SYSTEMS AND METHODS FOR PERFORMING SECURE NETWORK COMMUNICATION

• US 20070280510A1
• Filed: 04/23/2007
• Published: 12/06/2007
• Est. Priority Date: 04/24/2006
• Status: Abandoned Application

• Current Assignee: Encryptakey Incorporated
• Original Assignee: Encryptakey Incorporated
• Inventors: Owen, Kelly, Howell, Paul
• Application Number:
  US11/739,028
• Publication Number:
  US 20070280510A1
• Time in Patent Office: Days
• US Class Current: 382/115
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A portable, biometrically-secured device for facilitating various different types of in-person and online transactions. For example, the portable, biometrically-secured device can be used to safely perform in-person financial transactions, such as credit card transactions, in which the user'"'"'s identity is biometrically authenticated. The portable, biometrically-secured device can also be used for performing biometrically-secured online transactions. For example, the portable, biometrically-secured device can be used to create a secure platform from which to make the online transactions by loading a secure operating system from the device to a host computer'"'"'s volatile memory. Biometrically-secured online transactions can then be performed using the host computer. In one embodiment, the portable, biometrically-secured device facilitates online financial transactions that can be performed without transmitting a user'"'"'s financial information to the online merchant.

Claims

1. A system for performing secure electronic person-to-person communications, the system comprising:

a handheld device comprising,

an interface configured to couple to a host computer,

a biometric sensor configured to receive biometric information from a user,

a memory configured to store operating system instructions for execution by the host computer, and

a processor coupled to the memory and the biometric sensor, the processor being configured to load the operating system instructions to the host computer for controlling the operation thereof; and

a server coupled to the host computer via a network, the server configured to;

receive an electronic message from a remote computer, the electronic message including identification information of an intended recipient,

receive the biometric information from the handheld device via the host computer,

compare the biometric information of the user with the identification information of the intended recipient to determine if the user is the intended recipient, and

grant the user access to the electronic message after a determination that the user is the intended recipient.

2. The system of claim 1, wherein the operating system instructions are configured to cause the host computer to initiate an encrypted virtual private network (VPN) connection with the server.

3. The system of claim 1, wherein the electronic messages comprises at least one from the group consisting of:

an email message, a text message, and a voice message.

4. The system of claim 1, wherein the interface of the handheld device comprises a wireless interface.

5. A method for performing secure electronic person-to-person communications, the method comprising:

receiving an electronic message via a network, the electronic message being associated with an identification of an intended recipient;

receiving, from a host computer coupled to the network, a request by a user to access the electronic message;

receiving through a portable device coupled to the host computer biometric information of the user;

electronically authenticating the biometric information to determine whether the user is the intended recipient; and

granting the user access to the electronic message after said authentication.

6. The method of claim 5, further comprising providing the user with an invitation from a sender of the electronic message to access the electronic message.

7. The method of claim 6, further comprising providing the sender with an option to require biometric authentication of the user.

8. The method of claim 5, wherein the electronic message comprises at least one of an email message, real-time messaging, and a voice message.

9. The method of claim 5, wherein said receiving the electronic message and said receiving the request are performed by a secure server coupled to the host computer through the network.

10. The method of claim 9, wherein said electronically authenticating is performed by the secure server.

11. The method of claim 9, wherein the secure server and the host computer are communicatively coupled through a virtual private network (VPN).

12. The method of claim 5, additionally comprising, prior to said granting the user access, loading operating system instructions from the portable device to the host computer.

13. The method of claim 12, additionally comprising preventing data from being stored in non-volatile memory of the host computer during user access to the electronic message.

14. The method of claim 5, wherein said receiving biometric information comprises receiving a information derived from a fingerprint of the user.

15. The method of claim 5, additionally comprising performing a second authentication to determine that the user is the intended recipient prior to said granting the user access.

16. The method of claim 15, wherein performing the second authentication comprises requiring the user to select a predetermined pattern of a plurality of patterns.

17. The method of claim 5, additionally comprising presenting the user with an indication of the electronic message.

18. The method of claim 17, wherein the indication comprises a header of the electronic message.

19. A system for performing secure network communication, the system comprising:

means for receiving an electronic message via a network, the electronic message being associated with an identification of an intended recipient;

means for receiving, from a host computer coupled to the network, a request by a user to access the electronic message;

means for receiving biometric information of the user, said means for receiving biometric information being coupled to the host computer;

means for electronically authenticating the biometric information to determine whether the user is the intended recipient; and

means granting the user access to the electronic message after said authentication.