Methods, systems and apparatuses for secure transactions

• US 20040044627A1
• Filed: 05/30/2002
• Published: 03/04/2004
• Est. Priority Date: 11/30/1999
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Russell, David C., Singer, Bart A.
• Application Number:
  US10/148,512
• Publication Number:
  US 20040044627A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The invention is directed towards methods, systems and apparatuses, see FIG. 1, (100) for providing secure and private interactions. The invention provides capability for verifying the identity of a party initiating an electronic interaction with another party through data input module (140) which is verified by the ientity verification module (150), which further includes a self-destruct mechanism (153). Embodiments of the invention include secure methods for conducting transactions and for limiting the transfer and distribution of personal data to only those data that are absolutely necessary for the comletion of the transactions. The invention facilitates the transfer of additional personal data contingent upon an agreement that appropriately compensates the provider of the personal data.

Claims

1. A method for discounting a deliverable that has a price, comprising the steps of:

receiving from a customer a value for at least one prescribed personal data field;

certifying that the value of the at least one prescribed personal data field corresponds to the customer; and

reducing the price of the deliverable by a prescribed discount, wherein the prescribed discount is independent of the value of the prescribed personal data field.

2. A method for discounting a deliverable that has a price, according to claim 1, wherein the certifying step includes:

collecting a biometric sample from the customer;

authenticating that the collected biometric sample from the customer sufficiently matches a biometric template associated with a verified set of personal data field values.

3. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is a digit-print.

4. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is a handprint.

5. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is voice data.

6. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is retinal data.

7. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is iris data.

8. A method for discounting a deliverable that has a price, according to claim 2, wherein the biometric sample is DNA data.

9. A method for discounting a deliverable that has a price, according to claim 2, wherein the verified set of personal data field values were verified by the customer providing the biometric template and appropriate documentation as to personal data field values to a verification authority, whereupon the verification authority stored the documented personal data field values and the customer-provided biometric template as associated data on a storage device.

10. A method for discounting a deliverable that has a price, according to claim 9, wherein security provisions allow only the verification authority to change the associated data stored on the storage device.

11. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric template stored on the storage device is updateable.

12. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is a digit-print.

13. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is a handprint.

14. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is voice data.

15. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is retinal data.

16. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is iris data.

17. A method for discounting a deliverable that has a price, according to claim 9, wherein the biometric sample is DNA data.

18. A method for discounting a deliverable that has a price, according to claim 1, wherein the certifying step includes:

collecting a handwriting sample from the customer;

authenticating that the collected handwriting sample of the customer sufficiently matches a stored handwriting sample associated with a verified set of personal data field values.

19. A method for discounting a deliverable that has a price, according to claim 18, wherein the verified set of personal data field values were verified by the customer providing a handwriting sample and appropriate documentation as to personal data field values to a verification authority, whereupon the verification authority stored the documented personal data field values and the customer provided handwriting sample as associated data on a storage device.

20. A method for discounting a deliverable that has a price, according to claim 1, wherein the certifying step includes:

collecting a pass code from the customer;

authenticating that the collected pass code of the customer sufficiently matches a stored pass code associated with a verified set of personal data field values.

21. A method for discounting a deliverable that has a price, according to claim 20, wherein the verified set of personal data field values were verified by the customer providing a pass code and appropriate documentation as to personal data field values to a verification authority, whereupon the verification authority stored the documented personal data field values and the customer provided pass code as associated data on a storage device.

22. A method for discounting a deliverable that has a price, according to claim 1, wherein the prescribed data fields received from the customer and the prescribed discount are the result of a negotiation.

23. A method for discounting a deliverable that has a price, according to claim 22 wherein the negotiation is between the customer and a vendor.

24. A method for discounting a deliverable that has a price, according to claim 22 wherein the negotiation is between the customer and a manufacturer.

25. A method for discounting a deliverable that has a price, according to claim 1, wherein the prescribed discount is offered by a discounter, and wherein the prescribed data fields for which the customer provides values and the prescribed discount offered by the discounter are the result of an optimization algorithm based upon constraints and cost functions that are specified by the customer and the discounter.

26. A method for discounting a deliverable that has a price, according to claim 25, wherein the certifying step includes:

collecting a biometric sample from the customer;

authenticating that the collected biometric sample of the customer sufficiently matches a biometric template associated with a verified set of personal data field values.

27. A method for discounting a deliverable that has a price, according to claim 26, wherein the verified set of personal data field values were verified by the customer providing the biometric template and appropriate documentation as to personal data field values to a verification authority, whereupon the verification authority stored the documented personal data field values and the customer provided biometric template as associated data on a storage device.

28. A method for discounting a deliverable that has a price, according to claim 27, wherein security provisions allow only the verification authority to change the associated data stored on the storage device.

29. A method for discounting a deliverable that has a price, according to claim 27, wherein the biometric template stored on the storage device is updateable.

30. A method for discounting a deliverable that has a price, according to claim 29, wherein the biometric sample is a digit-print.

31. A method for discounting a deliverable that has a price, according to claim 1, wherein the prescribed discount is offered by a discounter, and wherein the prescribed data fields for which the customer provides values and the prescribed discount offered by the discounter are the result of an optimization algorithm based upon constraints and benefit functions that are specified by the customer and the discounter.

32. A method for discounting a deliverable that has a price, according to claim 1, wherein the prescribed discount is offered by a discounter, further comprising the steps of:

specifying a customer benefit function that relates how satisfied the customer would be to receive a specified discount in return for providing the value of at least one specified personal data field;

specifying any customer non-negotiable constraints on individual personal data fields or combinations of personal data fields;

specifying a customer benefit function normalization value;

specifying a discounter benefit function that relates how satisfied the discounter would be to provide a specified discount in return for receiving the value of at least one specified personal data field;

specifying any non-negotiable constraints on individual personal data fields or combinations of personal data fields;

specifying a discounter benefit function normalization value; and

determining which personal data fields are prescribed and what the prescribed discount is by maximizing the sum of the product of a customer biasing factor with the ratio of the customer benefit function to the customer benefit function normalization value and the product of a discounter biasing factor with the ratio of the discounter benefit function to the discounter benefit function normalization value, subject to any customer non-negotiable constraints, and any discounter non-negotiable constraints.

33. A method for discounting a deliverable that has a price, according to claim 32, wherein the customer benefit function normalization value is imposed as a non-negotiable constraint on the minimum value of the customer benefit function that the customer will accept.

34. A method for discounting a deliverable that has a price, according to claim 32, wherein the discounter benefit function normalization value is imposed as a non-negotiable constraint on the minimum value of the discounter benefit function that the discounter will accept.

35. A method for discounting a deliverable that has a price, according to claim 34, wherein the customer benefit function normalization value is imposed as a non-negotiable constraint on the minimum value of the customer benefit function that the customer will accept.

36. A method for discounting a deliverable that has a price, according to claim 32, wherein the certifying step includes:

collecting a biometric sample from the customer;

authenticating that the collected biometric sample of the customer sufficiently matches a biometric template associated with a verified set of personal data field values.

37. A method for discounting a deliverable that has a price, according to claim 36, wherein the verified set of personal data field values were verified by the customer providing the biometric template and appropriate documentation as to personal data field values to a verification authority, whereupon the verification authority stored the documented personal data field values and the customer provided biometric template as associated data on a storage device.

38. A method for discounting a deliverable that has a price, according to claim 37, wherein the biometric sample is a digit-print.

39. A method by which a payer conveys a payment to a payee, comprising the steps of:

receiving payer payment information from a payer, the payer payment information including;

a payer financial intermediary address corresponding to an appropriate payer financial intermediary;

payer account data that specifies a payer account from which payment is to be made; and

a personal identifying device control designation, wherein the personal identifying device control designation is an identifying sequence of data given to a personal identifying device and wherein a personal identifying device is a portable device that authenticates that a user of the device is privileged to make a payment from the payer account specified in the payer account data;

confirming that the personal identifying device control designation corresponds to the personal identifying device that has been registered in the name of the payer and is privileged to access the payer account;

forming a payee payment packet, the payee payment packet including;

the payer account data;

payee account data, corresponding to a payee account at a payee financial intermediary; and

a payment amount;

sending the payee payment packet to the payer financial intermediary address; and

accepting payment from the payer financial intermediary.

40. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the confirming step includes consulting a certification repository database.

41. A method by which a payer conveys a payment to a payee, according to claim 40, wherein the payer financial intermediary maintains the certification repository database.

42. A method by which a payer conveys a payment to a payee, according to claim 39 wherein either the payer financial intermediary or the payee financial intermediary is a bank.

43. A method by which a payer conveys a payment to a payee, according to claim 39 wherein either the payer financial intermediary or the payee financial intermediary is a credit-card company.

44. A method by which a payer conveys a payment to a payee, according to claim 39 wherein either the payer financial intermediary or the payee financial intermediary is a credit union.

45. A method by which a payer conveys a payment to a payee, according to claim 39 wherein either the payer financial intermediary or the payee financial intermediary is a brokerage firm.

46. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the payer account data is encrypted.

47. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the personal identifying device authenticates that the user of the device is privileged to make a payment from the payer account by determining that a biometric sample collected from the user sufficiently matches a biometric template associated with the payer account data, and wherein the biometric template is stored locally on the personal identifying device.

48. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample collected from the user is collected within a preset time period before the payer payment information is received by the payee.

49. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is a digit-print.

50. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is a handprint.

51. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is voice data.

52. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is retinal data.

53. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is iris data.

54. A method by which a payer conveys a payment to a payee, according to claim 47, wherein the biometric sample is DNA data.

55. A method by which a payer conveys a payment to a payee, according to claim 47, wherein a verification authority had associated the payer account data with the biometric template on the personal identifying device.

56. A method by which a payer conveys a payment to a payee, according to claim 55, wherein security provisions allow only the verification authority to change the associated data stored on the personal identifying device.

57. A method by which a payer conveys a payment to a payee, according to claim 55, wherein the biometric template stored on the personal identifying device is updateable.

58. A method by which a payer conveys a payment to a payee, according to claim 55, wherein the payer account data is encrypted prior to being received by the payee.

59. A method by which a payer conveys a payment to a payee, according to claim 58, wherein the biometric sample is a digit-print.

60. A method by which a payer conveys a payment to a payee, according to claim 39, further comprising the step of:

confirming that the payer account has sufficient solvency to be debited the payment amount.

61. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the step of sending the payee payment packet to the payer financial intermediary address is performed via the payee financial intermediary.

62. A method by which a payer conveys a payment to a payee, according to claim 39, further comprising the step of:

debiting the payer account by the payment amount plus a payer surcharge.

63. A method by which a payer conveys a payment to a payee, according to claim 62, wherein the payer surcharge is zero.

64. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the step of accepting payment from the payer financial intermediary occurs when the payee account is credited by the payment amount minus a payee surcharge.

65. A method by which a payer conveys a payment to a payee, according to claim 64, wherein the payee surcharge is zero.

66. A method by which a payer conveys a payment to a payee, according to claim 64, wherein the payee surcharge is the sum of surcharges assessed by multiple entities.

67. A method by which a payer conveys a payment to a payee, according to claim 66, wherein the multiple entities include the payee financial intermediary, the payer financial intermediary, and a credit-card company.

68. A method by which a payer conveys a payment to a payee, according to claim 39, wherein the payee does not have access to the payer account data.

69. A method by which a payer conveys a payment to a payee, comprising the steps of:

receiving payer payment information from a payer, the payer payment information including;

a payer financial intermediary address corresponding to an appropriate payer financial intermediary;

payer account data that specifies a payer account from which payment is to be made; and

a personal identifying device control designation, wherein the personal identifying device control designation is an identifying sequence of data given to a personal identifying device and wherein a personal identifying device is a portable device that authenticates that a user of the device is privileged to make a payment from the payer account specified in the payer account data;

forming a payee payment packet, the payee payment packet including;

the payer account data;

the personal identifying device control designation;

payee account data, corresponding to a payee account at a payee financial intermediary; and

a payment amount;

sending the payee payment packet to the payer financial intermediary address; and

accepting payment from the payer financial intermediary.

70. A method by which a payer conveys a payment to a payee, according to claim 69 wherein either the payer financial intermediary or the payee financial intermediary is a bank.

71. A method by which a payer conveys a payment to a payee, according to claim 69 wherein either the payer financial intermediary or the payee financial intermediary is a credit-card company.

72. A method by which a payer conveys a payment to a payee, according to claim 69 wherein either the payer financial intermediary or the payee financial intermediary is a credit union.

73. A method by which a payer conveys a payment to a payee, according to claim 69 wherein either the payer financial intermediary or the payee financial intermediary is a brokerage firm.

74. A method by which a payer conveys a payment to a payee, according to claim 69, wherein the payer account data is encrypted.

75. A method by which a payer conveys a payment to a payee, according to claim 69, wherein the personal identifying device authenticates that the user of the device is privileged to make a payment from the payer account by determining that a biometric sample collected from the user sufficiently matches a biometric template associated with the payer account data, and wherein the biometric template is stored locally on the personal identifying device.

76. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample collected from the user is collected within a preset time period before the payer payment information is received by the payee.

77. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is a digit-print.

78. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is a handprint.

79. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is voice data.

80. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is retinal data.

81. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is iris data.

82. A method by which a payer conveys a payment to a payee, according to claim 75, wherein the biometric sample is DNA data.

83. A method by which a payer conveys a payment to a payee, according to claim 75, wherein a verification authority had associated the payer account data with the biometric template on the personal identifying device.

84. A method by which a payer conveys a payment to a payee, according to claim 83, wherein security provisions allow only the verification authority to change the associated data stored on the personal identifying device.

85. A method by which a payer conveys a payment to a payee, according to claim 83, wherein the biometric template stored on the personal identifying device is updateable.

86. A method by which a payer conveys a payment to a payee, according to claim 83, wherein the payer account data is encrypted prior to being received by the payee.

87. A method by which a payer conveys a payment to a payee, according to claim 86, wherein the biometric sample is a digit-print.

88. A method by which a payer conveys a payment to a payee, according to claim 69, further comprising the step of:

confirming that the personal identifying device control designation corresponds to the personal identifying device that has been registered in the name of the payer and is privileged to access the payer account.

89. A method by which a payer conveys a payment to a payee, according to claim 88, wherein the confirming step includes consulting a certification repository database.

90. A method by which a payer conveys a payment to a payee, according to claim 89, wherein the payer financial intermediary maintains the certification repository database.

91. A method by which a payer conveys a payment to a payee, according to claim 69, further comprising the step of:

confirming that the payer account has sufficient solvency to be debited the payment amount.

92. A method by which a payer conveys a payment to a payee, according to claim 69, wherein the step of sending the payee payment packet to the payer financial intermediary address is performed via the payee financial intermediary.

93. A method by which a payer conveys a payment to a payee, according to claim 69, further comprising the step of:

debiting the payer account by the payment amount plus a payer surcharge.

94. A method by which a payer conveys a payment to a payee, according to claim 93, wherein the payer surcharge is zero.

95. A method by which a payer conveys a payment to a payee, according to claim 69, wherein the step of accepting payment from the payer financial intermediary occurs when the payee account is credited by the payment amount minus a payee surcharge.

96. A method by which a payer conveys a payment to a payee, according to claim 95, wherein the payee surcharge is zero.

97. A method by which a payer conveys a payment to a payee, according to claim 95, wherein the payee surcharge is the sum of surcharges assessed by multiple entities.

98. A method by which a payer conveys a payment to a payee, according to claim 97, wherein the multiple entities include the payee financial intermediary, the payer financial intermediary, and a credit-card company.

99. A method by which a payer conveys a payment to a payee, according to claim 69, wherein the payee does not have access to the payer account data.

100. A method by which a payer conveys a payment to a payee, comprising the steps of:

receiving a payee payment packet, the payee payment packet including;

payee account data corresponding to a payee account at a payee financial intermediary;

a payment amount;

payer account data corresponding to a payer account at a payer financial intermediary; and

a personal identifying device control designation, wherein the personal identifying device control designation is an identifying sequence of data given to a personal identifying device and wherein a personal identifying device is a portable device that authenticates that a user of the device is privileged to make a payment from the payer account specified in the payer account data;

and debiting the payer account by the payment amount plus a payer surcharge.

101. A method by which a payer conveys a payment to a payee, according to claim 100 wherein either the payer financial intermediary or the payee financial intermediary is a bank.

102. A method by which a payer conveys a payment to a payee, according to claim 100 wherein either the payer financial intermediary or the payee financial intermediary is a credit-card company.

103. A method by which a payer conveys a payment to a payee, according to claim 100 wherein either the payer financial intermediary or the payee financial intermediary is a credit union.

104. A method by which a payer conveys a payment to a payee, according to claim 100 wherein either the payer financial intermediary or the payee financial intermediary is a brokerage firm.

105. A method by which a payer conveys a payment to a payee, according to claim 100, wherein the payer surcharge is zero.

106. A method by which a payer conveys a payment to a payee, according to claim 100, further including the step of:

transferring to the payee account the payment amount minus a payee surcharge.

107. A method by which a payer conveys a payment to a payee, according to claim 106, wherein the payee surcharge is zero.

108. A method by which a payer conveys a payment to a payee, according to claim 100, wherein the personal identifying device authenticates that the user of the device is privileged to make a payment from the payer account by determining that a biometric sample collected from the user sufficiently matches a biometric template associated with the payer account data, and wherein the biometric template is stored locally on the personal identifying device.

109. A method by which a payer conveys a payment to a payee, according to claim 100, further comprising the step of:

confirming that the personal identifying device control designation corresponds to the personal identifying device that has been registered in the name of the payer and is privileged to access the payer account.

110. A method for a payer to convey a payment to a payee, comprising the steps of:

authenticating the payer to a personal identifying device, the personal identifying device being a portable device that authenticates that a user of the device is privileged to use the device and has transference privileges to a bearer financial instrument stored on the personal identifying device; and

transferring the bearer financial instrument to the payee.

111. A method for a payer to convey a payment to a payee, according to claim 110, wherein the personal identifying device authenticates the payer by determining that a biometric sample collected from the user of the personal identifying device sufficiently matches a biometric template associated with transference privileges of the bearer financial instrument.

112. A method for a customer having a customer identity to make a purchase from a vendor comprising the steps of:

authenticating the customer identity to a personal identifying device, the personal identifying device being a portable device that authenticates that a user of the device is privileged to use the device and is privileged to request that a payment be charged to a customer account at a customer financial intermediary;

transferring from the personal identifying device to an information processor;

customer account data and

a customer financial intermediary address corresponding to the customer financial intermediary;

transferring from the vendor to the information processor;

vendor account data corresponding to a vendor account at a vendor financial intermediary and

a payment amount;

forming a vendor payment packet, including;

the customer account data,

the vendor account data, and

the payment amount;

sending the vendor payment packet to the customer financial intermediary address;

debiting the customer account at the customer financial intermediary by the payment amount plus a customer surcharge; and

crediting the vendor account at the vendor financial intermediary by the payment amount minus a vendor surcharge.

113. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 112, wherein the customer surcharge is zero.

114. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 112, wherein the vendor surcharge is zero.

115. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 112, wherein the personal identifying device authenticates the customer identity by determining that a biometric sample collected from the customer sufficiently matches a biometric template associated with the customer account data.

116. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 112, further comprising the steps of:

selecting items for purchase;

adding the selected items for purchase to an electronic shopping cart; and

determining the payment amount for the selected items in the electronic shopping cart.

117. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 116, wherein the step of selecting items for purchase is performed via a graphical user interface.

118. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 117, wherein the graphical user interface is a simulated retail store.

119. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 116, wherein the electronic shopping cart is maintained on the personal identifying device and is transferred to the information processor at checkout.

120. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 116, wherein the electronic shopping cart is maintained by the vendor and wherein items are selected for purchase by sending a signal containing a customer identifier from the personal identifying device to a vendor electronic shopping cart processor, wherein the vendor electronic shopping cart processor maintains an electronic shopping cart for each customer identifier, and provides that information to the information processor at checkout.

121. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 120, wherein the customer identifier is a personal identifying device control designation, which is an identifying sequence of data given to the personal identifying device.

122. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 120, wherein the customer identifier is the customer name.

123. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 120, wherein the customer identifier is a vendor assigned identifier.

124. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 116, wherein items are selected for purchase with the use of an item designator that specifies the item to be added to the electronic shopping cart.

125. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 124, wherein the item designator is a bar-code reader that reads a bar code on the selected item.

126. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 124, wherein the item designator is a magnetic-stripe reader that reads a magnetic stripe on the selected item.

127. A method for a customer having a customer identity to make a purchase from a vendor, according to claim 116, wherein the electronic shopping carts associated with multiple personal identifying devices are merged at checkout.

128. A method for a customer having a customer identity to conduct a transaction, comprising the steps of:

authenticating the customer identity to a personal identifying device, the personal identifying device being a portable device that authenticates that a user of the device is privileged to use the device and is privileged to request that a payment be charged to a customer account at a customer financial intermediary;

sending customer account data to a receiver; and

receiving acknowledgment that the transaction was approved.

129. A method for a customer having a customer identity to conduct a transaction, according to claim 128, wherein the personal identifying device authenticates the customer identity by determining that a biometric sample collected from the user of the personal identifying device sufficiently matches a biometric template associated with the customer account data.

130. A method for a customer having a customer identity to conduct a transaction, according to claim 129, wherein the biometric sample is a digit-print.

131. A method for a customer having a customer identity to conduct a transaction, according to claim 130, further comprising the steps of:

selecting items for purchase;

adding the selected items for purchase to an electronic shopping cart; and

determining the payment amount for the selected items in the electronic shopping cart.

132. A method for a customer having a customer identity to conduct a transaction, according to claim 131, wherein the electronic shopping cart is maintained on the personal identifying device

133. A method for a customer having a customer identity to conduct a transaction, according to claim 131, wherein the step of selecting items for purchase is done with the use of a graphical user interface.

134. A method for a customer having a customer identity to conduct a transaction, according to claim 133, wherein the graphical user interface is controlled from the personal identifying device.

135. A method for a customer having a customer identity to conduct a transaction, according to claim 128, further comprising the steps of:

selecting items for purchase;

adding the selected items for purchase to an electronic shopping cart; and

determining the payment amount for the selected items in the electronic shopping cart.

136. A method for a customer having a customer identity to conduct a transaction, according to claim 135, wherein the electronic shopping cart is maintained on the personal identifying device

137. A method for interacting with a simulated inventory, comprising:

authenticating a user to a personal identifying device, the personal identifying device being a portable device that authenticates that the user of the device is privileged to use the device, the personal identifying device including a user input module that receives inputs from the user;

traveling through the simulated inventory by providing inputs to the user input module of the personal identifying device.

138. A method for interacting with a simulated inventory, according to claim 137, wherein the identity of the user is kept from other users.

139. A method for interacting with a simulated inventory, according to claim 137, wherein the identity of the user is not retained by the simulated inventory.

140. A method for interacting with a simulated inventory, according to claim 137, wherein an inventory gatekeeper restricts access to the simulated inventory only to registered entities, and wherein the personal identifying device communicates identity data to the inventory gatekeeper, whereby the inventory gatekeeper either permits or denies access.

141. A method for interacting with a simulated inventory, according to claim 140, wherein the registered entities are personal identifying devices and the identity data comprise a personal identifying device control designation, which is an identifying sequence of data assigned to a personal identifying device.

142. A method for interacting with a simulated inventory, according to claim 141, wherein each personal identifying device control designation is unique to each personal identifying device.

143. A method for interacting with a simulated inventory, according to claim 140, wherein the registered entities are individuals or organizations and the identity data include information that uniquely identifies the registered entity.

144. A method for interacting with a simulated inventory, according to claim 137, further comprising the step of:

certifying payment capability.

145. A method for interacting with a simulated inventory, according to claim 137, wherein the authenticating step is repeatedly required.

146. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is that of a grocery store.

147. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is that of a department store.

148. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is that of a parts warehouse.

149. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is that of a shopping mall having multiple stores.

150. A method for interacting with a simulated inventory, according to claim 149, further comprising the steps of:

selecting an item for purchase from the simulated inventory;

adding selected items to an electronic shopping cart; and

determining a payment amount;

wherein the electronic shopping cart tracks from which store each item was selected.

151. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is that of a package delivery depot.

152. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is a two-dimensional graphical user interface.

153. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is a graphical user interface with perspective enhancement for virtual three-dimensionality.

154. A method for interacting with a simulated inventory, according to claim 137, wherein the simulated inventory is a holographic graphical user interface.

155. A method for interacting with a simulated inventory, according to claim 137, further comprising the step of:

selecting an item for purchase from the simulated inventory.

156. A method for interacting with a simulated inventory, according to claim 155, further comprising the steps of:

adding selected items to an electronic shopping cart, and

determining a payment amount.

157. A system by which a payer conveys a payment to a payee, comprising:

a personal identifying device, the personal identifying device being a device that authenticates that a user of the device is privileged to use the device and is privileged to request that a payment be charged against a payer account at a payer financial intermediary, whereupon the personal identifying device transmits signals that encode;

payer account data and

a payer financial intermediary address corresponding to the payer financial intermediary;

an information processor, the information processor being a device that receives signals from the personal identifying device and from the payee, wherein the information processor, upon receiving from the personal identifying device signals encoding;

the payer account data and

the payer financial intermediary address;

and from the payee, signals encoding;

payee account data corresponding to a payee account at a payee financial intermediary and

a payment amount;

forms a payee payment packet that includes;

the payer account data,

the payee account data, and

the payment amount;

and sends the payee payment packet, either directly or indirectly, to the payer financial intermediary address; and

a financial intermediary component that receives the payee payment packet and transfers money from the payer account at the payer financial intermediary to the payee account at the payee financial intermediary.

158. A system by which a payer conveys a payment to a payee, according to claim 157, wherein the personal identifying device authenticates that the user of the device is privileged to make a payment from the payer account by determining that a biometric sample collected from the user sufficiently matches a biometric template associated with the payer account data, and wherein the biometric template is stored locally on the personal identifying device.

159. A system by which a payer conveys a payment to a payee, according to claim 157, wherein the signals transmitted by the personal identifying device and received by the information processor are transmitted without wires.

160. A system by which a payer conveys a payment to a payee, according to claim 157, wherein the information processor verifies that payer account data is valid.

161. A system by which a payer conveys a payment to a payee, according to claim 157, further comprising:

a certification repository database in which the personal identifying device is registered for use by the payer; and

wherein the personal identifying device sends signals encoding a personal identifying device control designation and wherein the information processor consults the certification repository database to verify that the personal identifying device control designation corresponds to the personal identifying device that is registered for use by the payer.

162. A system by which a payer conveys a payment to a payee, according to claim 161, wherein the information processor verifies that the personal identifying device control designation corresponds to the personal identifying device that is registered for use by the payer with the use of a public key located in the certification repository database.

163. A system by which a payer conveys a payment to a payee, according to claim 161, wherein the information processor verifies that payer account data is valid.

164. A system by which a payer conveys a payment to a payee, according to claim 163, wherein the personal identifying device authenticates that the user of the device is privileged to make a payment from the payer account by determining that a biometric sample collected from the user sufficiently matches a biometric template associated with the payer account data, and wherein the biometric template is stored locally on the personal identifying device.

165. A system by which a payer conveys a payment to a payee, according to claim 164, wherein the signals transmitted by the personal identifying device and received by the information processor are transmitted without wires.

166. A verification system, comprising:

an actuator for performing a user-initiated action;

a personal identifying device, the personal identifying device being a portable device that authenticates that a user of the device is privileged to use the device and is privileged to request that the user-initiated action be taken, whereupon the personal identifying device transmits signals that encode;

an identification, and

an instruction that the user-initiated action be taken;

a verification processor, the verification processor being a device that receives signals from the personal identifying device and verifies that the identification is associated with a personal identifying device that is authorized to request that the user-initiated action be taken, whereupon verification, the verification processor signals the actuator to perform the user-initiated action.

167. A verification system, according to claim 166, wherein the identification is a personal identifying device control designation, which is an identifying sequence of data given to the personal identifying device.

168. A verification system, according to claim 166, wherein the identification identifies a user of the personal identifying device.

169. A verification system, according to claim 166, wherein the personal identifying device authenticates that the user of the device is privileged to use the device by determining that a biometric sample collected from the user sufficiently matches a biometric template stored locally on the personal identifying device.

170. A verification system, according to claim 169 wherein signals transmitted by the personal identifying device and received by the verification processor are wireless.

171. A verification system, according to claim 169 wherein the verification processor verifies that the identifier is associated with a personal identifying device that is authorized to request that the user-initiated action be taken by consulting a certification repository database in which the personal identifying device is registered.

172. A verification system, according to claim 169 wherein the actuator logs the user into a computer in response to signals received from the verification processor.

173. A verification system, according to claim 169 wherein the actuator opens an access-way in response to signals received from the verification processor.

174. A verification system, according to claim 173 wherein the access-way is a door.

175. A verification system, according to claim 173 wherein the access-way is a window.

176. A verification system, according to claim 169 wherein actuator unlocks an access-way in response to signals received from the verification processor.

177. A verification system, according to claim 176 wherein the actuator unlocks a storage device in response to signals received from the verification processor.

178. A verification system, according to claim 169 wherein the actuator activates a set top box in response to signals received from the verification processor.

179. A verification system, according to claim 169 wherein the actuator activates a PAY-TV in response to signals received from the verification processor.

180. A verification system, according to claim 169 wherein the actuator activates an automated teller machine in response to signals received from the verification processor.

181. A verification system, according to claim 169 wherein the actuator initiates a phone call in response to signals received from the verification processor.

182. A verification system, according to claim 169 wherein the actuator initiates a session at an information kiosk in response to signals received from the verification processor.

183. A verification system, according to claim 166, wherein the actuator controls the traveling of a user cursor through a simulated inventory.

184. A verification system, according to claim 166, wherein the actuator controls the selection of user options from a graphical user interface.

185. A simulated inventory system, comprising:

a simulated inventory display;

a simulated inventory controller that controls the interaction of at least one cursor with at least one icon on the simulated inventory display; and

a personal identifying device, the personal identifying device being a portable device that authenticates that a user of the device is privileged to use the device, the personal identifying device including a transmitter that transmits signals to the simulated inventory controller, a user input module that receives inputs from the user, and a processor that processes the inputs and provides corresponding signals to the transmitter.

186. A simulated inventory system, according to claim 185, wherein the simulated inventory display is individualized for each personal identifying device.

187. A simulated inventory system, according to claim 185, wherein the simulated inventory display includes a cursor for each user of the simulated inventory system.

188. A simulated inventory system, according to claim 185, wherein the simulated inventory display is a two-dimensional graphical user interface.

189. A simulated inventory system, according to claim 185, wherein the simulated inventory display employs perspective to give the impression of a three-dimensional graphical user interface.

190. A simulated inventory system, according to claim 185, wherein the simulated inventory display is a holographic graphical user interface.

191. A simulated inventory system, according to claim 185, wherein the user input module of the personal identifying device includes a positional sensor.

192. A simulated inventory system, according to claim 185, wherein the user input module of the personal identifying device includes a joystick.

193. A simulated inventory system, according to claim 185, wherein the simulated inventory controller generates a cursor representing the user of the personal identifying device in response to signals received from the personal identifying device requesting that the user access the simulated inventory.

194. A simulated inventory system, according to claim 185, wherein the simulated inventory controller checks to ensure that an entity requesting access to the simulated inventory is a registered entity.

195. A personal identifying device, comprising:

at least one processor;

a transmitter coupled to at least one processor;

a user input module, the user input module being capable of receiving inputs from a user and sending corresponding input signals to at least one processor;

a personal data storage medium accessible by at least one processor; and

an identity verification module communicating with at least one processor, the identity verification module comprising;

a verification input component that obtains user identity data from the user,

an identity data module for storing at least one set of stored identity data, and

a comparator that compares the user identity data obtained by the verification input component with at least one set of stored identity data and signals at least one processor as to whether the user identity data sufficiently match at least one set of stored identity data.

196. A personal identifying device, according to claim 195, wherein the personal identifying device is portable.

197. A personal identifying device, according to claim 196, wherein the personal identifying device weighs less than 2 ounces.

198. A personal identifying device, according to claim 197, wherein the personal identifying device weighs less than 1 ounce.

199. A personal identifying device, according to claim 196, wherein the personal identifying device has a volume less than 2 cubic inches.

200. A personal identifying device, according to claim 199, wherein the personal identifying device has a volume less than 1 cubic inch.

201. A personal identifying device, according to claim 195, further comprising:

a self-destruct element, the self-destruct element destroying the stored identity data if unauthorized access to the stored identity data is attempted.

202. A personal identifying device, according to claim 195, wherein the user identity data and the stored identity data are biometrics.

203. A personal identifying device, according to claim 202, wherein the user identity data and the stored identity data represent a digit-print.

204. A personal identifying device, according to claim 203, wherein the verification input component comprises a capacitive sensor coupled to associated circuitry and software.

205. A personal identifying device, according to claim 203, wherein the verification input component comprises an optical scanner coupled to associated circuitry and software.

206. A personal identifying device, according to claim 202, wherein the user identity data and the stored identity data are voice data.

207. A personal identifying device, according to claim 202, wherein the user identity data and the stored identity data are retinal data.

208. A personal identifying device, according to claim 202, wherein the user identity data and the stored identity data are DNA data.

209. A personal identifying device, according to claim 195, further comprising an adapter for coupling to a mobile electronic device.

210. A personal identifying device, according to claim 209, wherein the mobile electronic device is a cellular telephone.

211. A personal identifying device, according to claim 209, wherein the mobile electronic device is a personal data assistant.

212. A personal identifying device, according to claim 195, further comprising a receiver coupled to at least one processor.

213. A personal identifying device, according to claim 195, wherein the transmitter transmits signals in response to the input signals.

214. A personal identifying device, according to claim 195, wherein the transmitter transmits wireless signals.

215. A personal identifying device, according to claim 195, wherein the user input module comprises switches.

216. A personal identifying device, according to claim 195, wherein the user input module comprises a bar-code reader.

217. A personal identifying device, according to claim 195, wherein the user input module comprises a magnetic-stripe reader.

218. A personal identifying device, according to claim 195, wherein the user input module is attachable to a separate bar-code reader.

219. A personal identifying device, according to claim 195, wherein the user input module is attachable to a separate magnetic-stripe reader.

220. A personal identifying device, according to claim 195, wherein the user input module further comprises a positional sensor to determine orientation of the personal identifying device.

221. A personal identifying device, according to claim 195, wherein the user input module further comprises a joystick.

222. An information processor, comprising:

at least one processor;

a receiver coupled to at least one processor, the receiver being capable of receiving customer account data from a personal identifying device;

a vendor connection coupled to at least one processor, the vendor connection enabling transmission of vendor account data to the information processor;

a financial intermediary connection coupled to at least one processor, the financial intermediary connection facilitating the transmission to a financial intermediary of vendor account data and customer account data.

223. An information processor, according to claim 222, further comprising a certification repository connection coupled to at least one processor.

224. An information processor, according to claim 223, further comprising software running on at least one processor that verifies that the personal identifying device is privileged to use a customer account identified in the customer account data.