Distributed information storage, authentication and authorization system

• US 20030195858A1
• Filed: 04/10/2002
• Published: 10/16/2003
• Est. Priority Date: 04/10/2002
• Status: Abandoned Application

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Watanabe, Fujio, Kurakake, Shoji, Cao, Jingjun
• Application Number:
  US10/120,165
• Publication Number:
  US 20030195858A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

An on-line transaction approval system includes a service provider and a proxy server, along with a principal device operated by a principal. The principal has a user account with the on-line transaction approval system. A beneficiary operating a beneficiary device may be enabled to utilize the user account in on-line transactions. Upon receipt of an on-line service order request by the service provider from the beneficiary via the beneficiary device, the proxy server may receive a transaction request from the service provider. The principal device may receive notification of the service order request. The proxy server may provide authorized personal information to the service provider as a function of authentication of the beneficiary and authorization by the principal. The service provider may fulfill the service order request based on receipt of the authorized personal information.

Claims

1. A method of approving a request for an on-line transaction with a service provider, the on-line transaction requested by a beneficiary over an electronic communication channel, the method comprising:

a) subscribing a principal to an on-line transaction approval system;

b) enabling a beneficiary to access the on-line transaction approval system;

c) transmitting a service order request from the beneficiary to a service provider;

d) querying a proxy server with the service provider for authentication of the beneficiary and authorization by the principal of the transaction request; and

e) returning authorized personal information to the service provider to complete the on-line transaction as a function of authentication approval of the beneficiary and authorization approval by the principal.

2. The method of claim 1, wherein the service order request comprises a beneficiary ID and a beneficiary password and c) comprises encrypting the beneficiary ID and the beneficiary password with a public key of the proxy server.

3. The method of claim 1, wherein d) comprises generating a request comprising a beneficiary ID, a beneficiary password, a service provider ID, service information, a request for beneficiary authentication, a request for principal authorization and a public key of the service provider.

4. The method of claim 1, wherein d) comprises transmitting a request for authorization to a principal device of the principal, the request for authorization comprising a service provider ID, service information and a beneficiary ID.

5. The method of claim 1, wherein d) comprises authenticating the beneficiary with the proxy server as a function of a beneficiary ID and a beneficiary password.

6. The method of claim 1, wherein e) comprises transmitting an authorization approval from a principal device of the principal via the proxy server to the service provider, the authorization approval message comprising authorization for the transaction and the authorized personal information.

7. The method of claim 6, wherein transmitting the authorization approval comprises extracting the authorized personal information from storage in the principal device.

8. The method of claim 6, wherein transmitting the authorization approval comprises encrypting the authorization approval with a public key of the proxy server,

9. The method of claim 6, wherein transmitting the authorization approval comprises encrypting the authorization message with a public key of the service provider.

10. A method of approving a request for an on-line transaction with a service provider, the on-line transaction requested by a beneficiary over an electronic communication channel, the method comprising:

a) enabling a beneficiary with access to a user account of a principal for on-line transactions;

b) receiving a transaction request as a function of an on-line transaction initiated by the beneficiary;

c) processing the transaction request for authorization by the principal; and

d) transmitting authorized personal information of the principal to enable completion of the on-line transaction when the on-line transaction is authorized by the principal.

11. The method of claim 10, wherein c) comprises authenticating the identity of the beneficiary.

12. The method of claim 10, wherein c) comprises pre-authorizing the online transaction in real time with a proxy server as a function of parameters preconfigured by the principal.

13. The method of claim 12, wherein authorizing the on-line transaction with the proxy server comprises notifying the principal of the pre-authorization

14. The method of claim 10, wherein d) comprises authorizing the on-line transaction in real time with a principal device operated by the principal.

15. The method of claim 10, wherein d) comprises supplying the authorized personal information from a database in a proxy server.

16. The method of claim 10, wherein d) comprises supplying the authorized personal information from a database of a principal device operated by the principal.

17. A method of approving a request for an on-line transaction with a service provider, the on-line transaction requested by a beneficiary over an electronic communication channel, the method comprising:

a) subscribing a principal to an on-line transaction approval system;

b) enabling a beneficiary to utilize the on-line transaction approval system;

c) receiving an authorization request with a principal device of the principal as a function of an on-line transaction initiated by the beneficiary;

d) selectively authorizing the on-line transaction in real time with the principal device as a function of the identity of the beneficiary and the nature of the on-line transaction; and

e) transmitting authorized personal information from the principal device to enable completion of the on-line transaction.

18. The method of claim 17, wherein a) comprises maintaining personal information of the principal only in a database of the principal device.

19. The method of claim 17, wherein c) comprises:

monitoring the response time of the principal to the request; and

selecting a different communication mechanism when the response time exceeds a selected time period.

20. The method of claim 17, wherein d) comprises storing a transaction record in the principal device, the transaction record comprising identification of the beneficiary and the nature of the transaction.

21. An on-line transaction approval system for approving a request for an on-line transaction with a service provider, the on-line transaction requested by a beneficiary over an electronic communication channel, the on-line transaction approval system comprising:

a service provider in communication with a beneficiary, the service provider operable to receive a service order request from the beneficiary, the service order request comprising a beneficiary ID and a beneficiary password; and

a proxy server in communication with the service provider, the proxy server operable to receive a transaction request from the service provider as a function of the service order, the transaction request comprising the beneficiary ID, the beneficiary password and transaction information;

the proxy server operable to provide authorized personal information to the service provider as a function of authentication of the beneficiary and authorization approval by a principal, the beneficiary enabled with access to make the service order request by the principal.

22. The on-line transaction approval system of claim 21, further comprising a principal device in communication with the proxy server, the principal device operable to receive indication of the transaction request.

23. The on-line transaction approval system of claim 21, wherein the principal device comprises a database, the personal information of the principal stored only in the database.

24. The on-line transaction approval system of claim 21, wherein the proxy server comprises a pre-authorization decision component, the pre-authorization decision component operable to selectively authorize the transaction request as a function of parameters established by the principal.

25. The on-line transaction approval system of claim 21, wherein the proxy server comprises a preset information component, personal information of the principal is stored in the preset information component for use when the proxy server is operable to provide pre-authorization approval of the transaction request as a function of parameters established by the principal.

26. The on-line transaction approval system of claim 21, wherein the proxy server comprises a proxy database module, an authentication module and an authorization module.

27. The on-line transaction approval system of claim 22, wherein the principal device comprises a user interface module, an authorization module, a principal database, a verification of principal component, a device information component and a timer component.

28. The on-line transaction approval system of claim 21, wherein authorized personal information comprises credit card information.