METHOD AND SYSTEM OF CONDUCTING A COMMUNICATION

• US 20100274634A1
• Filed: 12/19/2008
• Published: 10/28/2010
• Est. Priority Date: 12/20/2007
• Status: Abandoned Application

• Current Assignee: Meyer Ifrah
• Original Assignee: Meyer Ifrah
• Inventors: Ifrah, Meyer
• Application Number:
  US12/809,249
• Publication Number:
  US 20100274634A1
• Time in Patent Office: Days
• US Class Current: 705/10
• CPC Class Codes: G06Q 10/063 Operations research, analysis or management
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method of conducting a communication over a communication network, the method comprising: —registering a user of a communication device as a member user MD of a securing entity VM, the securing entity VM authenticating personal data of the member user MD via a trusted third party entity TTP, —sorting the personal data of the member user according to categories comprising identifying data, non-identifying data and semi-identifying data, non-identifying data and semi-identifying data being correlated to identifying data by a sworn person of the trusted third party entity TTP, only at least one of non-identifying data and semi-identifying data being requestable by any client entity YMD, PAWS, PCWS, SOS during a communication and/or a transaction, —archiving identifying data in a trusted third party entity TTP, and —electronically storing at least a part of semi-identifying data in a trusted third party entity database TTPDB, and non-identifying data in a securing entity database VMDB.

Claims

1. A method of conducting a communication over a communication network, the method comprising:

registering a user of a communication device as a member user of a securing entity, the securing entity authenticating personal data of the member user via a trusted third party entity,

sorting the personal data of the member user according to categories comprising identifying data, non-identifying data and semi-identifying data, non-identifying data and semi-identifying data being correlated to identifying data by a sworn person of the trusted third party entity, only at least one of non-identifying data and semi-identifying data being requestable by any client entity during at least one of a communication and a transaction,

archiving identifying data in a trusted third party entity, and

electronically storing at least a part of semi-identifying data in a trusted third party entity database, and non-identifying data in a securing entity database.

2. The method of conducting a communication according to claim 1, further comprising:

responding to a request for at least one of non-identifying data and semi-identifying data made by the client entity to the securing entity wherein responding to the request is subject to an authorization given by the member user.

3. The method of conducting a communication according to claim 1, wherein a registration of the user of the communication device is a provisional registration of the user of the communication device before the securing entity and the trusted third party entity, the provisional registration comprising:

connecting the communication device of the user to a securing entity server by using a network browser, downloading and installing a securing entity member software on said communication device, the securing entity member software initiating a connection between the communication device and a server of the trusted third party entity, and inviting the user of the communication device to input an electronic transmission address of the user, the trusted third party server sending a control message to the user of the communication device, the content of the control message comprising a control code,

requesting the user to input the control code in an appropriate field of a trusted third party registration window, and to provide non-identifying data,

sending non-identifying data from the trusted third party server to the securing entity server, and storing the non-identifying data in a securing entity server database,

displaying a member identification and a member password in a securing entity registration window,

inviting the user of the communication device to input said member identification and member password in a securing entity connection window, and

registering the user as a member user should an input of the member identification and member password be successful.

4. The method of conducting a communication according to claim 3, wherein the registration of the user of the communication device is a first level registration of the member user of the communication device before the securing entity and the trusted third party entity, the first level registration comprising:

initiating the securing entity member software on the communication device of the member user,

inviting the member user to choose a mode of the first level registration should an input of the member identification and member password be successful, the mode of the first level registration being selected from the group consisting of a first registration mode and a second registration mode in a trusted third party registration window,

inviting the member user to send a copy of documents showing personal data by courier or postal mail delivery to a trusted third parties entity address should the first registration mode be chosen,

inviting the member user to send a message comprising an attached file containing scanned documents showing personal data to a trusted third parties server, should the second registration mode be chosen,

archiving the identifying data at trusted third parties entity,

sending non-identifying data from the trusted third party server to the securing entity server, and storing non-identifying data in the securing entity server database, and

registering the user as a first level member user.

5. The method of conducting a communication according to claim 3, wherein, upon registering the user of the communication device, the securing entity server delivers a securing entity public identifier which is a temporary identifier to the member user.

6. The method of conducting a communication according to claim 3, wherein the registration of the user of the communication device is a second level of registration of the member user of the communication device before the securing entity and the trusted third party entity, the second level registration comprising:

initiating the securing entity member software on the communication device of the member user,

inviting the user to input his personal user known third party identification code in a securing entity connection window (VMW) should an input of the member identification and member password be successful, the user known third party being selected from a group consisting of a bank entity, a financial entity and an insurance entity,

checking that a user known third party corresponding to the personal user known third party identification code is a partner entity of the securing entity,

inviting the member user to connect to a website of the partner user known third party entity and access to his account,

creating an association between the website of the partner user known third party entity and the securing entity by typing the user securing entity public identifier,

requesting the member user authorization to transmit non-identifying data from the partner user known third party entity to the securing entity server,

sending semi-identifying and non-identifying data from the partner user known third party entity to the trusted third party server via a packet server, and storing at least a part of the semi-identifying in the trusted third party server databases, and

sending non-identifying data from the trusted third party server to the securing entity server, and storing said non-identifying data in the securing entity server database.

7. The method of conducting a communication according to claim 3, wherein the registration of the user of the communication device is a third level of registration of the member user of the communication device before the securing entity and the trusted third party entity, the third level registration comprising:

initiating the securing entity member software on the communication device of the member user,

initiating a connection between the communication device of the member user and the trusted third party entity server, should an input of the member identification and member password be successful,

inviting the member user of the communication device to input semi-identifying and non-identifying personal data in an appropriate field of a trusted third party registration window,

inviting the member user of the communication device (MID) to visit the trusted third parties entity with genuine documents comprising identifying, semi-identifying and non-identifying personal data by indicating an address of the trusted third parties entity,

controlling a conformity of the personal data of the genuine documents with the input semi-identifying and non-identifying personal data, and correlating identifying data to semi-identifying data and non-identifying data, controlling conformity and correlating identifying data being performed by a sworn person of the trusted third parties entity,

archiving identifying data in the trusted third party entity, electronically storing semi-identifying data in the trusted third party entity database,

sending non-identifying data to the securing entity server, and electronically storing non-identifying data in the securing entity database, and

registering the member user as a third level member user.

8. The method of conducting a communication according to claim 7, wherein the registration of the user of the communication device further comprises:

collecting biometric data of the member user, and giving biometric tools to the member user, and

registering the member user as a fourth level member user.

9. The method of conducting a communication according to claim 3, wherein registering the user of the communication device further comprises:

inviting the user to transmit credit card information to the trusted third party server,

electronically storing the credit card information as semi-identifying data in the trusted third party entity database, and

transmitting the credit card information from the trusted third party server to a securing entity bank under the control and the agreement of the member user at the time of a transaction.

10. The method of conducting a communication according to claim 1, wherein the at least a part of semi-identifying data are stored in split databases of the trusted third party entity, the semi-identifying data being reconstituted dynamically when needed at the time of a transaction.

11. The method of conducting a communication according to claim 1, wherein at least another part of semi-identifying data are electronically stored in the securing entity database.

12. The method of conducting a communication according to claim 2, wherein the exchanges of data between a partner commercial entity or a partner bank entity and the securing entity server are handled via a packet server.

13. A method of conducting a communication according to claim 1 in a confidential and anonymous conference over a communication network, wherein the method comprises:

initiating at least a first and a second securing entity member software on a first and second communication device of a first and a second member user, respectively,

initiating a connection between the respective communication device of the respective member user and the securing entity server should an input of each member identification and member password be successful,

mutually authenticating each user with respect to the other by exchanging their respective public identifier, and

transferring messages between the member users through the securing entity server.

14. A method of conducting a communication according to claim 1 in an identity verification application over a communication network, wherein the method comprises:

initiating a first and a second securing entity member software on a first and second communication device of a first and a second member user, respectively,

initiating a connection between the respective communication device of the respective member user and the securing entity server should an input of each member identification and member password be successful,

sending a request from the first member user of the first communication device to the second member user of the second communication device, the request comprising an indication of the non-identifying personal data of the second member user that the first member user wishes to confirm,

sending a decision, the decision being selected from a group consisting of accepting totally the request, accepting partially the request and refusing the request, from the second member user of the second communication device to the securing entity server, and

transmitting the decision of the second member user together with the data he has accepted to transfer from the securing entity server to the first member user.

15. A method of conducting a communication according to claim 1 in a qualification verification application over a communication network, wherein the method comprises:

initiating a connection between the member user communication device and the securing entity server should an input of the member identification and member password be successful,

connecting the member user communication device to a website of a partner commercial entity offering adult restricted services and inviting the member user communication device to type his securing entity public identifier,

requesting a qualification of the member user personal data from the website of the partner commercial entity offering adult restricted services to the securing entity server via a packet server,

requesting authorization of the member user to transmit the non-identifying parts of his personal data related to his qualification from the securing entity server to the website of the partner commercial entity offering adult restricted services via the packet server,

transferring the qualification should a positive acceptance of the member user occur, and

informing the member user about the authorization to access to the service restricted to adults offered by the partner commercial entity.

16. A method of conducting a communication according to claim 1 in a payment application over a communication network, wherein the method comprises:

connecting the member user communication device to a website of a partner commercial website offering an online service upon payment of a transaction amount,

inviting the member user communication device to type his securing entity public identifier,

sending a first request asking for the authorization of the member user to pay through a securing entity payment service from the partner commercial website to the securing entity server via a packet server,

transmitting a second request asking for payment acceptation from the partner commercial website to the securing entity bank server via a payment packet server should a positive acceptance of the first authorization request by the member user via the securing entity server occur,

transmitting a third request asking for authorization to send credit card information of the member user from the trusted third party server to the securing entity bank server via the packet server should a positive acceptance of the second authorization request by the member user via the securing entity server occur,

dynamically reconstituting the credit card information of the member user by the trusted third party server based on data split in at least the trusted third party databases should a positive acceptance of the third authorization request by the member user via the securing entity server occur,

sending the credit card information from the trusted third party server to the securing entity bank via the packet server,

transmitting an acceptation of payment from the securing entity bank server to the partner commercial website,

transferring the transaction amount from the securing entity bank server to the bank of the partner commercial website, and

transferring the transaction amount from the member user'"'"'s bank server to the securing entity bank server.

17. A method of conducting a communication according to claim 1 in a survey application over a communication network, wherein the method comprises:

sending a request for a survey from a survey organization server to the securing entity server via a packet server, the request indicating member users'"'"' profiles and a number of member user, the member users'"'"' profile being only based on non-identifying personal data,

sending a feasibility confirmation from the securing entity server to the survey organization server,

creating and sending a questionnaire from the survey organization server to the securing entity server,

inviting selected communication device member users to participate to the survey, the invitation being initiated when a member user establishes a connection with the securing entity server,

submitting the questionnaire to the member user upon acceptation to participate to the survey by the member user, and repeating submission until a sample of member user in conformity with the request made by the partner survey organization is achieved, and

transmitting survey results from the securing entity server to the partner survey organization.

18. A method of conducting a communication according to claim 1 in a file or email transferring application over a communication network, wherein the method comprises:

initiating at least a first and a second securing entity member software on a first and second communication device of a first and a second member user, respectively,

initiating a connection between the respective communication device of the respective member user and the corresponding securing entity servers should an input of each member identification and member password be successful,

transferring file or email between the first communication device of the first member user and the second communication device of the second member user through the corresponding securing entity servers.

19. A system of conducting a communication over a communication network between a communication device of a member user, a trusted third party entity and a securing entity, the system being characterized in that:

the communication device of the member user comprises a member user software for accessing to services offered by the securing entity-server,

the trusted third party entity comprises a trusted third party server, at least one trusted third party database, the trusted third party entity server comprising a trusted third party software to administrate personal data belonging to the member user sorted according to categories comprising identifying data, non-identifying data and semi-identifying data, non-identifying data and semi-identifying data being correlated to identifying data by a sworn person of the trusted third party entity, only data selected from a group consisting of non-identifying data and semi-identifying data being requestable by any client entity during a communication, and to electronically store the semi-identifying data in the database, the identifying data being archived in the trusted third party entity and the semi-identifying data being electronically stored in the trusted third party entity database, and

the securing entity comprises a securing entity server and a securing entity database, the securing entity server comprising a securing entity module to register the user of the communication device as a member user of the communication device before the securing entity, to electronically store non-identifying data in the securing entity database, and to authenticate personal data belonging to the member user via the trusted third party entity, and to respond to a request for data selected from the group consisting of non-identifying data and semi-identifying data made by the client entity to the securing entity under an authorization given by the member user.

20. A system of conducting a communication according to claim 19, wherein the client entity is selected from a group consisting of a bank server, a commercial server, and other member user of a communication device.

21. A system of conducting a communication according to claim 20, wherein a server selected from a group consisting of a bank server and a commercial server is coupled to at least one of the securing entity server and the trusted third party server through a packet server, the server selected from the group consisting of the bank server and the commercial server comprising a first interface software for controlling connection and routing requests and messages between the server selected from the group consisting of the bank server and the commercial server and the at least one of the securing entity server and the trusted third party server through the packet server.

22. A system of conducting a communication according to claim 21, wherein the bank server is coupled to the commercial server through another packet server, at least one of the bank server and the commercial server comprising a second interface module for controlling connection and routing requests and messages between the bank server and the commercial server through the packet server.

23. A medium for storing processor control instructions, the processor control instructions for controlling a system of conducting a communication over a communication network, the instructions of the medium comprising:

receiving, from a securing entity, registration information of a user of a communication device, the registration information being for the user to become a member user, the registration information including personal data authenticated by the securing entity through the trusted third party entity, and

sorting the personal data of the member user according to categories comprising identifying data, non-identifying data and semi-identifying data, non-identifying data and semi-identifying data being correlated to identifying data by a sworn person of the trusted third party entity, only at least one of non-identifying data and semi-identifying data being requestable by any client entity during a least one of a transaction and a communication, identifying data being archived in an office of the trusted third party entity, and

electronically storing semi-identifying data in a trusted third party entity database, and non-identifying data in a securing entity database.

24. The medium for storing processor control instructions of claim 23, the instructions of the medium comprising:

responding to a request for at least one of non-identifying data and semi-identifying data made by the client entity to the securing entity, wherein responding to the request is subject to an authorization given by the member user.