Secure multi function network for point of sale transactions

• US 20060259438A1
• Filed: 12/09/2005
• Published: 11/16/2006
• Est. Priority Date: 10/25/2002
• Status: Abandoned Application

• Current Assignee: Randall E. Orkis, William M. Randle
• Original Assignee: Randall E. Orkis, William M. Randle
• Inventors: Orkis, Randall E., Randle, William M.
• Application Number:
  US11/298,121
• Publication Number:
  US 20060259438A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: G07F 5/18 specially adapted for controlling several coin-freed apparatus from one place
• CPC Class Codes: G07F 9/001 Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: G07F 9/002 Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: G07G 1/14 Systems including one or more distant stations co-operating with a central processing unit data transmission in general H04L; telemetry systems for selectively calling a substation from a main station H04Q9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A system providing a wide range of secure payment services from one or more communities of providers over any physical network infrastructure wherein a transceiver is interconnected by an individual user with a variety of service providers, such as funds sources or other applications, at a point of sale through a secure shared multi-function service network interconnecting the transceiver, the sources or applications, and the point of sale; and a secure shared multi-function service network for managing the security of the interconnections between and among the transceiver, applications and point of sale.

Claims

1. A system for effecting multiple transaction types over a secure multifunction service network using a transceiver comprising:

a cell phone, smart phone, or other transceiver capable of an interconnection effected by an individual user with a funds source at a point of sale;

a secure service network interconnecting the transceiver, a funds source associated with the transceiver and the point of sale; and

a global secure service gateway managing provisioning and service interconnections between and among the transceiver, funds source and point of sale, and

authentication and authorization mechanisms as a function of the service network providing secure verification within the network of the user of the transceiver as the true user of the transceiver and the true owner of the funds source.

2. The system of claim 1 wherein the user can enter a debit or credit with respect to the point of sale from or to the funds source over the secure network.

3. The system of claim 1 wherein the user is verified as the true owner of a checking account as a function of the network wherein the network includes mutual authentication and multi-factor authentication as a function of any service or application attached to and effecting a connection over the network.

4. The system of claim 1 or claim 2 or claim 3 including biometric user identification.

5. The system of claim 1 or claim 2 or claim 3 or claim 4 wherein the funds source is interconnected with a payments network allowing at least one of the debit, credit, payment and settlement of funds accessed by a user from the funds source.

6. The system of claim 5 wherein the funds source is one of a cash account or a credit account.

7. The system of claim 1 wherein services provided over the network are singular to a provider or an aggregate combination of services by multiple providers over an SSN implementation.

8. The system of claim 1 wherein elements of security necessary to effect and support a transaction or activity on the network from the transceiver are provided at a base level as a function of the network.

9. The system of claim 8 wherein the base level elements of security on the network include at least one of mutual authentication, authorization, payload encryption, transport independent encryption, privacy, end to end audit, and non-repudiation for compliance reporting.

10. A system of claim 1 wherein the payload for a transaction is encrypted independent of the transport and the payment is specific to the participants of the transaction and the data stored is encrypted at rest and accessed only by one or more of participants to the transaction.

11. A system of claim 1 wherein a transaction UID that is unique to each transaction effected by the network is created and managed as a function of the network.

12. A system of claim 1 wherein:

(a) a correlation UID that is specific to a series of service events on the network establishes transitive trust as a function of the network;

(b) and the ability to track and recreate the events of a muti-service transaction are captured and maintained in a file specific to the transaction to allow the reconstruction of the events associated with a transaction

13. The system of claim 12 including end to end non-repudiation of a transaction.

14. A system of claim 1 wherein an origination UID that can be populated by the transceiver, user, or application connected to the SSN such that end to end logging and transitive authentication can be supported, tracked and enforced is created and managed as a function of the network.

15. A system of claim 1 where additional elements of security comprising at least one of WS-S, SAML, XML certificates, OLDAP, Active Directory, LDAP, and other credential related means in support of either further authorization or further authentication on the network for a given service or function are created and managed as a function of the network.

16. A system of claim 1 wherein the secure multifunction service network is provided as a web service.

17. A system of claim 16 wherein a web application is the service used through the transceiver.

18. A system of claim 1 wherein the service definition on the network includes linkages between web services from one or more providers and applications from one or more providers on an implementation of the SSN to effect an aggregated service on the network.