METHOD AND APPARATUS FOR TRUST BASED DATA SCANNING, CAPTURE, AND TRANSFER

• US 20130121490A1
• Filed: 11/14/2012
• Published: 05/16/2013
• Est. Priority Date: 11/15/2011
• Status: Abandoned Application

• Current Assignee: Document Capture Technologies, Inc.
• Original Assignee: Document Capture Technologies, Inc.
• Inventors: Boliek, Martin, Clark, David
• Application Number:
  US13/676,580
• Publication Number:
  US 20130121490A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

A method and apparatus for enabling trust based data scanning and capture is described. The method may include capturing data with a data capture device. The method may also include encrypting the data with a first encryption key, encrypting the first encryption key with a second encryption key to generate a first encrypted key data, and encrypting the first encrypted key data with a third encryption key to generate a second encrypted key data. The method may also include transmitting the encrypted data and the second encrypted key data to a remote service provider over a network.

Claims

1. A method, comprising:

capturing data with a data capture device;

encrypting the data with a first encryption key;

encrypting the first encryption key with a second encryption key to generate a first encrypted key data;

encrypting the first encrypted key data with a third encryption key to generate a second encrypted key data; and

transmitting the encrypted data and the second encrypted key data to a remote service provider over a network.

2. The method of claim 1, wherein the first encryption key is a symmetric encryption key, the second encryption key is a private encryption key of the data capture device, and the third encryption key is a public encryption key of the remote service provider.

3. The method of claim 1, wherein the first encryption key is a symmetric encryption key, the second encryption key is a public encryption key of the remote service provider, and the third encryption key is a private encryption key of the data capture device.

4. The method of claim 1, further comprising:

adding an identifier corresponding to the remote service provider to the first encrypted key data.

5. The method of claim 4, further comprising:

adding a hash value computed from the data to the first encrypted key data.

6. The method of claim 4, further comprising:

adding a device identifier corresponding to the data capture device to the second encrypted key data.

7. The method of claim 1, wherein the data capture device is one of an image scanner, barcode scanner, radio frequency identifier scanner, or a magnetic card reader.

8. The method of claim 1, wherein the data capture device is a magnetic card reader to capture financial account data from a magnetic strip on a card, and the remote service provider is a financial service provider to processes a financial services transaction based at least on in part on the financial account data.

9. The method of claim 8, wherein the financial services transaction withdraws a monetary value from a financial account associated with the financial account data captured from the card.

10. The method of claim 8, wherein the financial services transaction deposits a monetary value associated with the financial account data on the card.

11. The method of claim 8, wherein the financial services transaction deposits a monetary value associated with the financial account data into an financial account associated with the card.

12. The method of claim 8, wherein the financial account data is encrypted with the first encryption key to form the encrypted data, and the encrypted data is transmitted to the remote service provider via an intermediate computing device to which the data capture device is coupled.

13. The method of claim 1, wherein the data capture device is an image scanner to capture image data of a real estate transaction document, and the remote service provider is a financial service provider to processes a real estate transaction based at least on in part on information in the real estate transaction document.

14. A non-transitory computer readable storage medium including instructions that, when executed by a processor, cause the processor to perform a method comprising:

capturing data with a data capture device;

encrypting the data with a first encryption key;

encrypting the first encryption key with a second encryption key to generate a first encrypted key data;

encrypting the first encrypted key data with a third encryption key to generate a second encrypted key data; and

transmitting the encrypted data and the second encrypted key data to a remote service provider over a network.

15. An apparatus, comprising:

a data capture device to capture data;

an encryption engine coupled with the data capture device to encrypt the data with a first encryption key,

encrypt the first encryption key with a second encryption key to generate a first encrypted key data, and

encrypt the first encrypted key data with a third encryption key to generate a second encrypted key data; and

a communications interface coupled with the encryption engine to transmit the encrypted data and the second encrypted key data to a remote service provider over a network.

16. A method, comprising:

capturing data with a data capture device;

encrypting the data with first encryption key;

encrypting the encrypted data with a second encryption key; and

transmitting the data encrypted with the second encryption key to a remote service provider over a network.

17. The method of claim 16, wherein the first encryption key is a private encryption key of the data capture device, and the second encryption key is a public encryption key of the remote service provider.

18. The method of claim 17, further comprising:

adding a device identifier to the data encrypted with the private encryption key of the data capture device prior to the encryption with the public encryption key of the remote service provider.

19. The method of claim 16, wherein the first encryption key is a public encryption key of the remote service provider, and the second encryption key is a private encryption key of the data capture device.

20. The method of claim 19, further comprising:

adding a device identifier to the data encrypted with the private encryption key of the data capture device after the encryption with the private encryption key of the data capture device.

21. The method of claim 16, wherein the data capture device is a magnetic card reader to capture financial account data from a magnetic strip on a card, and the remote service provider is a financial service provider to processes a financial services transaction based at least on in part on the financial account data.

22. The method of claim 21, wherein the financial services transaction withdraws a monetary value from a financial account associated with the financial account data captured from the card.

23. The method of claim 21, wherein the financial services transaction deposits a monetary value associated with the financial account data on the card.

24. The method of claim 21, wherein the financial services transaction deposits a monetary value associated with the financial account data into an financial account associated with the card.

25. The method of claim 16, wherein the data capture device is an image scanner to capture image data of a real estate transaction document, and the remote service provider is a financial service provider to processes a real estate transaction based at least on in part on information in the real estate transaction document.

26. A non-transitory computer readable storage medium including instructions that, when executed by a processor, cause the processor to perform a method comprising:

capturing data with a data capture device;

encrypting the data with first encryption key;

encrypting the encrypted data with a second encryption key; and

transmitting the data encrypted with the second encryption key to a remote service provider over a network.

27. An apparatus, comprising:

a data capture device to capture data;

an encryption engine coupled with the data capture device to encrypt the data with first encryption key;

encrypt the encrypted data with a second encryption key; and

a communications interface coupled with the encryption engine to transmit the data encrypted with the second encryption key to a remote service provider over a network.

28. A method, comprising:

receiving data encrypted by a data capture device at a remote service provider, wherein the received encrypted data includes encrypted key data and an encrypted form of data captured by the data capture device;

decrypting the encrypted key data with a first decryption key to obtain a second encrypted key data;

decrypting the second encrypted key data with a second decryption key to obtain a symmetric decryption key;

decrypting the encrypted form of data captured by the data capture device with the symmetric decryption key; and

processing the data captured by the data capture device.

29. The method of claim 28, wherein the first decryption key is a private decryption key of the remote service provider, and the second decryption key is a public decryption key associated with the data capture device.

30. The method of claim 28, wherein the first decryption key is a public decryption key associated with the data capture device, and the second decryption key is a private decryption key of the remote service provider.

31. A method, comprising:

receiving data encrypted by a data capture device at a remote service provider, wherein the received encrypted data includes an encrypted form of data captured by the data capture device;

decrypting the encrypted form of data captured by the data capture device with a first decryption key to obtain a second encrypted form of data captured by the data capture device;

decrypting the second encrypted form of data captured by the data capture device with a second decryption key to obtain the data captured by the data capture device; and

processing the data captured by the data capture device.

32. The method of claim 31, wherein the first decryption key is a private decryption key of the remote service provider, and the second decryption key is a public decryption key associated with the data capture device.

33. The method of claim 31, wherein the first decryption key is a public decryption key associated with the data capture device, and the second decryption key is a private decryption key of the remote service provider.