Anonymous credit card transactions

• US 5,420,926 A
• Filed: 01/05/1994
• Issued: 05/30/1995
• Est. Priority Date: 01/05/1994
• Status: Expired due to Term

• Current Assignee: Citicorp Holdings Incorporated (Citigroup Incorporated)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Paul, Sanjoy, Low, Steven H., Maxemchuk, Nicholas F.
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US08/177,836
• Time in Patent Office: 510 Days
• Field of Search: 380/23, 380/24, 380/25, 380/30, 380/48, 380/49, 380/50
• US Class Current: 705/74
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

Techniques for performing credit-card transactions without disclosing the subject matter of the transaction to the institution providing the credit card. The techniques include the use of a communications exchange so that information and funds may be transferred without the destination for the transfer knowing the source of the information or funds and the use of public key encryption so that each party to the transaction and the communications exchange can read only the information the party or the exchange needs for its role in the transaction. Also disclosed are techniques for authenticating a card holder by receiving personal information from the card holder, using the information to ask the card holder one or more questions, and using the answers to authenticate the card holder.

Claims

1. A method of making a non-cash transaction involving a first party, a second party, and a third party which approves the transaction for the second party, the method comprising the steps of:

receiving a first message in the third party which describes the transaction, the first message containing first information about the transaction which is interpretable by the third party and which identifies the first party and a transaction amount but does not identify the second party or the subject matter of the transaction and second information about the transaction, the second information not being interpretable by the third party, containing no identification of the first party or the third party, and including third information identifying the second party;

in the third party, responding to the first message by determining whether the transaction is to be approved;

in the third party, sending a second message to a communications exchange, the second message indicating whether the transaction has been approved and including the second information and the communications exchange being able to read only the third information;

in the communications exchange, responding to the third information by sending a third message indicating whether the transaction has been approved to the second party; and

in the second party, responding to the third message by dealing with the transaction with the first party as indicated by the third message.

2. The method set forth in claim 1 wherein:

the second information further includes fourth information about the transaction which is interpretable by the second party but not by the communications exchange; and

the step of responding to the third message includes the step of responding to the fourth information.

3. The method set forth in claim 1 further comprising the steps of:

receiving a fourth message which includes the first message and fifth information identifying the third party which is interpretable by the communications exchange; and

in the communications exchange, responding to the fifth information by sending the first message to the third party.

4. The method set forth in any of claims 1, 2, or 3 further comprising the steps of:

encrypting the first information so that the first information is interpretable only by the third party;

encrypting the third information so that the third information is interpretable only by the communications exchange; and

encrypting the second information other than the third information so that that information is interpretable only by the second party.

5. The method set forth in claim 1 wherein:

the first party is identified to the third party by a pseudonym; and

the method further includes the steps of;

in a fourth party which knows the first party by an identifier other than the pseudonym, receiving a fifth message which includes sixth information identifying the pseudonym and the third party, the information identifying the pseudonym being interpretable by the third party but not the fourth party or the communications exchange and the information identifying the third party being interpretable by the communications exchange but not the fourth party;

in the fourth party, sending a sixth message to the communications exchange which includes the sixth information and a credit amount which the third party is to credit to the first party;

in the communications exchange, responding to the information identifying the third party by sending a seventh message to the third party which includes the information identifying the pseudonym and the amount;

and wherein

the step of responding to the first message includes the step of determining from the credit amount and the transaction amount whether the transaction is to be approved.

6. The method set forth in claim 5 further including the steps of:

in the third party, receiving an eighth message which includes seventh information identifying the first party and the fourth party, the information identifying the first party being interpretable by the fourth party but not the third party or the communications exchange and the information identifying the fourth party being interpretable by the communications exchange but not the third party;

in the third party, sending a ninth message to the communications exchange which includes the seventh information and the transaction amount for at least one transaction;

in the communications exchange, responding to the information identifying the fourth party by sending a tenth message to the fourth party which includes the information identifying the first party and the transaction amount; and

in the fourth party, responding to the tenth message by debiting the first party for the transaction amount.

7. The method set forth in claim 1 wherein:

the communications exchange further transfers funds between the second party and the third party;

the third information further includes the transaction amount; and

the method includes the step performed in the communications exchange of;

additionally responding to the third information by transferring an amount based on the transaction amount from the second party to the third party.

8. The method set forth in claim 7 wherein:

the step of sending a third message includes the step of including the amount based on the transaction amount in the third message, the amount based on the transaction amount being interpretable by the second party.

9. The method set forth in claim 1 further comprising the step of:

receiving personal information in the third party from the first party;

and wherein

the second information includes eighth information by means of which the communications exchange can send a message to the first party and

the step of determining whether the transaction is to be approved includes the steps of

sending an eleventh message to the communications exchange which includes the eighth information and a question based on the personal information, the question being interpretable only by the first party,

in the communications exchange, sending a twelfth message to the first party which contains the question,

in the communications exchange, receiving a thirteenth message from the first party which contains an answer to the question which is interpretable only by the third party;

in the communications exchange, responding to the fifth information by sending a fourteenth message to the first party which contains the answer; and

in the first party, comparing the answer with the personal information and using the result of the comparison in determining whether the transaction is to be approved.

10. The method set forth in claim 9 and further including the step performed in the third party of:

determining whether the eleventh message is to be sent on the basis of the transaction amount.

11. The method set forth in claim 10 wherein:

the step of determining whether the eleventh message is to be sent includes the step of determining whether more than one eleventh message is to be sent.

12. A method wherein a first party and a second party make a non-cash transaction which is approved for the second party by a third party, the method comprising the steps of:

receiving a first message in the third party which describes the transaction, the first message containing first information about the transaction which is interpretable by the third party and which identifies the first party and a transaction amount but does not identify the second party or the subject matter of the transaction and second information about the transaction, the second information not being interpretable by the third party, containing no identification of the first party or the third party, and including third information identifying the second party;

in the third party, responding to the first message by determining whether the transaction is to be approved;

in the third party, sending a second message to a communications exchange, the second message indicating whether the transaction has been approved and including the second information and the communications exchange being able to read only the third information and the communications exchange being operative to respond to the third information by sending a third message indicating whether the transaction has been approved to the second party, whereby the second party may deal with the transaction with the first party as indicated by the third message.

13. The method set forth in claim 12 further comprising the steps of:

receiving a fourth message which includes the first message and fifth information identifying the third party which is interpretable by the communications exchange; and

the communications exchange is further operative to respond to the fifth information by sending the first message to the third party.

14. The method set forth in any of claims 12 or 13 further comprising the steps of:

encrypting the first information so that the first information is interpretable only by the third party;

encrypting the third information so that the third information is interpretable only by the communications exchange; and

encrypting the second information other than the third information so that that information is interpretable only by the second party.

15. A method of making a transaction between a first party and a second party in which a third party vouches for the first party to the second party, the method comprising the steps of:

receiving a first message in the third party which contains first information and second information, the first information being interpretable by the third party and containing information needed by the third party to vouch for the first party but no identification of the second party and the second information not being interpretable by the third party, containing no identification of the first party or the third party, and including third information identifying the second party;

in the third party, responding to the first message by determining whether to vouch for the first party;

in the third party, sending a second message to a communications exchange, the second message indicating whether the third party is vouching for the first party and including the second information, the communications exchange being able to read only the third information;

in the communications exchange, responding to the third information by sending a third message indicating whether the third party is vouching for the first party; and

in the second party, responding to the third message by dealing with the transaction with the first party as indicated by the third message.

16. A method wherein a third party vouches for a transaction between a first party and a second party, the method comprising the steps of:

receiving a first message in the third party which contains first information and second information, the first information being interpretable by the third party and containing information needed by the third party to vouch for the first party but no identification of the second party and the second information not being interpretable by the third party, containing no identification of the first party or the third party, and including third information identifying the second party;

in the third party, responding to the first message by determining whether to vouch for the first party;

in the third party, sending a second message to a communications exchange, the second message indicating whether the third party is vouching for the first party and including the second information, the communications exchange being able to read only the third information and the communications exchange being operative to respond to the third information by sending a third message indicating whether the third party is vouching for the first party to the second party, whereby the second party may deal with the transaction with the first party as indicated by the third message.

17. A method of automatically authenticating a first party to a second party comprising the steps of:

in the second party, responding to a request which apparently comes from the first party by

sending an encrypted question which is readable only by the first party to the first party, the encrypted question having been previously provided by the first party together with a similarly-encrypted answer thereto;

in the first party, responding to the encrypted question by

decrypting the question,

making an answer to the question,

encrypting the answer so that the answer is interpretable only by the first party, and

sending the encrypted answer to the second party; and

in the second party, responding to the encrypted answer by

comparing the encrypted answer with the previously-provided encrypted answer, and

if the comparison so indicates, treating the request as coming from the first party.

18. The method set forth in claim 17 further comprising the step of:

in the second party, asking questions of the first party to obtain the personal information.

19. The method set forth in claim 17 wherein:

in the second party, the step of responding to the request further includes the steps of;

determining a number of questions to send from the request'"'"'s content; and

repeating the step of sending an encrypted question and the remaining steps as required for the number of questions.