote network or database, such as that existing at the employer (block <b>73</b>). If the card number or fingerprint data exists on a remote database, block <b>74</b>, the center <b>55</b> will also obtain the corresponding PIN from the remote database, block <b>75</b>. If the card number and PIN or fingerprint data are not available on remote databases, the APW biometric terminal <b>20</b> will return to the stand-by mode in block <b>70</b>.

0117Assuming that the card number and PIN are available on the local or remote databases, APW biometric terminal <b>20</b> requests that the employee enter the PIN at block <b>76</b>. The entered PIN is then compared to the stored PIN information in block <b>77</b>. If there is no match, decision block <b>78</b> returns the APW biometric terminal <b>20</b> to the stand-by mode; block <b>70</b>. If there is a PIN match at block <b>78</b>, the authentication procedure is successfully completed and the employee continues to the various options shown in <figref idref="DRAWINGS">FIG. 6B</figref>. The process for handling fingerprint images is described in further detail in <figref idref="DRAWINGS">FIGS. 9A-9G</figref>.

0118Upon completing authentication, the employee may be presented with four options on the display screen <b>21</b>, such as sign-in, sign-out, financial transactions and work related functions. The employee then uses the navigation keys to scroll to one of the desired functions displayed on screen <b>21</b>, or enters the number of the desired option on keypad <b>25</b>. If sign-in is selected, APW biometric terminal <b>20</b> acknowledges that the employee has signed in at block <b>80</b> in <figref idref="DRAWINGS">FIG. 6B</figref>. Block <b>131</b> determines if any work assignments or instructions were previously entered for this employee. If so, the work assignments and/or instructions are presented on the display <b>21</b> of APW biometric terminal <b>20</b> as indicated at block <b>132</b>. Since there may be differences in pay for different types of work, the different pay rates are also displayed. The employee may then print out the assignments, instructions and pay rates from the APW biometric terminal <b>20</b>. The time of sign-in is then sent to the computer at the payroll center, as indicated in block <b>82</b>. Alternatively, the computer may simply receive the sign-in information and set the time of sign-in by using its own clock. The APW APW biometric terminal <b>20</b> then exits via block <b>83</b>, synchronizes its data with that of the computer as shown in block <b>84</b> and returns to the stand-by block <b>70</b>.

0119If the employee elects to sign-out of work after authentication, as at block <b>85</b>, the APW biometric terminal <b>20</b> thanks the employee for signing out, as at block <b>86</b>. The computer then stores the time of sign-out. The computer can then determine the amount of time worked by determining the amount of time between the times of signing in and signing out.

0120If the employee selects a financial transaction after the authentication procedure, several choices such as shown in blocks <b>88</b>-<b>92</b> in <figref idref="DRAWINGS">FIG. 6B</figref> may appear. If APW biometric terminal <b>20</b> is equipped for cash transactions, the employee may withdraw cash or deposit money into the bank account associated with the account number encoded on the APW card, as at block <b>88</b>. If the choice illustrated in block <b>89</b> is selected, the employee may see the current balance in the bank account and may review recent account activities, such as within the last month. The employee may also view the last payroll payment credited into his/her account, the gross pay, the deductions from gross pay, the next payroll date, and so forth, as shown in block <b>90</b>. The employee may also print this information by selecting the print payroll stub option at block <b>92</b>. The employee may select to transfer funds to another account, such as a checking account, or to request a wire transfer as shown in block <b>91</b>.

0121The employee may also select work related functions after authentication of the bankcard and PIN. Blocks <b>93</b>-<b>97</b> are reserved for a supervisor or customer to enter information about the performance of the employee that may affect the amount of pay. The employee may view this information, but not make new entries or change the existing information. However, if the employee frequently receives new work assignments, he/she may view the new work assignments or the new work location, as shown in block <b>98</b>. The new assignments may also be printed out at APW biometric terminal <b>20</b>, as shown at block <b>98</b>.

0122A supervisor or customer may also sign in at APW biometric terminal <b>20</b> as indicated at block <b>133</b>. A work quality audit may then be uploaded at the infrared port <b>35</b> of APW biometric terminal <b>20</b> as previously described, and as indicated at block <b>134</b>. This is the report that the employee may view at blocks <b>93</b>-<b>96</b>. The quality audit may result in adjustments to the employee's pay in accordance with prior arrangements or understandings between the employer and employee.

0123Illustrated in <figref idref="DRAWINGS">FIG. 7</figref> is a payroll and work management system, generally designated <b>100</b>. A plurality of APW biometric terminals <b>20</b> communicate via links <b>99</b>, which may be via an internet or PSTN link <b>56</b> or a wireless link <b>51</b> (<figref idref="DRAWINGS">FIGS. 4 and 5</figref>) to an APW electronic APW biometric terminal gateway <b>103</b>. Gateway <b>103</b> is equipped with modems and transceivers to receive the communications from the APW biometric terminals <b>20</b>. Gateway <b>103</b> may also be equipped with a conventional firewall to protect a central processing server array <b>101</b> from unauthorized access. Information to and from APW biometric terminals <b>20</b> is communicated between the array <b>101</b> the gateway <b>103</b> via lines <b>102</b>. Gateway <b>103</b> may be physically located near array <b>101</b> or gateway <b>103</b> may be located at an employer's site where it communicates with a plurality of APW APW biometric terminals <b>20</b>.

0124Central processing server array <b>101</b> is shown in greater detail in <figref idref="DRAWINGS">FIG. 8</figref>. Array <b>101</b> may typically consist of a plurality of servers, such as a plurality of transaction servers <b>104</b>, a plurality of database servers <b>105</b>, a plurality of application servers <b>106</b>, a plurality of back-up servers <b>107</b> and a firewall server <b>109</b>. Of course, the server array <b>101</b> can be implemented in a variety of other ways, such as with an Intel™-based computer, a Unix™-based computer, a mainframe computer or the like. Array <b>101</b> operates in general as a multi-purpose computer to receive, send, process and store information.

0125A plurality of server arrays <b>101</b> may be distributed in selected locations in a nationwide system, such as in Chicago, New York, Atlanta, Los Angeles, Denver and so forth. The APW biometric terminals <b>20</b> will then generally communicate with the nearest server. Preferably, back-up servers are also provided to prevent the loss of stored information and to provide continued processing services in case any one server array becomes non-functional.

0126The server array <b>101</b> operates substantially as already described with reference to <figref idref="DRAWINGS">FIGS. 4 and 5</figref>. Array <b>101</b> periodically communicates with the employer's HR system <b>58</b> to obtain updated employee information. After calculating a payroll, the array <b>101</b> issues electronic fund transfers (EFTs) to transfer funds from the employer's commercial bank <b>61</b> to the appropriate federal, state and local taxing authorities <b>110</b> for the withheld taxes, FICA and other applicable taxes. The array <b>101</b> records all transactions and is able to track the history of all payments.

0127Server array <b>101</b> also issues EFTs upon calculating the payroll from the employer's account at employer's bank <b>61</b> through a worldwide ATM network gateway <b>115</b>. An electronic file containing the amount of the net pay to be credited to each employee's account is sent to the appropriate ATM network processor, such as Plus™ <b>117</b>, Cirrus™ <b>118</b>, STAR™ <b>119</b> or others <b>120</b>. Thus, each APW card account is incremented with that employee's net pay. The server array <b>101</b> then contacts the appropriate card issuing bank, such as bank <b>62</b>, to confirm the success of the EFT transfers, as by comparing the total deposit with the sum of all the individual employee net payments. If the EFTs were successful, each employee should have his/her account credited by the appropriate amount of net pay.

0128ATM networks and processors, such as Cirrus™/Maestro™ <b>118</b> owned by MasterCard™, PlUs™ <b>117</b> owned by VISA™ and Star™ <b>119</b> owned by Concord EFS™ are entities that own and link many ATM machines. These entities are in effect service providers for their respective ATM machines. These networks <b>117</b>-<b>120</b> have central processing systems that permit funds to be deposited to accounts such as those associated with each employee's APW card. Similarly, these processing systems of the networks <b>117</b>-<b>120</b> debit the cardholder's account if cash is withdrawn at an ATM <b>65</b> or a purchase is made at a POS <b>66</b>, such as at a grocery store, gas station or the like. Typically, the POS <b>66</b> makes a modem connection with one of the networks and processors <b>117</b>-<b>120</b> to process an EFT in the amount of the purchase for credit to the appropriate merchant.

0129The payroll and work management system <b>100</b> also has a call center including a 1-800 support number <b>125</b>, an automated voice response (AVE) system, one or more call center operators and a call center server array <b>128</b>. Thus, an employee having difficulty with any APW terminal <b>20</b> may call the 1-800 number for help with a transaction, system status, payroll or balance inquiries or the like. Call center operators <b>127</b> may have a personal computer to access the central processing server arrays <b>101</b> via the call center server array <b>128</b> to obtain information about the inquiring employee's account by first logging into central processing server array <b>101</b>. When using the AVR system <b>126</b> from a remote telephone, the inquiring employee uses the matrix of keys on the telephone to access the desired information by following the commands issued by the voice response system in a manner known to the art. The employee logs onto array <b>101</b> by entering the bank account number on the APW card and then entering the associated PIN or by use of the fingerprint reader <b>30</b>, or a combination of both depending upon the desires of the employer. Alternatively, authentication may include the bankcard <b>23</b> or the fingerprint reader <b>30</b> in combination with an employee ID number.

0130It will be appreciated that any employee will have considerable reluctance to give even his/her best friend their APW card and PIN. This is because the friend will then be able to access that employee's bank account associated with the account number and the PIN. Even if the friend does not fraudulently withdraw funds from the bank account, the friend will be able to view recent account activity at the APW biometric terminal. Thus, the APW card and PIN operate very effectively to significantly reduce the buddy-punching problem. This may be nearly as effective as any known biometric system. On the other hand, some employers feel that a biometric device, such as fingerprint reader <b>30</b> offers better immunity to buddy punching because of the uniqueness of fingerprints.

0131The APW system also significantly reduces the expenses associated with the conventional activities of processing time sheets and then issuing and distributing checks. Moreover, the APW system readily provides available payroll funds without the expenses attendant to cashing payroll checks at an alternative financial service provider, and provides for more frequent payrolls, such as on a daily basis. It also provides an effective bank account for all employees. Employees may obtain a printed payroll stub at any APW biometric terminal, complete with details on the gross pay, deductions and net pay. Work assignments may also be available for viewing and printing at any APW biometric terminal.

0132<figref idref="DRAWINGS">FIGS. 9-24</figref> illustrate screens that may appear on the display the various functions that may be available on APW biometric terminal <b>20</b> for use by employees and supervisors.

0133<figref idref="DRAWINGS">FIGS. 9A-9G</figref> illustrate typical screens that may appear on the display <b>21</b> of APW biometric terminal <b>20</b> during the authentication procedure, which must be satisfactorily performed prior to obtaining access of any of the other available functions on APW biometric terminal <b>20</b>. The initial screen in <figref idref="DRAWINGS">FIG. 9A</figref> instructs the employee to place a finger on the fingerprint reader <b>30</b> of APW biometric terminal <b>20</b>. Use of a left finger on fingerprint reader <b>30</b> is preferable since it keeps the right hand conveniently available for making entries on keyboard <b>25</b> or on touch-sensitive screen <b>21</b>. Of course, if fingerprint reader <b>30</b> was disposed on the right side of APW biometric terminal <b>20</b>, the opposite would be true, i.e., it would be preferable to read a right finger to keep the left hand available for keyboard or screen entries. When the employee is ready, he/she is instructed to actuate the fingerprint reader by touching the start button on the screen or by actuating the fingerprint reading key on the keyboard <b>25</b>, as shown in <figref idref="DRAWINGS">FIG. 9B</figref>. APW biometric terminal <b>20</b> then compares the fingerprint from fingerprint reader <b>30</b> with fingerprints scans that were made when the employee was first registered on the APW system. The initial registration procedure, which captures images of the employee's fingerprints, is presented in greater detail below with reference to <figref idref="DRAWINGS">FIGS. 17A-17H</figref>. If the fingerprint reading is matched with a fingerprint on file, such as in a memory of APW biometric terminal <b>20</b> or in the APW system, the next screen to appear on APW biometric terminal <b>20</b> may be the screen in <figref idref="DRAWINGS">FIG. 9D</figref> requesting further information, such as an employee number, which may be a social security number, or requesting that the employee swipe his/her bankcard <b>23</b> in the slot of the bankcard reader <b>22</b>. Note that in this example, the social security number or bankcard information is used to supplement the fingerprint identity, but some employers may be satisfied with only the use of the fingerprint verification or bankcard verification for purposes of check-in. Of course, if only bankcard verification is used for authentication on APW biometric terminal <b>20</b>, the employee may also be directed to enter a personal identification number associated with the bankcard number. After entering the social security number or swiping the bankcard, the employee presses the check or accept key on keypad <b>25</b> or on screen <b>21</b> to continue as shown in <figref idref="DRAWINGS">FIG. 9D</figref>. If only fingerprint identity is used for punching in, the authentication process may skip to the screen of <figref idref="DRAWINGS">FIG. 9E</figref> in which the employee is welcomed by his/her name and provided with various options for further action such as checking in or checking out of work.

0134However, if APW biometric terminal <b>20</b> cannot match the fingerprint from reader <b>30</b> with a corresponding image on file, the screen of <figref idref="DRAWINGS">FIG. 9C</figref> will appear advising of the inability to match the fingerprint. Preferably, there will be a side-by-side comparison of the closest print on file and the currently read image. Orthogonally disposed crosshairs <b>31</b> may indicate that the employee placed his/her finger too high or too low, or too far to the left or right, compared with the file image. Preferably, the origin of the crosshairs <b>31</b> will coincide near the center of the fingerprint image. Thus, the side-by-side images will assist the employee in attempting to get better centrally located placement of his/her finger on the next reading attempt. The next reading attempt is initiated by the retry button on the screen in <figref idref="DRAWINGS">FIG. 9C</figref> or by again pressing the fingerprint read button on keypad <b>25</b> (<figref idref="DRAWINGS">FIG. 9B</figref>). Of course, if the additional employee information of <figref idref="DRAWINGS">FIG. 9</figref> is available as alternative authentication information, the employee may elect to provide this information instead of continuing the fingerprint reading access to the system. Typically, after two or three unsuccessful attempts of fingerprint reading, the screen of <figref idref="DRAWINGS">FIG. 9F</figref> will appear advising the employee is advised that his/her supervisor will approve of the unmatched fingerprint images at a later time. The screen of <figref idref="DRAWINGS">FIG. 9G</figref> then appears to permit punching in or out of work. Since the employee failed in his/her attempts to properly pass the authentication steps, the screen of <figref idref="DRAWINGS">FIG. 9G</figref> does not provide the employee with access to any accounts associated with the bankcard, preferences or access to administrations as in the screen in <figref idref="DRAWINGS">FIG. 9E</figref>.

0135The punch-in procedure on APW biometric terminal <b>20</b> is shown in <figref idref="DRAWINGS">FIGS. 10R-10C</figref>. After successful authentication in <figref idref="DRAWINGS">FIGS. 9A-9E</figref>, the screen of <figref idref="DRAWINGS">FIG. 9E</figref> appeared. The screen in <figref idref="DRAWINGS">FIG. 9E</figref> is the same as the screen in <figref idref="DRAWINGS">FIG. 10R</figref>, which is the beginning of the punch-in procedure. This screen will be called the “main page” since it is the starting point after authentication and since it provides a menu of available functions for the employee to select from, including punch-in. Other available functions that can be selected include punch-out, account information, preferences and administration. These additional functions will be presented in further detail below.

0136The desired function is selected by touching the desired touch-sensitive button in the screen of <figref idref="DRAWINGS">FIG. 9E</figref> or by entering the associated number <b>1</b> on keyboard <b>25</b>. After selecting to punch-in, the employee may be presented with a menu of job functions, such as that shown on the screen in <figref idref="DRAWINGS">FIG. 10B</figref>. Some employees may have potentially more than one job function and different rates of pay may apply to different job functions. The employee will select the appropriate job function for that day. Note that the employee may also change job functions during the same day by checking out and then rechecking in and entering a new job function for the next portion of the day, or for the remainder of the day. In the example of <figref idref="DRAWINGS">FIG. 10A</figref>, the employee selects the supervisor job function by pressing the numeral <b>6</b> on keypad <b>25</b> and then pressing the “next” key, which is also the right arrow key on keypad <b>25</b>. However, pressing the next key before selecting any job functions displayed on the screen shown in <figref idref="DRAWINGS">FIG. 10B</figref> may provide additional job function choices. After selecting a job function in <figref idref="DRAWINGS">FIG. 10B</figref>, the screen in <figref idref="DRAWINGS">FIG. 10C</figref> confirms that the employee has successfully checked in and displays the time of check-in.

0137The punch-out procedure is shown in <figref idref="DRAWINGS">FIGS. 11A and 11B</figref> and begins with the main page of <figref idref="DRAWINGS">FIG. 11A</figref>. Punching out is initiated by touching the second listed item in <figref idref="DRAWINGS">FIG. 11A</figref> or by pressing the 2 key on keypad <b>25</b>. The screen of <figref idref="DRAWINGS">FIG. 11B</figref> appears, which identifies the employee by name and confirms the time and date of punching out.

0138Occasionally, an employ may fail to punch-in for work because he/she forgot, was distracted, or the like. The procedure shown in <figref idref="DRAWINGS">FIGS. 12A-12F</figref> enables the employee to supply the missing punch-in time when he/she punches out. In the example of <figref idref="DRAWINGS">FIGS. 12A-12F</figref>, the employee is first responsible for entering the missed punch-in time. The supervisor will later review the employee's entries for the missed punch in and either approve them as entered or edit them in accordance with <figref idref="DRAWINGS">FIGS. 20A-20H</figref>. After authentication and presentation of the main page in <figref idref="DRAWINGS">FIG. 12A</figref>, if the employee tries to punch-out with a missed punch-in, the employee is advised in the screen of <figref idref="DRAWINGS">FIG. 12B</figref> that he/she cannot punch-out again before first punching-in. The screen in <figref idref="DRAWINGS">FIG. 12B</figref> invites the employee to select the first option by pressing the numeral <b>1</b> key to manually enter his/her missed punch-in time. The screen of <figref idref="DRAWINGS">FIG. 12C</figref> then appears and enables the employee via keypad <b>25</b> to enter the punch-in time and date, as well as the AM/PM designation with the up/down arrow keys. Pressing the accept or check key will save the entered data relating to the missed check-in time. The screen in <figref idref="DRAWINGS">FIG. 12D</figref> then displays the entered punch-in time plus the current punch-out time. Further editing of the data is permitted by pressing the numeral <b>1</b> key, acceptance of the data occurs if the numeral <b>2</b> key is pressed, or the entered data is discarded if the numeral <b>3</b> key is pressed. If key <b>2</b> is pressed to accept the times shown, the employee is thanked at the screen of <figref idref="DRAWINGS">FIG. 12F</figref>.

0139A similar procedure enables the employee to supply any missing punch-out time. This procedure shown in <figref idref="DRAWINGS">FIGS. 13A-13G</figref> enables the employee to supply the missing punch-out time when he/she next attempts to punch-in. In the example of <figref idref="DRAWINGS">FIGS. 13A-13G</figref>, the employee is first responsible for entering the missed punch-out time. The supervisor will later review the employee's entries for the missed punch-out and either approve them as entered or edit them in accordance with <figref idref="DRAWINGS">FIGS. 19A-19E</figref>, as described below. After authentication and presentation of the main page in <figref idref="DRAWINGS">FIG. 13A</figref>, if the employee tries to punch-in with a missed punch-out, the employee is advised in the screen of <figref idref="DRAWINGS">FIG. 13B</figref> that he/she cannot punch-in again before first punching-out. The screen in <figref idref="DRAWINGS">FIG. 13B</figref> invites the employee to select the first option by pressing the numeral <b>1</b> key to manually enter his/her missed punch-out time. The screen of <figref idref="DRAWINGS">FIG. 13C</figref> then appears and enables the employee via keypad <b>25</b> to enter the missing punch-out time and date, as well as the AM/PM designation with the up/down arrow keys. Pressing the accept or check key will save the entered data relating to the missing punch-out time. The screen in <figref idref="DRAWINGS">FIG. 13D</figref> then displays the entered punch-out time plus the current punch-in time. Further editing of the data is permitted by pressing the numeral <b>1</b> key, acceptance of the data occurs if the numeral <b>2</b> key is pressed, or the entered data is discarded if the numeral <b>3</b> key is pressed. If key <b>2</b> is pressed to accept the times shown, the employee is prompted at the screen in <figref idref="DRAWINGS">FIG. 13F</figref> to select the appropriate job function upon checking-in. The employee is then thanked at the screen of <figref idref="DRAWINGS">FIG. 13G</figref>, including confirmation of the current check-in time.

0140<figref idref="DRAWINGS">FIGS. 14A-B</figref> are concerned with reviewing and printing any messages. After employee authentication, any message, such as that displayed in <figref idref="DRAWINGS">FIG. 14A</figref> will appear before the main screen appears. The content of the messages can vary significantly, such as that of a scheduled meeting in <figref idref="DRAWINGS">FIG. 14A</figref>, the need to call someone, a changed work assignment, a changed work location, an additional work assignment, a request to accept a different job function for the day, or the like. The employee may press the print key shown on keypad <b>25</b> in <figref idref="DRAWINGS">FIG. 98</figref> (above the fingerprint activation key) to print a copy of the message. Pressing of the next or right arrow key in <figref idref="DRAWINGS">FIG. 14A</figref> will take the employee to the main screen of <figref idref="DRAWINGS">FIG. 14B</figref>. The employee can then select one of the main menu options or exit the APW biometric terminal <b>20</b>.

0141<figref idref="DRAWINGS">FIGS. 15A-D</figref> show the steps utilized to review payroll information and to print a payroll stub. After system authentication of the employee, the employee enters the numeral <b>3</b> key on the keypad in <figref idref="DRAWINGS">FIG. 15A</figref> to access My Account Information. In <figref idref="DRAWINGS">FIG. 15B</figref>, the employee enters the numeral <b>1</b> key to access payroll information. The screen in <figref idref="DRAWINGS">FIG. 15C</figref> will appear showing the check reference number, the pay period and the date of the check or payment to the bankcard. If the print key on keypad <b>25</b> is pressed, a payroll stub <b>200</b> will be printed from APW biometric terminal <b>20</b> as shown in <figref idref="DRAWINGS">FIG. 15D</figref>.

0142A universal payroll stub format should be suitable to send, receive, display, deliver and print any type of payroll stub over the following media: <ul id="ul0001" list-style="none"><li id="ul0001-0001" num="0000"><ul id="ul0002" list-style="none"><li id="ul0002-0001" num="0143">The All purpose ATM device</li><li id="ul0002-0002" num="0144">Over the web</li><li id="ul0002-0003" num="0145">Over the phone via an Integrated Voice Response (IVR) system <br /> One of the main problems in printing a universal stub is the ability to send, receive and print multiple employees and multiple employer payroll information. For example some employees might be enrolled in a 401K program, while others have to pay alimony. Some employers offer a payroll deduction credit for a specific health or benefit program while others don't. We've developed an infrastructure and communication methodology which handles, delivers, displays and prints, any type of payroll stub information. Our universal payroll stub infrastructure id designed using the following format: </li><li id="ul0002-0004" num="0146">Prior to sending and/or receiving a payroll stub to a device, web or IVR system, the employer must send us a template header record infrastructure detailing the general display of the pay stub. Such a template would contain records such as (1) GROSS PAY, (2) DEDUCTIONS, (3) TAXES (4) NET INCOME. From now on, any record received from the employer would be classified using the employer's record schema</li><li id="ul0002-0005" num="0147">Then, every payroll stub record must contain the point to the employer's template schema file. For example to show that Joe Crew has $1,000 in Wages for this pay period, and $5,000 in Wages Year-To-Date (YTD); and that he received $100 in bonus pay for this pay period and $300 in total YTD bonus pay. The employer would send the information in the following structure: <ul id="ul0003" list-style="none"><li id="ul0003-0001" num="0148">“1”, “Wages”, 1000, 5000</li><li id="ul0003-0002" num="0149">“1”, “Bonus Pay”, 100, 300</li></ul></li><li id="ul0002-0006" num="0150">This automatically generates payroll stub information in the following format:</li></ul></li></ul>

0000<tables id="TABLE-US-00001" num="00001"><table frame="none" colsep="0" rowsep="0"><tgroup align="left" colsep="0" rowsep="0" cols="1"><colspec colname="1" colwidth="217pt" align="center" /><tbody valign="top"><row><entry namest="1" nameend="1" align="center" rowsep="1" /></row><row><entry>GROSS PAY</entry></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="3"><colspec colname="offset" colwidth="84pt" align="left" /><colspec colname="1" colwidth="42pt" align="center" /><colspec colname="2" colwidth="91pt" align="center" /><tbody valign="top"><row><entry /><entry>Current</entry><entry>Year to Date</entry></row><row><entry /><entry namest="offset" nameend="2" align="center" rowsep="1" /></row></tbody></tgroup><tgroup align="left" colsep="0" rowsep="0" cols="4"><colspec colname="offset" colwidth="21pt" align="left" /><colspec colname="1" colwidth="63pt" align="left" /><colspec colname="2" colwidth="42pt" align="char" char="." /><colspec colname="3" colwidth="91pt" align="char" char="." /><tbody valign="top"><row><entry /><entry>Wages</entry><entry>$1,000.00</entry><entry>$5,000.00</entry></row><row><entry /><entry>Bonus Pay</entry><entry>$100.00</entry><entry>$300.00</entry></row><row><entry /><entry namest="offset" nameend="3" align="center" rowsep="1" /></row></tbody></tgroup></table></tables>

0151According to many state labor regulations, employer must give en employee a physical printout of his/her payroll stub on pay day at the location of work. Although many employers offer their employees direct deposit and give them access to electronic payroll stubs via secure internet, this approach is not feasible for a low wage employee, who usually does not have access to a PC or the internet. As a result, from an employer's perspective electronic payroll to a low wage employee is a losing proposition. This is because, even though, the employer is saving cost from mailing a physical paper check to a remote low wage employee, the employer still has to mail a physical paper pay stub to the employee in order to comply with state labor regulations. If this is the case, then the employer might as well send a paper paycheck with a paper pay stub and avoid the hassles of integrating electronic payroll with mailing a paper paystub to all low wage labor locations. Using the all purpose biometric device, upon accessing the system, and if today is payday, the employee is prompted to print his/her paystub. See, the flow chart of <figref idref="DRAWINGS">FIG. 30</figref> for further details. This approach gives employers compliance with state and federal labor laws, this is because: <ul id="ul0004" list-style="none"><li id="ul0004-0001" num="0000"><ul id="ul0005" list-style="none"><li id="ul0005-0001" num="0152">a. Employee was paid on pay day via electronic payroll deposit (on payroll card)</li><li id="ul0005-0002" num="0153">b. Employee was presented with a payroll stub at work location. Employer has a record that the employee decided to either print or not print his/her payroll stub on payday, at the work location.</li></ul></li></ul>

0154<figref idref="DRAWINGS">FIGS. 16A-D</figref> illustrate the steps used for viewing and printing the current balance remaining on the bankcard <b>23</b>. After correctly authenticating with the system, the employee is welcomed at the main screen shown in <figref idref="DRAWINGS">FIG. 16A</figref>. If the employee selects the My Account Information by pressing the numeral <b>3</b> key on keypad <b>25</b>. the screen shown in <figref idref="DRAWINGS">FIG. 16B</figref> will then appear. To review the balance on the bankcard, the employee presses the numeral <b>2</b> key on the keypad to select “Card Balances”. The employee is advised in <figref idref="DRAWINGS">FIG. 16C</figref> that there may be a short delay in retrieving the requested information and he/she is requested to press the check button on the keypad to continue. If the employee elects to continue, a short time later, a screen similar to that in <figref idref="DRAWINGS">FIG. 16D</figref> appears, advising the employee of the balance then remaining on the bankcard. The employee may then print the balance in the bankcard account by pressing the printer key on the keypad <b>25</b> (<figref idref="DRAWINGS">FIG. 9B</figref>). Whether the screen of <figref idref="DRAWINGS">FIG. 14D</figref> is printed or not, if the employee presses the cancel button on the keypad, the screen returns the Account Information screen of <figref idref="DRAWINGS">FIG. 16B</figref>. Entering the go back or cancel button again will return the employee to the main screen of <figref idref="DRAWINGS">FIG. 16A</figref>, where the employee may select additional options, including punch-in and punch-out or selecting exit. If the employee does not return to the main screen of <figref idref="DRAWINGS">FIG. 16A</figref>, the APW biometric terminal <b>20</b> will automatically revert to the starting screen after a predetermined time of inactivity.

0155<figref idref="DRAWINGS">FIGS. 17A-17D</figref> illustrate the steps for obtaining a payroll advance against currently accrued pay based upon the hours worked to date. After authenticating and selecting My Account Information on the main screen, the employee may be presented with the options shown in <figref idref="DRAWINGS">FIG. 17A</figref>, including “Get a Payroll Advance”. When this option is selected by pressing the numeral <b>3</b> key on keypad <b>25</b>, the APW system calculates the amount of credit that is available for this particular employee, such as by multiplying the accrued hours worked since the last payday and the employee's hourly compensation rate. This amount is then discounted by a risk factor that includes at least the amount of pay that is deducted for taxes and any other applicable deductions from gross pay. For example, in <figref idref="DRAWINGS">FIG. 17B</figref>, the employee may be notified of the maximum amount of payroll advance that is available. The employee is then prompted to enter the amount of payroll advance that is desired. After pressing the check key to submit the payroll advance request, a screen shown in <figref idref="DRAWINGS">FIG. 17C</figref> may appear advising the employee of service charge applicable to the payroll advance transaction. Some further identification to complete this transaction may also be requested such as a PIN number associated with the employee's bankcard. Upon submitting the PIN, a screen shown in <figref idref="DRAWINGS">FIG. 17D</figref> appears showing that the payroll advance has been approved and that the requested amount has been credited to the employee's bankcard account. The employee may print the screen of <figref idref="DRAWINGS">FIG. 17D</figref> by pressing the print key on keypad <b>25</b> (<figref idref="DRAWINGS">FIG. 9B</figref>) or go to the employee's card balance option in <figref idref="DRAWINGS">FIGS. 16A-16D</figref> to confirm that the payroll advance has been credited to his/her account and print the current balance from the screen in <figref idref="DRAWINGS">FIG. 16D</figref>.

0156A substantial problem in distributed labor management is inability to communicate with field force and inability to get immediate feedback from the work site. The APW system gives managers the ability to log into a secure web page, type a message and select a set of canned answers to be displayed to their remote employees. For example, the manager could write a quick message saying “Joe, please clean aisle <b>3</b> immediately after you punch in”, then select (1) “Yes, consider it done”, (2) “Can't”, (3) “I need further detail”, as the canned answers or responses for the work request. The manager would then press a button and the message, plus the canned responses are sent to the appropriate APW biometric terminal <b>20</b>. Upon punching-in at his work site, Joe is presented with the message sent from his manager, “Joe, please clean aisle <b>3</b> immediately after you punch-in”. He would then respond to the message using one of the 3 three given options: (1) “Yes, consider it done”, (2) “Can't, (3) “I need further detail”. Thus, Joe's supervisor quickly determines whether this additional task will be completed by Joe, or whether additional resources are needed to complete the task.

0157The flow chart in <figref idref="DRAWINGS">FIG. 18</figref> illustrates these steps in greater detail. A supervisor or manager may create and send a message at block <b>168</b>, which is then sent to and queued on the APW biometric terminal <b>20</b> that the employee will check-in on, at block <b>170</b>. After authentication in block <b>150</b>, if there is a message for the employee (block <b>152</b>), the message is displayed (block <b>154</b>). If there is no message at block <b>152</b>, normal operation of APW biometric terminal <b>20</b> proceeds at block <b>153</b>. At block <b>156</b>, the employee is invited to print the message and the message is printed at block <b>158</b>, if so selected. The process then moves to block <b>160</b> which requires a response to the message, such as with canned answers. The employee selects the desired response at block <b>162</b>, which is then sent via the internet or web to the individual who sent the message; typically a supervisor of the employee. A supervisor or manager may create and send a message at block <b>168</b>, which is then sent to the APW biometric terminal that the employee will check-in on, at block <b>170</b>. The message is then ready for viewing upon authentication at block <b>152</b>.

0158The APW system is also capable of providing a number of different kinds of alerts, such as those shown in <figref idref="DRAWINGS">FIG. 19</figref>. A substantial problem in distributed labor management is inability to manage thousands of employees, their hours and having ability to complete the work within allocated budgeted hours and budgeted dollars. As employees punch-in and punch-out, the system accumulates the amount of hours billed to a specific work location, job code or department code. When the number of hours exceeds a pre-set budgeted hour value (block <b>172</b> in <figref idref="DRAWINGS">FIG. 19</figref>), within a specific time-span (such as daily, weekly, bi-weekly or monthly budget), the system automatically alerts a manager or a hierarchy of managers (block <b>174</b>) notifying them that hours budgeted have been exceeded. The same logic is true if the budgets were an amount in dollars, thus an alert is generated if the dollars spent at the work site, job code or department code have exceeded a budgeted dollar value. Alerts are generated from the local device, then routed via a central system and are delivered to individuals via email, text message, automated fax or automated text to speech synthesizer calling the alert recipient.

0159Another problem in distributed labor environment is the inability of the service provider to easily manage and track thousands of field employees and make sure that key employees are available and reporting to perform key tasks at customer sites. The system features an ability to notify a single manager or a hierarchy of managers if a single employee, or a set of employees are not present at a work site prior to predetermined time deadline. For example, the system generates an alert notification if a specific employee is not present by 8:00 AM to fix a burnt light bulb. Another example is that the system generates an alert notification if by 8:00 AM, only four out of the expected six cleaning employees are present at the customer's site, such as at block <b>174</b> in <figref idref="DRAWINGS">FIG. 19</figref>. Alerts are generated from the local device (block <b>176</b>), then routed via a central system and are delivered to individuals via email, text message, automated fax or automated text to speech synthesizer calling the alert recipient.

0160The APW system can also accommodate miscellaneous alerts. For example, these alerts may be generated by an authorized employee using the system from an APW biometric terminal <b>20</b>. An authorized employee accesses the system, then uses the user interface at the APW biometric terminal to initiate an alert, which is then routed to the appropriate manager or hierarchy of managers. For example, on his or her punch-out, the system may ask the employee if he/she had any accident today, such as at block <b>178</b> of <figref idref="DRAWINGS">FIG. 19</figref>. If the employee selects “No”, then he/she punches out and no alert issues. If the employee answers “Yes”, then an alert is immediately routed (block <b>180</b>) to the appropriate manager who may need to investigate the issue further.

0161A substantial problem in distributed labor management is inability to communicate with field force and inability to get immediate feedback from the work site. The APW system gives managers the ability to log into a secure web page, type a message and select a set of canned answers to be displayed to their remote employees. For example, the manager could write a quick message saying “Joe, please clean aisle <b>3</b> immediately after you punch in”, then select (1) “Yes, consider it done”, (2) “Can't”, (3) “I need further detail”, as the canned answers or responses for the work request. The manager would then press a button and the message, plus the canned responses are sent to the appropriate APW biometric terminal <b>20</b>. Upon punching-in at his work site, Joe is presented with the message sent from his manager, “Joe, please clean aisle <b>3</b> immediately after you punch-in”. He would then respond to the message using one of the 3 three given options: (1) “Yes, consider it done”, (2) “Can't, (3) “I need further detail”. Thus, Joe's supervisor quickly determines whether this additional task will be completed by Joe, or whether additional resources are needed to complete the task.

0162The flow chart in <figref idref="DRAWINGS">FIG. 18</figref> illustrates these steps in greater detail. A supervisor or manager may create and send a message at block <b>168</b>, which is then sent to and queued on the APW biometric terminal <b>20</b> that the employee will check-in on, at block <b>170</b>. After authentication in block <b>150</b>, if there is a message for the employee (block <b>152</b>), the message is displayed (block <b>154</b>). If there is no message at block <b>152</b>, normal operation of APW biometric terminal <b>20</b> proceeds at block <b>153</b>. At block <b>156</b>, the employee is invited to print the message and the message is printed at block <b>153</b>, if so selected. The process then moves to block <b>160</b> which requires a response to the message, such as with canned answers. The employee selects the desired response at block <b>162</b>, which is then sent via the internet or web to the individual who sent the message; typically a supervisor of the employee. A supervisor or manager may create and send a message at block <b>168</b>, which is then sent to the APW biometric terminal that the employee will check-in on, at block <b>170</b>. The message is then ready for viewing upon authentication at block <b>152</b>.

0163In some of the foregoing examples of the implementation of various functions with APW biometric terminal <b>20</b>, the keypad <b>25</b> was used to enter the selected choice on the various menus and to navigate from one screen to the next, or the like. Of course, display <b>21</b> may be a touch-sensitive display that automatically selects the option that is touched on the screen, rather than requiring entry of an associated key on keypad <b>25</b> to initiate the desired function or screen.

0164<figref idref="DRAWINGS">FIGS. 20A and 20B</figref> are a flow chart of typical steps involved in calculating and approving a payroll advance, and are self-explanatory.

0165<figref idref="DRAWINGS">FIG. 21</figref> is a flow chart of typical steps involved in authenticating with the fingerprint reader, and is self-explanatory.

0166<figref idref="DRAWINGS">FIG. 22</figref> is a flow chart of typical steps involved in printing a payroll stub from an electronic APW biometric terminal, and is self-explanatory.

0167<figref idref="DRAWINGS">FIG. 23</figref> illustrates a biometric electronic multi-purpose APW biometric terminal <b>300</b> in accordance with the present invention. Like APW biometric terminal <b>20</b> shown in <figref idref="DRAWINGS">FIGS. 1 and 3</figref>, APW biometric terminal <b>300</b> has a screen <b>21</b> for displaying information to an employee or other user, including any managers or the like. APW biometric terminal <b>300</b> also has a fingerprint reader <b>30</b> for obtaining data concerning a fingerprint pattern of a person. APW biometric terminal <b>30</b> may also be equipped with a card reader <b>22</b> for reading magnetic data on a bank card, and a keypad for entering numeric information, such as a personal ID (PIN) number, or for navigating through various options displayed on screen <b>21</b>. As previously shown in <figref idref="DRAWINGS">FIG. 5</figref> with respect to APW biometric terminal <b>20</b>, APW biometric terminal <b>300</b> may also have a modem <b>45</b> for accessing the internet <b>56</b>, a LAN transceiver <b>32</b> for communicating with a local area network which may also access the internet, and a wireless transceiver <b>42</b> for communicating via an antenna <b>43</b> with a remote transceiver <b>53</b>, such as for a payroll and work management system. APW biometric terminal <b>300</b> is also preferably equipped with memory <b>302</b> for locally storing information, a hard drive <b>304</b> for additional data storage, and a plurality of ports, such as USB, serial and PS/2 interfaces <b>306</b>.

0168APW biometric terminal <b>300</b> provides for a second opinion methodology in the event that the primary biometric test, such as with fingerprint reader <b>30</b>, fails or is inconclusive. To this end, APW biometric terminal <b>300</b> includes a high resolution video camera <b>310</b> that captures live video and/or still pictures, and a high resolution microphone <b>312</b> which captures person's voice and sound waves. A speaker <b>314</b> may be used to direct the person standing in front of the biometric device to follow a set of live or pre-recorded instructions in order to obtain the images with camera <b>310</b> or a voice recording with microphone <b>312</b>.

0169The system captures additional biometric information from the user standing in front of the APW biometric terminal, such as video, still picture, and/or voice files. Then, these files are passed on to the local APW biometric terminal <b>300</b>, to a networked server, such as to server <b>101</b> in <figref idref="DRAWINGS">FIG. 7</figref>, or to a human (local human or remote human) that uses the second set of biometric information to make a (1) match, or (2) no match decision.

0170Preferably, APW biometric terminal <b>300</b> utilizes the General Packet Radio Service (GPRS) signaling protocol. For example, APW biometric terminal <b>300</b> preferably includes GPRS circuitry <b>311</b> to encode communications from the APW biometric terminal to the payroll system in accordance with GPRS protocol and to decode communications from the payroll system to the APW biometric terminal in accordance with GPRS protocol. The term “GPRS circuitry” means specific circuitry to accommodate and accomplish GPRS communication functions and/or software instructions executed by a microprocessor to accommodate and accomplish GPRS communication functions. GPRS is a wireless communication standard which provides up to 115 kilobits per second, compared to current GSM (Global System for Mobile Communications) which provides only 9.6 kilobits per second. Thus, GPRS, in theory, offers about ten times the data speed as compared to GSM. However, more typically encountered GPRS data transfer rates may be about 30 to 50 kilobits per second. GPRS supports a wide range of bandwidths and is particularly suited for sending and receiving both small bursts of data as well as large volumes of data. GPRS is available on most GSM networks. GPRS enables the use of packet-based data transfer over existing circuit-switched GSM networks, which allows greater efficiency in the radio spectrum because the radio bandwidth is used only when packets are sent or received. Of course, sending data wirelessly by GPRS signaling is more efficient and less costly than using a dedicated telephone line, such as sending data from an APW biometric terminal through a data modem to a public switched telephone network (PSTN). For remote locations where a telephone line may not be readily available, an APW biometric terminal <b>300</b> with wireless GPRS capability is also an ideal solution.

0171<figref idref="DRAWINGS">FIGS. 24A and 24B</figref> are flowcharts illustrating the steps employed by the electronic APW biometric terminal <b>300</b> shown in <figref idref="DRAWINGS">FIG. 23</figref> in providing a second opinion to authenticate an employee or to permit a person to have access to a secure building, respectively. In block <b>321</b>, the person or employee places his/her finger on the fingerprint reader <b>30</b> of APW biometric terminal <b>300</b>. At block <b>322</b>, the fingerprint data is gathered as the primary means of authenticating the person. Secondary biometric information is gathered at block <b>323</b>, such as a video file or picture file via camera <b>310</b> or an audio file via microphone <b>312</b>. If the primary biometric information does not provide a match with corresponding biometric information available in the system, APW biometric terminal <b>30</b> or the system will attempt to obtain a match with the secondary biometric information. If a match occurs with either the primary or secondary information at block <b>325</b>, the employee receives full payment and is permitted to clock in and clock out at APW biometric terminal <b>300</b>.

0172If no matches occur as a result of the primary or secondary biometric information, a human, such as a manager, may receive a message to review the information available from APW biometric terminal <b>300</b>. If approved by the manager at block <b>324</b>, the employee receives full pay at block <b>327</b> and the time of the clock in or clock out is recorded within the system. However, if the human intervention does not confirm identity of the employee at block <b>326</b>, the employee may receive partial or no pay at block <b>328</b> until the discrepancy is resolved. However, the employee may still be allowed to clock in since there may not be a temporary or replacement employee immediately available at the time.

0173Blocks <b>331</b>-<b>336</b> in flowchart <b>330</b> of <figref idref="DRAWINGS">FIG. 24B</figref> bear close resemblance to blocks <b>321</b>-<b>326</b> in flowchart <b>320</b> of <figref idref="DRAWINGS">FIG. 24A</figref>. However, the result of the comparisons of the primary and secondary biometric information is to permit a person to have access to a building at block <b>337</b> or not to grant access at block <b>338</b>.

0174A flowchart <b>340</b> in <figref idref="DRAWINGS">FIG. 25</figref> illustrates in the process of utilizing a secondary type of biometric information to authenticate a person. The process is initiated at block <b>341</b> by the person placing a finger on the fingerprint reader <b>30</b>. At block <b>342</b>, the video camera <b>310</b> may be initiated and a video file and/or a picture file may be collected at block <b>343</b>. Similarly, the microphone <b>312</b> may begin collecting a voice file at block <b>344</b>. These files may be collected at APW biometric terminal <b>300</b> at block <b>345</b>. At block <b>346</b>, a determination is made concerning whether a match is made for the primary type of biometric information. If a match is determined, the matching information may be forwarded by APW biometric terminal <b>300</b> to a server, such as server <b>101</b> at block <b>347</b> and the person is authenticated at block <b>355</b>.

0175If a match was not determined at block <b>346</b> on the basis of the primary biometric information, the person may be instructed at block <b>348</b> to speak one or more phrases to provide voice files to microphone <b>312</b> for further comparison. Block <b>349</b> determines if the second opinion relating to comparison of secondary biometric information should occur at APW biometric terminal <b>300</b> or at a network server. This decision may depend upon where the corresponding secondary biometric samples were stored when the employee was register onto the system. If further processing is to occur at APW biometric terminal <b>300</b>, block <b>350</b> determines whether human intervention is needed. If a determination is made to use the APW biometric terminal, APW biometric terminal <b>350</b> processes one or more of the secondary biometric information files to determine if there is a match at block <b>352</b>. If so, the person is authenticated.

0176If human intervention was required at block <b>350</b>, the secondary biometric information is reviewed at block <b>353</b> by a manager. If a match is determined at block <b>354</b>, the person is authenticated. Otherwise, if there is not match at block <b>354</b>, the person is not authenticated at block <b>366</b>.

0177If the comparison of secondary biometric information at block <b>349</b> determines that further processing should occur at the network server, the process moves to block <b>360</b>, where the secondary biometric information is sent to the server for review. At the server, the review steps in blocks <b>361</b>-<b>365</b> may correspond to the already described review process for blocks <b>350</b>-<b>354</b>.

0178A flowchart <b>370</b> in <figref idref="DRAWINGS">FIG. 26A</figref> illustrates typical steps to register a person or employee on an integrated voice response (IVR) system. As explained at starting bubble <b>371</b>, this involves registering voice sentences or phrases on APW biometric terminal <b>300</b> or server <b>101</b> which may be used as samples during comparisons at later times. The employee is given a telephone at block <b>372</b>. The employee is then asked to speak sample sentences at block <b>373</b> which the microphone <b>312</b> for recording in APW biometric terminal <b>300</b> or server <b>101</b>. At block <b>374</b>, the employee may again be asked to provide additional voice files. At block <b>375</b>, the system captures and stores these voice files for later use.

0179<figref idref="DRAWINGS">FIG. 26B</figref> is a flowchart illustrating typical steps which may be employed to remotely authenticate employees in an interactive voice response (IVR) system, with a second opinion provided by human intervention when the IVR system is unable to confirm a match. At starting bubble <b>381</b>, the employee calls into the IVR system. At block <b>382</b>, the employee may be asked to provide information from the keypad of the telephone, such as an employee number or a second telephone number. If there is a match with the information entered in block <b>382</b>, the employee will be asked to speak one or more phrases or sentences which correspond to those used in the registration process of flowchart <b>370</b>. If there is a voice match at block <b>385</b>, the employee is authenticated and the person is paid in full at block <b>392</b> and the clock in or clock out time is accepted.

0180If there was not a voice match at block <b>387</b>, the clock in or clock out time is marked or treated as unmatched at block <b>387</b>. This requires the intervention of a human or manager to review the voice files at block <b>388</b>. If the manager determines a match at block <b>390</b>, the employee is authenticated and the person is paid in full at block <b>392</b> and the clock in or clock out time is accepted. However, if there is no match, the person may be paid partially or not at all at block <b>391</b>. However, the clock in or clock out time may be recorded in the system for later use. Additionally, the employee may be permitted to work since there may be no temporary or backup person immediately available.

0181<figref idref="DRAWINGS">FIG. 27A</figref> illustrates a flowchart <b>400</b> which contains typical steps which may be utilized to quickly activate an APW biometric terminal, such as APW biometric terminal <b>300</b> in <figref idref="DRAWINGS">FIG. 23</figref>, upon its installation in its place of use. In the first block <b>401</b>, the APW biometric terminal is given a serial number and an internal activation token prior to sale of the APW biometric terminal or installation in its intended place of use. The assigned serial number and activation token are stored in a secure database in block <b>402</b>. Block <b>403</b> requests whether the customer wants to operate the unit in a networked mode or in an off-line non-networked mode. If operating in the off-line mode at block <b>404</b>, information will be downloaded and uploaded directly from the APW biometric terminal's USB port. If operating in the networked mode at block <b>405</b>, the user needs to enter a token code in order to communicate with the network.

0182Once APW biometric terminal <b>300</b> has received its initialization information via the upload at block <b>404</b> or via a network connection at block <b>405</b>, the APW biometric terminal is powered up at block <b>406</b>. Entry of a correct temporary activation key at block <b>406</b>, permits the APW biometric terminal to log onto a secure website and permits the user to enter the APW biometric terminal's serial number at block <b>408</b>. The customer is then requested to enter the appropriate billing and payment information. When the entered information is verified and authenticated at block <b>409</b>, an initial payment is drawn, and the user is provided with the activation token which was previously paired and stored with the APW biometric terminal's serial number, at block <b>410</b>. When the customer enters the activation token on the APW biometric terminal at block <b>411</b>, the APW biometric terminal <b>300</b> receives set-up information and becomes operational. Thus, the customer or one of its employees can easily self-install and self-activate the APW biometric terminal <b>300</b>, without the need for any technician to travel to the customer's work site to install the APW biometric terminal.

0183<figref idref="DRAWINGS">FIG. 27B</figref> illustrates a flowchart <b>440</b> which contains typical steps which the APW biometric terminal <b>300</b> utilizes during the self-activation process shown in <figref idref="DRAWINGS">FIG. 27A</figref> to wirelessly communicate with a wireless telephone company. After the start bubble <b>441</b>, when APW biometric terminal <b>300</b> is logged onto the secure website, as in block <b>407</b> of <figref idref="DRAWINGS">FIG. 27R</figref> and block <b>442</b> of <figref idref="DRAWINGS">FIG. 27B</figref>, the user is asked to enter the serial number of the APW biometric terminal <b>300</b>, as in block <b>408</b> of <figref idref="DRAWINGS">FIG. 27A</figref> and block <b>443</b> of <figref idref="DRAWINGS">FIG. 27B</figref>. At block <b>444</b>, the system or database looks up the serial number and matches it with a corresponding SIM card number of a SIM card internally disposed in APW biometric terminal <b>300</b> at block <b>444</b>. If the SIM card number matches the entered serial number at block <b>445</b>, a server, such as one of servers <b>104</b>-<b>108</b> in <figref idref="DRAWINGS">FIG. 8</figref>, connects to a wireless telephone company, such as AT&amp;T, T-Mobile, Sprint, or the like, at block <b>446</b>, and the SIM card number is registered with the wireless telephone company. At block <b>447</b>, service is automatically activated by the wireless telephone company and billing is sent to the customer's billing information previously entered at block <b>408</b> in <figref idref="DRAWINGS">FIG. 27A</figref>. The wireless telephone company then permits wireless communications associated with the SIM card to/from APW biometric terminal <b>300</b> at block <b>448</b>. Once communication is established between APW biometric terminal <b>300</b> and the wireless telephone company, an activation token is displayed to the user/customer at blocks <b>410</b> in <figref idref="DRAWINGS">FIGS. 27A and 450</figref> in <figref idref="DRAWINGS">FIG. 27B</figref>. The user enters the activation token at block <b>451</b>, the system or database determine if the token is valid at block <b>452</b>, and the token is stored in non-erasable memory of the APW biometric terminal <b>300</b> at block <b>454</b>. The APW biometric terminal <b>300</b> then activates the dormant SIM card and reboots itself at block <b>454</b>. Upon reboot, APW biometric terminal <b>300</b> configures the dormant SIM card, which enables APW biometric terminal <b>300</b> to communicate, such as by GPRS methodology. Thus, set-up with a wireless telephone company is complete at block <b>455</b>.

0184<figref idref="DRAWINGS">FIG. 28A</figref> illustrates a flowchart <b>420</b> which contains typical steps which may be used to print a payroll stub at a facsimile machine. At block <b>421</b>, a person or employee is identified. The means of identification may be by a bankcard, by a fingerprint reader, by a voice segment, by a video segment, by caller identification (ID) and/or by interactive voice response. For example, the card reader <b>22</b> of APW biometric terminal <b>300</b> may be used for a bankcard, the high resolution microphone <b>312</b> may be used for a voice segment, the high-resolution video camera <b>310</b> may be used for a video segment, and the interactive voice response system of <figref idref="DRAWINGS">FIGS. 26A and 26B</figref> may be used for an interactive voice response and for caller ID. At block <b>422</b>, the APW biometric terminal or voice response system communicates with a payroll database to obtain the payroll information for the identified person. At block <b>423</b>, the person provides a telephone number for the facsimile machine which he/she wants the payroll stub printed. The payroll information is then communicated to the telephone number of the facsimile machine at block <b>424</b>. At block <b>425</b>, the payroll stub is printed at the facsimile machine.

0185<figref idref="DRAWINGS">FIG. 28B</figref> illustrates a flowchart <b>430</b> which contains typical steps which may be used to print a payroll stub at a remote printer. At block <b>431</b>, a person or employee is identified. The means of identification may be as above with respect to block <b>421</b> in <figref idref="DRAWINGS">FIG. 28A</figref>. At block <b>432</b>, the APW biometric terminal or voice response system communicates with a payroll database to obtain the payroll information for the identified person. At block <b>433</b>, the payroll information is then communicated to a remote printer. At block <b>434</b>, the payroll stub is printed at the remote printer.

0186<figref idref="DRAWINGS">FIG. 29</figref> is a flowchart <b>500</b> illustrating the difficulties that a typical customer has with respect to purchasing a non-communicating wireless GPRS APW biometric terminal and configuring the terminal into a communicating mode. The problem displays itself when one tries to sell a wireless GPRS APW biometric device at a retail store. Since GPRS communication requires a Subscriber Identification Module (SIM) card, in order to communicate on a GPRS network such as AT&amp;T, T-Mobile or Sprint service; it becomes almost impossible for a consumer to buy a non-communicating wireless APW biometric device at a retail store (block <b>501</b>), walk to the local wireless service provider store, buy a SIM card (Subscriber Identification Module card) (block <b>502</b>), sign a contract with the wireless service provider (AT&amp;T, T-Mobile or Sprint service) (block <b>503</b>), commit to a specific level of wireless data and voice communication plan, take the SIM card and stick it into the wireless APW device (block <b>504</b>), unlock and configure the device to connect to the service provider (block <b>505</b>), then start the device and point its wireless modem to communicate to a wireless gateway (block <b>506</b>), then configure the wireless gateway to communicate the device's data to a remote and dedicated server (block <b>507</b>) onto which the client can view employee attendance, payroll, timesheet, messaging and payroll stub information. All such steps are very difficult for a typical consumer to do in a coordinated and error free way.

0187<figref idref="DRAWINGS">FIG. 30</figref> is a flowchart <b>510</b> illustrating the difficulties that a typical customer has with respect to having third parties assist in installing an off-the-shelf GPRS APW biometric terminal. Currently when a client purchases a biometric device (block <b>511</b>), the manufacturer (or selling organization) either sends a trained technician to help install and setup the device for the client (block <b>512</b>), or expect the client to train themselves and install and setup the device on their own. Such activation and implementation logic works fine when the client is known after the sale. However, when the client is unknown (block <b>513</b>), and he or she buys an off the shelf unit, there is no way for them to self-activate the device without the intervention and presence (local or via a remote conversation) of trained support person. Furthermore, if the client were to rent the device (block <b>514</b>), and if the client is current on his or her wireless communication fees (note <b>515</b>), but non-current on his or her monthly hardware rental fees, then because the wireless service is offered via a different provider than the hardware owner, it becomes difficult to stop the device from communicating on the wireless network, primarily because the wireless service company has no intention to stop the user from using its network. An idea comes to mind, which to bundle the wireless service with the rental of the device (block <b>515</b>), however, such action means that the SIM card installed into the device (to enable GPRS wireless service) has to be activated at manufacturing (block <b>516</b>), this way, the buyer of the device does not have to go through the hassle of pulling the SIM card, walking to the wireless service store, signing a wireless contract and activating it after the sale of the unit. Activating the SIM card at manufacturer results in the wireless service provider invoicing the APW manufacturer for wireless services from the first day of inception of the APW biometric device. This is a very unattractive business model for the APW manufacturer because the device could be sitting for a year or two in the retail store before sale (block <b>517</b>). Thus, providing an intelligent remote activation and communication method saves the manufacturer and the user a lot of time and money and simplifies the process of selling a wireless APW biometric device (block <b>518</b>).

0188The present invention therefore includes methods of automating the remote sale, activating and implementing a wireless, LAN or dialup APW biometric device operation when sold at a retail location, even though the client is unknown. This method manifests itself greatly when selling a wireless GPRS device with a pre-installed SIM card.

0189<figref idref="DRAWINGS">FIG. 31</figref> is a flowchart <b>520</b> illustrating methods of enabling a customer to activate a GPRS APW biometric terminal. These intelligent remote activation and communication methods are made effective by enabling the device to always communicate to a home server (in LAN, dialup, or wireless connectivity mode) (block <b>521</b>) independently of system knowledge of the customer (block <b>522</b>) and his or her payment status (block <b>523</b>). To solve the problem, the APW biometric device is pre-manufactured to support multiple communication capabilities (block <b>524</b>): LAN (block <b>525</b>), dialup (block <b>526</b>), and wireless (block <b>527</b>) simultaneously. The device is pre-installed with a dormant inactive SIM card which can only be activated electronically (block <b>528</b>). The pre-installed dormant inactive SIM card increases the cost of the device. However, it simplifies its activation and communication once sold to a consumer.

0190<figref idref="DRAWINGS">FIG. 32</figref> is a flowchart <b>530</b> illustrating the activation details for a GPRS APW biometric terminal. Our approach includes building a live 24×7×365 activation server via secure web technology, which is always on and which is accessible to users who purchase a new APW biometric device off-the-shelf from a retail store, via a distributor, or via the web (block <b>531</b>). The APW biometric device is pre-manufactured with a SIM card (in the case of a GPRS device) or present internal password in the case of a LAN or dialup device (block <b>532</b>). Every time the APW biometric device communicates (block <b>533</b>), it has to get a token from the activation server (block <b>534</b>). If the device does not have an activation server, it is allowed to only talk to the home server (block <b>535</b>), while a message is displayed to the user asking them to enter an activation token (block <b>536</b>), and by giving them the option to go to a secure website (block <b>537</b>) and attain an activation token (block <b>538</b>).

0191<figref idref="DRAWINGS">FIG. 33</figref> is a flowchart <b>540</b> illustrating a method for acquiring an activation token for a GPRS APW biometric terminal. The user logs onto the activation server system (block <b>541</b>), answers a few questions (block <b>542</b>), enters his or her payment methodology (block <b>543</b>), and then submits his information for processing (block <b>544</b>). The activation server processes the information (block <b>545</b>), receives approved payment (block <b>546</b>), and then presents the user with an activation token (block <b>547</b>).

0192<figref idref="DRAWINGS">FIG. 34</figref> is a flowchart <b>550</b> illustrating how the GPRS APW biometric terminal and the system use the activation token. The user enters the activation token onto the device (block <b>551</b>), the device runs an internal off-line hashing methodology which deciphers the activation token and validates it (block <b>552</b>). If the code is authentic and if it is valid (block <b>553</b>), the device stores the activation token in memory (block <b>554</b>) and proceeds forward to the next step (block <b>555</b>). Otherwise, it reverts back to asking the user to enter a valid activation token (block <b>556</b>).

0193<figref idref="DRAWINGS">FIG. 35</figref> is a flowchart <b>560</b> illustrating a method of remotely activating a GPRS APW biometric terminal by a typical customer. To activate the unit, the user is now asked to place the device on a dialup phone line or high speed LAN line such as DSL or other Cat-5 high speed network connections (at home or at the office) (block <b>561</b>). The device diagnoses the connectivity mode (either dialup dial-tone or high speed LAN) (block <b>562</b>), connects to a pre-defined remote server (block <b>563</b>) and communicates its activation token and SIM card number (block <b>564</b>). The remote server then connects to the wireless service company (AT&amp;T, T-Mobile, Sprint, or the like) secure servers and registers the SIM card number (block <b>565</b>). This automatically activates SIM card communication service billing to the company (block <b>566</b>) and notifies the wireless service to allow communication from the SIM card number on the APW biometric device (block <b>567</b>). The system then alerts the device to reboot itself (block <b>568</b>), activates the dormant SIM card (block <b>569</b>) and start communicating via the wireless GPRS methodology using the newly registered and activated SIM card (block <b>570</b>). This approach is the easiest and simplest for the user in order to automatically activate and start using his or her off-the-shelf purchased APW biometric device with multiple communication capabilities: wireless GPRS, dialup or LAN connectivity (note <b>571</b>).

0194<figref idref="DRAWINGS">FIG. 36</figref> is a flowchart <b>580</b> illustrating method of remotely activating a GPRS APW biometric terminal by a typical customer when an LAN and dialup services are not available. Another method, in case the user does not have access to a dialup connection or LAN, which is slightly more complicated for a user, is to ask the user to log into a secure web site (block <b>581</b>) where he or she is asked to enter the serial number of the device (serial number is always on the back of device) (block <b>582</b>). Upon entering the serial number, the system looks up such serial number and matches it with the corresponding SIM card number (block <b>583</b>). The server then connects to the wireless service company (AT&amp;T, T-Mobile, Sprint, or the like) secure servers and registers the SIM card number (block <b>584</b>). This automatically activates SIM card communication service billing to the company (block <b>585</b>) and notifies the wireless service to allow communication from the SIM card number on the APW biometric device (block <b>586</b>). The system then displays an activation code to the user, and asks the user to enter it on the device (block <b>587</b>), which validates it and, if successful moves to the next step. If the code is not valid (block <b>588</b>), then the user is prompted to enter a valid activation token (block <b>589</b>). Once the user enters a valid activation token, the device automatically saves it in non-erasable memory, activates the dormant SIM, and then reboots itself (block <b>590</b>). After the reboot sequencer the device starts communicating via the wireless GPRS methodology using the newly registered and activated SIM card (block <b>591</b>). This approach is slightly more complicated for an unsophisticated user. However, it is an efficient approach to automatically activate and start using an off-the-shelf purchased APW biometric device via multiple communication capabilities: wireless GPRS, dialup or LAN connectivity.

0195<figref idref="DRAWINGS">FIG. 37</figref> is a flowchart <b>600</b> of an authentication gateway. The second major component of the intelligent remote activation and communication method is to build an authentication “Gateway” (block <b>601</b>) to police all communication from all remotely installed and activated devices (block <b>602</b>). Once the device is activated (block <b>603</b>), the device will always communicate to its home server (provided by the device's manufacturer) and to the client's dedicated information server (block <b>604</b>). When communicating to the home server, the device communicates its activation token, then checks through the gateway if the client is in good standing in order to communicate to the client's dedicated server and pass information about client's employee attendance, timesheets, messages, payroll stubs, and the like (block <b>605</b>). Using this process, If the user is current on his or her payment (block <b>606</b>), then the communication Gateway server will route the information collected from the remote device to the user's dedicated server, which can be accessed by the user via a secure web login and password (block <b>607</b>). If the user is not current on his or her payments, then the communication Gateway redirects communication traffic and blocks the information from being transferred onto the user's dedicated servers until payment is received (block <b>608</b>). Another aspect of the present invention is to use the APW Biometric device color screen interface to enable the employee to correct and close his or her punches right off of the APW biometric device, instead of having the employee ask for manager permission to close his or her punch (note <b>609</b>).

0196<figref idref="DRAWINGS">FIG. 38</figref> is a flowchart <b>610</b> illustrating a method for handling a missed punch-out by an employee. In the case an employee forgets to punch-out the day prior (block <b>611</b>), the next day when they return to punch-in again (block <b>612</b>), the system will tell the employee that he or she has an open punch-out from yesterday's shift (block <b>613</b>) which needs to be corrected (block <b>614</b>). In order to save the manager time, especially in larger employee sites where 100 or more employees are working at the site, the system asks the employee to close and correct his or her own punch-out before he or she can punch-in again. The employee enters his or her estimated punch-out time at the end of the shift yesterday (block <b>615</b>), upon completing such task, the device will now allow the employee to punch-in normally (block <b>616</b>). Upon the manager accessing the APW biometric device or the labor management web site connected to the APW biometric device, the manager receives an immediate notification of the employee which manually corrected the punch-out (block <b>617</b>). At that point, the manager is prompted to use his or her personal diligence to either accept the corrected punch as is, or override it with a different time and date set of values (block <b>618</b>).

0197<figref idref="DRAWINGS">FIG. 39</figref> is a flowchart <b>620</b> illustrating a method for handling a missed punch-in by an employee. In the case an employee forgets to punch-in earlier in the shift (block <b>621</b>), next time, when the user returns to punch-out (block <b>622</b>), the system will tell the employee that he or she has an open punch-in from earlier in the shift (block <b>623</b>) which needs to be corrected (block <b>624</b>). In order to save the manager time, especially in larger employee sites where 100 or more employees are working at the site, the system asks the employee to close and correct his or her own punch-in before he or she could punch-out again (block <b>625</b>). The employee enters his or her estimated punch-in time earlier in the shift (block <b>626</b>), upon completing such task, the device will now allow the employee to punch-out normally (block <b>627</b>). Upon the manager accessing the APW biometric device or the labor management web site connected to the APW biometric device, the manager receives an immediate notification of the employee which manually corrected the punch-in (block <b>628</b>). At that point, the manager is prompted to use his or her personal diligence to either accept the corrected punch as is, or override it with a different time and date set of values (block <b>629</b>).

0198<figref idref="DRAWINGS">FIG. 40</figref> is a flowchart <b>630</b> illustrating the printing capabilities of a GPRS APW biometric terminal. Another aspect of the present invention is the use of the APW biometric device (block <b>631</b>) to print hours worked (block <b>632</b>), schedule (block <b>633</b>), assignments and timesheet receipts (block <b>634</b>).

0199<figref idref="DRAWINGS">FIG. 41</figref> is a flowchart <b>640</b> illustrating methods of using a camera on a GPRS APW biometric terminal. Still another aspect of the present invention is the installation of a camera and the use of video or still picture to capture the image of the user at the moment his or her fingerprint image is captured. Taking a picture or video via a camera then storing it on the device, then sending it to a remote secure web server for further review either in real time via a web site, can greatly help both security personnel and employers have better audit tracking of people who used the APW biometric device to access a secure facility or work at the site (block <b>641</b>). For example, the camera can be used during employee registration (block <b>642</b>) by the employee registering his/her fingerprint on the fingerprint reader (block <b>643</b>) with the camera also capturing an employee photograph (block <b>644</b>) and the fingerprint and photograph data sent to a server for review and/or for future comparisons (block <b>645</b>). The camera may also be used during punch-out of an employee (block <b>646</b>) such as when the employee puts his fingerprint on the device (block <b>647</b>), and the fingerprint is matched (block <b>648</b>). The picture may then be stored so that the employee knows that there is no false positive in the fingerprint matching (block <b>649</b>), or the picture may be stored so that a manager can review the picture if there is no fingerprint match (block <b>650</b>).

0200<figref idref="DRAWINGS">FIG. 42</figref> is a flowchart <b>660</b> illustrating methods of using a GPRS APW biometric terminal to control access to a secure door, to a secure building or the like. APW biometric device may also be used to secure a door, thus only users with registered fingerprints are allowed through the door (block <b>661</b>). A user places his or her fingerprint on the device (block <b>662</b>), which reads their fingerprint, generates a minutia and compares it to the set of minutiae stored on the device (block <b>663</b>). In case of a match or no match, the device captures a quick video, or a still picture of the user which attempted to enter the facility using his or her fingerprint (block <b>664</b>). Then the device immediately sends the transaction and the video or image to a remote secure database (block <b>665</b>). A secure web server then picks up the transactions and the corresponding video and still pictures and presents them in a web based report (block <b>666</b>); so that security service personnel can review either at a later date or in real time (block <b>667</b>); thus have an eye on intruders who have failed the fingerprint test, or help identify a familiar face who may need training in the use of the system (block <b>668</b>).

0201<figref idref="DRAWINGS">FIG. 43</figref> is a flowchart <b>670</b> illustrating methods for controlling buddy punching at a GPRS APW biometric terminal. In the case of using the APW biometric device to track employee attendance, thus only employees with registered fingerprints are allowed to punch-in and punch-out (block <b>671</b>). A user places his or her fingerprint on the device (block <b>672</b>), which reads their fingerprint (block <b>673</b>), generates a minutia and compares it to the set of minutiae stored on the device (block <b>674</b>). In case of a match or no match, the device captures a quick video, or a still picture of the user which attempted to punch-in or punch-out using his or her fingerprint (block <b>675</b>). Then immediately sends the transaction and the video or image to a remote secure database (block <b>676</b>). A secure web server then picks up the transactions and the corresponding video and still pictures and presents them in a web based report; so that a manager can review either at a later date or in real time: thus have an eye on employees that are using the system or help train users that are having trouble with the system or stop certain individuals from trying to buddy punch for each other (block <b>677</b>).

0202<figref idref="DRAWINGS">FIG. 44</figref> is a flowchart <b>680</b> illustrating a method for dialing out on demand from a GPRS APW biometric terminal. Another aspect of the present invention is that, unlike other biometric time clocks that need a polling server to call them and download information from them, the APW biometric device dials out to a predefined phone number. This approach lowers the cost of communication for the installation. In the case of other devices which need a polling server and a dedicated phone line, clients pay a sizeable dedicated non-sharable phone line fee. However, by making the APW biometric device dial-out, the device can now split a phone line with a fax machine, for example, or split a dial-out office line and be able to communicate to a remote server without incurring any additional telecommunication fees (block <b>681</b>). For example, the biometric terminal may read the configuration file (block <b>682</b>), detect that it is time to communicate (block <b>683</b>), and attempts to dial out (block <b>684</b>). If the dial out is successful (block <b>684</b>), the terminal communicates, exchanges data with a server, and hangs up (block <b>685</b>). In the case of a wireless terminal, an SMS can be sent from the terminal to trigger a communication, or the terminal can be forced into sync with the system by a site supervisor (note <b>686</b>).

0203<figref idref="DRAWINGS">FIG. 45</figref> is a flowchart <b>690</b> illustrating the left-hand position of the biometric reader. Yet another aspect of the present invention is to position the fingerprint reader on the device's left hand side. Other biometric device manufacturers place the fingerprint reader on the right hand side of the device. We believe that only about 20 percent of the population is left-handed and, as such, use their left hands and fingers extensively. The remaining about 80 percent of the population keeps their left hands and left fingers relatively unused. By positioning the fingerprint reader on the left-hand side of the device, better quality, undamaged, un-scratched fingerprint impressions are obtained, thus increasing the likelihood of fingerprint matching success (block <b>691</b>).

0204While particular embodiments of the invention have been shown and described, it will be apparent to those skilled in the art that changes and modifications may be made therein without departing from the invention in its broader aspects, and, therefore, the aim of the appended claims is to cover all such changes and modifications as fall within the true spirit and scope of the invention.