Remote portable and universal smartcard authentication and authorization device particularly suited to shipping transactions

• US 20040149820A1
• Filed: 12/30/2003
• Published: 08/05/2004
• Est. Priority Date: 08/09/2002
• Status: Active Grant

• Current Assignee: Patrick Zuili
• Original Assignee: Patrick Zuili
• Inventors: Zuili, Patrick
• Granted Patent: US 6,991,174 B2
• Time in Patent Office: Days
• US Class Current: 235/384
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An autonomous and portable smartcard reader device incorporates a high level of embedded security countermeasures. Data transfers are encrypted with two specific input devices, namely a light sensor and PIN or other keyboard entry, and at the output through the use of a dual-tone encoder-decoder. The unit may be used alone or as a plug-in to another device such as a PDA, cell phone, or remote control. The reader may further be coupled to various biometric or plug-in devices to achieve at least five levels of authentication, namely, (1) the smartcard itself; (2) the smartcard reader; (2) the PIN; (3) private-key cryptography (PKI); and (5) the (optional) biometric device. These five levels account for an extremely strong authentication applicable to public networking on public/private computers, and even on TV (satellite, cable, DVD, CD AUDIO, software applications. Transactions including payments may be carried out without any risk of communication tampering, authentication misconduct or identity theft. In essence, the device is a closed box with only two communication ports. The emulation of the device is therefore extremely complex due to the fact that it involves PKI and or identity-based encryption (IBE), key pair, elliptic curves encryption scheme, hardware serialization for communication and software implementation, in conjunction with a specific hardware embodiment and service usage infrastructure component that returns a response necessary for each unique transaction.

Claims

1. A method of authenticating a shipping transaction, comprising the steps of:

providing a smartcard and a smartcard reader;

acquiring biometric information and shipping information relating to a customer;

encrypting the shipping information using the biometric information, and storing the encrypted result on the smartcard and in a shipping database;

providing the smartcard to the customer so that the customer may access the database and change shipping information; and

if an item is shipped to the customer, requesting the customer to supply the biometric information to authorize the transaction.

2. The method of claim 1, wherein the biometric information is a fingerprint.

4. The method of claim 1, wherein the shipping information includes the identity of the customer.

5. The method of claim 1, wherein the shipping information includes a shipping address.

6. The method of claim 1, wherein the shipping information includes an alternate shipping address.

7. The method of claim 1, wherein the shipping information includes a telephone number or other customer contact information.

8. The method of claim 1, wherein the shipping database is remote and accessed through a cell phone, land line, or Internet-connected computer.

9. The method of claim 1, wherein the result is also encrypted using a private key and a company public key.

10. The method of claim 1, further including the step of storing identity-based encrypted (IBE) data on the smartcard.

11. The method of claim 1, further including the step of storing a customer address on the smartcard.

12. The method of claim 1, further including the step of storing a phone number on the smartcard.

13. The method of claim 1, further including the step of storing a public key on the smartcard.

14. The method of claim 1, further including the step of storing a fingerprint on the smartcard.

15. The method of claim 1, further including the step of storing a private key on the smartcard.

16. The method of claim 1, further including the step of storing a company public key.

3. The biometric information act as a private key (identity-based encryption).