System for managing personal identifiers and financial instrument use

• US 10,373,166 B2
• Filed: 05/27/2014
• Issued: 08/06/2019
• Est. Priority Date: 05/24/2013
• Status: Active Grant

• Current Assignee: Marc George
• Original Assignee: Marc George
• Inventors: George, Marc
• Primary Examiner(s): Glass, Russell S
• Application Number:
  US14/288,282
• Publication Number:
  US 20140379504A1
• Time in Patent Office: 1,897 Days
• Field of Search: 705 21
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules

Abstract

A method for the secure use of a personal identifier and/or financial instrument that may take place simultaneously with traditional methods of authorization for credit card, check, funds withdraw/transfer or purchase. Authorization according to the present invention may take place as follows: A) the Owner provides a pre-approval of authorization if the request meets an array of Owner-defined parameters; B) a authorization may be granted based on proximity of the Owner to the point of use; or C) the Owner provides a real time approval by smart device. In each case the invention subjects the request for authentication to a sequential verification procedure in which the request is tested against one or more pre-defined verification protocols, the deployed authentication protocol being pre-determined by the Owner and pre-selected in accordance with a user profile that was pre-programmed by the Owner.

Claims

1. In a data processing system including a smart device operated by an individual user and configured with a client application, a web-enabled device operated by a business or government entity and configured with a point of authorization application for transmitting a request for back-end authorization of an instance of use of said user'"'"'s personal identifier to authorize an action, and a Software as a Service (SaaS) system operated by an Application Service provider (ASP) and comprising at least one application server configured with ASP software for providing a back-end authorization of use of said user'"'"'s personal identifier or financial instrument to said requesting business or government entity, all connected via a communications network, a method of verifying the authorization of use of a personal identifier or financial instrument belonging to said user of said smart device, the method comprising the steps of:

said business or government entity using said point of authorization application on said web-enabled device to transmit a request for authorization of use of a personal identifier or financial instrument to said Application Service Provider;

receiving by said Application Service Provider SaaS system said request for authorization of use of the personal identifier or financial instrument;

determining by said Application Service Provider SaaS system that said personal identifier or financial instrument is registered with the Application Service Provider SaaS system, and transmitting a registration result to the requesting business or government entity;

determining by said Application Service Provider SaaS system whether said user previously provided an imminent use authorization to said Application Service Provider comprising a one-time pre-authorization effective for a specified time period, and producing by said Application Service Provider SaaS system a first result indicating whether said user previously provided said imminent use authorization;

determining by said Application Service Provider SaaS system whether said user previously provided an entity specific authorization to Application Service Provider, and producing by said Application Service Provider SaaS system a second result;

determining by said Application Service Provider SaaS system whether said user previously provided a location specific authorization to Application Service Provider, that said smart device location service is enabled and within a defined geographic distance from said requesting business or government entity web-enabled device, and producing by said Application Service Provider SaaS system a third result indicating whether said owner user previously provided a location specific authorization to Application Service Provider and whether said smart device location service is enabled and within a defined geographic distance from said business or government entity web-enabled device;

determining by said Application Service Provider SaaS system that said first result, said second result, and said third result from said preceding determining steps indicate that none of said imminent use authorization, entity specific authorization, and location specific authorization were provided and sequentially executing the sub-steps of,

first, identifying said user'"'"'s smart device from said personal identifier or financial instrument,

second, transmitting the authorization of use request to the user'"'"'s smart device client application for direct authorization of use by the user of said personal identifier or financial instrument, and

third, producing by said Application Service Provider SaaS system a fourth result indicating that said user failed to directly authorize use of said personal identifier or financial instrument in said transmitting sub-step,

said Application Service Provider SaaS system evaluating said first result, second result, third result and fourth result and producing an authorization result there from;

transmitting by said Application Service Provider SaaS system via said communications network said authorization result to said requesting business or government entity;

said Application Service Provider transmitting an approval of said request for front-end authorization of said user'"'"'s personal identifier or financial instrument to said requesting business or government entity web-enabled device having a point of authorization application via said communications network; and

said requesting business or government entity selectively approving said request for authorization of use of said personal identifier or financial instrument based on said authorization result.

2. The method according to claim 1, further comprising completing all of said method steps in addition to a conventional authorization verification process.

3. The method according to claim 2, further comprising completing said conventional authorization verification process simultaneous to said method steps.

4. The method according to claim 2, further comprising completing said conventional authorization verification process previous to said method steps.

5. The method according to claim 2, further comprising completing said conventional authorization verification process after said method steps.