System for transaction over communication network

• US 6,078,902 A
• Filed: 04/14/1998
• Issued: 06/20/2000
• Est. Priority Date: 04/15/1997
• Status: Expired due to Fees

• Current Assignee: Nush-Marketing Management & Consultance
• Original Assignee: Nush-Marketing Management & Consultance
• Inventors: Schenkler, Leon
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): TESFAMARIAM, MUSSIE
• Application Number:
  US09/059,180
• Time in Patent Office: 798 Days
• Field of Search: 235/380, 235/487, 235/488, 235/386, 380/24, 380/30, 380/25, 705/12, 705/44, 705/41, 705/39, 705/10, 705/26, 705/27, 705/28
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02

Abstract

A method for conducting transaction between first user and a remote second user interlinked through a communication network, by utilizing also a clearing office interlinked to the network. The clearing office storing the user privileged information. The method including the steps of the user and the clearing office establishing a cryptographic secured session, the user transmitting, via the session, a user privileged information and transaction specific data, the transaction specific data being indicative of a transaction identification data. The clearing office activating transaction validity checking procedure by utilizing a user privileged information and the transaction specific data. In response to affirmative result of the transaction validity checking, the clearing office producing a transaction validity indication being indicative of the transaction identification code. The clearing office and the user establishing a communication session and the clearing office transmitting, via the session, the transaction validity indication.

Claims

1. A method for conducting transaction between first user and a remote second user interlinked through a communication network by utilizing also a clearing office interlinked to said network:

the clearing office storing at least user privileged information;

the method comprising;

(a) the user and the clearing office establishing a cryptographic secured session, the user transmitting, via said session, at least user privileged information and transaction specific data;

(b) the clearing office activating transaction validity checking procedure by utilizing at least said user privileged information or portion thereof and said transaction specific data or portion thereof;

(c) in response to affirmative result of said transaction validity checking, the clearing office producing at least a transaction validity indication that is not being indicative of said first user privileged information;

the clearing office and said first user establishing a communication session and the clearing office transmitting, via said session, at least said transaction validity indication;

(d) the first user receiving, via said session, the transaction validity indication;

the first user and the second user establishing a communication session and the first user transmitting, via said session, at least said transaction validity indication;

(e) the second user and the clearing office establishing cryptographic secured session and the second user transmitting, via said session, at least said transaction validity indication;

(f) the clearing office applying a second checking procedure, and in case of affirmative result sending at least an acknowledgement to the second user,

whereby the first user privileged information is not accessible to the second user.

2. The method according to claim 1, wherein step (a) is preceded by the step of the first user establishing a communication session with said second user for acquiring, via said session said transaction specific data.

3. The method according to claim 1, wherein said transaction being a commercial transaction.

4. The method according to claim 1, wherein said transaction conducted between said first user and said second user being that the first user purchasing at least one product from the second user.

5. The method according to claim 1, wherein said first user is associated with at least one electronic wallet and said user privileged information being indicative of at least respective electronic wallet identification code for each wallet;

said transaction specific data includes the cost of said at least one product.

6. The method according to claim 1, wherein said first user is associated with at least one credit card and said user privileged information being indicative of at least respective credit card number for each credit card;

said transaction specific data being indicative of the cost of said at least one product.

7. The method according to claim 1, wherein said transaction being a non-commercial transaction.

8. The method according to claim 7, wherein first user stands for a voter and said second user stands for election center, and wherein said transaction being that the voter votes for a given party or candidate;

said user privileged information being indicative of the voter identification number.

9. The method according to claim 1, wherein said communication network includes the Internet.

10. The method according to claim 9, wherein said cryptographic secured session is established by utilizing an SSL protocol.

11. The method according to claim 9, further comprising a preliminary step of:

storing user private data accessible to the clearing office, which user private data is utilized by the clearing office for admittance control of the first user.

12. The method according to claim 11, wherein said storing is effected by means of a cookie utility.

13. A system for conducting a transaction over a communication network, comprising:

a clearing office system, first user system and a second user system all interlinked by means of said communication network;

the user system and the clearing office system being operative to establish a cryptographic secured session, the user transmitting, via said session, at least user privileged information, and transaction specific data;

the clearing office system being operative to activate transaction validity checking procedure by utilizing at least said user privileged information or portion thereof, and said transaction specific data or portion thereof;

in response to affirmative result of said transaction validity checking, the clearing office system being operative to produce at least a transaction validity indication that is not being indicative of said first user privileged information;

the clearing office system and said first user system being operative to establish a communication session and the clearing office system being operative to transmit, via said session, at least said transaction validity indication;

the first user system being operative to receive, via said session, the transaction validity indication;

the first user system and the second user system being operative to establish a communication session and the first user system being operative to transmit, via said session, at least said transaction validity indication;

the second user system and the clearing office system being operative to establish cryptographic secured session and the second user system being operative to transmit, via said session, at least said transaction validity indication;

the clearing office being operative to apply a second checking procedure, and in the case of affirmative result, sending at least an acknowledgement to the second user system,

whereby the first user privileged information is not accessible to the second user system.

14. The system according to claim 13, wherein said transaction being a commercial transaction.

15. The system according to claim 13, wherein said transaction conducted between said first user system and said second user system being that the first user system purchasing at least one product from the second user system.

18. The system according to claim 13, wherein said transaction being a non-commercial transaction.

19. The system according to claim 18, wherein first user system stands for a voter and said second user system stands for election center, and wherein said transaction being that the voter votes for a given party or candidate;

said user privileged information being indicative of the voter identification number.

20. The system according to claim 13, wherein said communication network includes the Internet.

21. The system according to claim 20, wherein said cryptographic secured session is established by utilizing an SSL protocol.

22. The system according to claim 13, wherein said user privileged information is stored in removable smart card.

16. A system for conducting transaction over communication network, comprising:

a clearing office system, first user system and a second user system all interlinked by means of said communication network;

said first user system and said clearing office system being capable of establishing cryptographic secured session, the user transmitting, via said session, at least user privileged information and transaction specific data, the transaction specific data being indicative of at least transaction identification data;

said clearing office system being capable of activating transaction validity checking Procedure by utilizing at least (i) said user privileged information or portion thereof; and

(ii) said transaction specific data or portion thereof;

in response to affirmative result of said transaction validity checking, the clearing office system being capable of producing at least a transaction validity indication which is indicative of at least said transaction identification code and not of said first user privileged information;

the clearing office and said second user being capable of establishing a communication session and the clearing office transmitting, via said session, at least said transaction validity indication, whereby the first user privileged information is not accessible to the second user system,

wherein said first user system is associated with at least one electronic wallet and said user privileged information is indicative of at least respective electronic wallet identification code for each wallet; and

said transaction specific data includes the cost of at least one product.

17. A system for conducting transaction over communication network, comprising:

a clearing office system, first user system and a second user system all interlinked by means of said communication network;

said first user system and said clearing office system being capable of establishing cryptographic secured session, the user transmitting, via said session, at least user privileged information and transaction specific data, the transaction specific data being indicative of at least transaction identification data;

said clearing office system being capable of activating transaction validity checking procedure by utilizing at least (i) said user privileged information or portion thereof; and

(ii) said transaction specific data or portion thereof;

in response to affirmative result of said transaction validity checking, the clearing office system being capable of producing at least a transaction validity indication which is indicative of at least said transaction identification code and not of said first user privileged information;

the clearing office and said second user being capable of establishing a communication session and the clearing office transmitting, via said session, at least said transaction validity indication, whereby the first user privileged information is not accessible to the second user system,

wherein said first user system is associated with at least one credit card and said user privileged information is indicative of at least respective credit card number for each credit card;

said transaction specific data being indicative of the cost of at least one product.