PORTABLE ELECTRONIC AUTHORIZATION SYSTEM AND METHOD

• US 20100031043A1
• Filed: 10/13/2009
• Published: 02/04/2010
• Est. Priority Date: 09/28/1999
• Status: Abandoned Application

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Chameleon Network Incorporated
• Inventors: Cohen, Robert M., Burger, Todd O.
• Application Number:
  US12/578,123
• Publication Number:
  US 20100031043A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06K 19/06206 the magnetic marking being emulated
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06K 19/07703 the interface being visual
• CPC Class Codes: G06K 19/07749 the record carrier being capable of non-contact communication, e.g. constructional details of the antenna of a non-contact smart card
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: G06Q 30/0239 Online discounts or incentives
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G09G 2300/0473 Use of light emitting or modulating elements having two or more stable states when no power is applied
• CPC Class Codes: G09G 2380/04 Electronic labels
• CPC Class Codes: G09G 3/34 by control of light from an independent source

Abstract

A method is disclosed for enabling a user interface on a computer operated by a user to cause memory content of an electronic device distinct from the computer to be modified. A communication link may be established between the user interface and the electronic device by establishing a first connection between the user interface and a server distinct from each of the computer and the electronic device, and establishing a second connection between the electronic device and the server. The user interface may be used to communicate with the server via the first connection so as to cause the server to communicate with the electronic device via the second connection and thereby cause new information to be added to the memory of the electronic device via the second connection.

Claims

1. A method for enabling a user interface on a computer operated by a user to cause memory content of an electronic device distinct from the computer to be modified, comprising steps of:

(A) establishing a communication link between the user interface and the electronic device by establishing a first connection between the user interface and a server distinct from each of the computer and the electronic device, and establishing a second connection, which is secure, between the electronic device and the server, the communication link being established such that all substantive communications between the user interface and the electronic device pass through the server;

(B) with the electronic device, authenticating an identity of the user to determine that the user is permitted to modify the memory content of the electronic device;

(C) if the identity of the user has been authenticated with the electronic device, then enabling the user interface to cause the server to communicate with the electronic device via the second connection and thereby cause the memory content of the electronic device to be modified;

(D) if the user interface has been enabled to cause the server to communicate with the electronic device via the second connection and thereby cause the memory content of the electronic device to be modified, then, at a time when the first and second connections exist concurrently, in response to commands input to the computer by the user, using the user interface to communicate with the server via the first connection so as to cause the server to communicate with the electronic device via the second connection and thereby cause new information to be added to the memory of the electronic device via the second connection;

(E) after performing the step (D), de-establishing the second connection; and

(F) after performing the step (E), accessing the new information stored in the memory of the electronic device and using the new information to perform at least one operation.

2. The method of claim 1, wherein the step (B) comprises comparing, with the electronic device, a measured bio-metric parameter of the user with a stored bio-metric parameter of the user.

3. The method of claim 1, further comprising a step of:

if the identity of the user has been authenticated with the electronic device, then enabling the user interface to access restricted information on the server relating to the memory content of the electronic device.

4. The method of claim 1, wherein the step of establishing the second connection between the electronic device and the server includes establishing the second connection via a software module included in the computer.

5. The method of claim 1, wherein the step (B) comprises issuing a communication from the electronic device to the server via the second connection, which communication indicates that the electronic device has authenticated the identity of the user.

6. The method of claim 1, further comprising a step of:

after performing the step (D), deleting data from the computer so that the computer no longer stores any of the new information that was transferred between the server and the electronic device via the second connection.

7. A method for enabling a user interface on a computer to cause memory content of an electronic device distinct from the computer to be modified, comprising steps of:

(A) establishing a communication link between the user interface and a server distinct from each of the electronic device and the computer by establishing a first connection between the user interface and the server, and establishing a second connection, which is secure, between the electronic device and the server via a software module included in the computer that tunnels packets through the computer, the communication link being established such that all substantive communications between the user interface and the electronic device pass through the server;

(B) after performing the step (A) and at a time when the first and second connections exist concurrently, issuing commands from the user interface to the server via the first connection that cause the server to communicate with the electronic device via the second connection so as to cause new information to be added to a memory of the electronic device;

(C) after performing the step (B), de-establishing the second connection; and

(D) after performing the step (C), accessing the new information stored in the memory of the electronic device and using the new information to perform at least one operation.

8. The method of claim 7, wherein the user interface comprises a Web browser and the server comprises a Web server.

9. The method of claim 7, further comprising a step of loading the software module from the server onto the computer if the software module is not already included in the computer.

10. The method of claim 7, wherein the step (A) comprises encrypting communications between the electronic device and the server via the second connection.

11. The method of claim 7, wherein the step (A) comprises employing asymmetric key encryption to encrypt communications between the electronic device and the server via the second connection.

12. The method of claim 7, further comprising a step of:

after performing the step (B), deleting data from the computer so that the computer does not retain any of the new information that was transferred between the server and the electronic device via the second connection.

13. A system, comprising:

a server;

a computer, distinct from the server, comprising a user interface configured to be operable by a user;

an electronic device distinct from each of the server and the computer, the electronic device including a user-authenticator to authenticate an identity of the user to determine that the user is permitted to modify memory content of the electronic device;

a communication link between the user interface and the electronic device comprising a first connection between the user interface and the server and a second connection, which is secure, between the electronic device and the server, the communication link being established such that all substantive communications between the user interface and the electronic device pass through the server; and

at least one software module executable in the system, the at least one software module being configured such that the user can input commands to the user interface that cause instructions to be communicated from the user interface to the server via the first connection, and further configured such that, at a time when the first and second connections exist concurrently, if the electronic device has authenticated the identity of the user, the instructions cause the server to communicate new information to a memory of the electronic device via the second connection;

wherein the electronic device is configured to access the new information stored in the memory to perform at least one operation after the second connection has been de-established.

14. The system of claim 13, wherein the user authenticator is configured to compare a measured bio-metric parameter of the user with a stored bio-metric parameter of the user.

15. The system of claim 13, wherein the at least one software module is further configured such that, if the electronic device has authenticated the identity of the user, the user is permitted to operate the user interface to access restricted information on the server relating to the memory content of the electronic device.

16. The system of claim 13, wherein the second connection is established via a software module included in the computer.

17. The system of claim 13, wherein the second connection is established such that communications between the electronic device and the server are encrypted.

18. The system of claim 16, wherein the software module is configured to delete data from the computer so that the computer does not retain any of the new information that was transferred from the server to the electronic device via the second connection.