Electronic transaction systems and methods therefor

• US 6,282,656 B1
• Filed: 04/27/1998
• Issued: 08/28/2001
• Est. Priority Date: 12/04/1996
• Status: Expired due to Term

• Current Assignee: ServStor Technologies, LLC (IP Investments Group LLC)
• Original Assignee: Esignx Corporation
• Inventors: Wang, Ynjiun Paul
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/067,176
• Time in Patent Office: 1,219 Days
• Field of Search: 713/182, 713/187, 713/200, 713/201, 713/202
• US Class Current: 726/4
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method for completing a transaction request pertaining to an electronic transaction conducted over an electronic network having a server and a requesting device. The method includes receiving from the server at the requesting device a transaction program, which includes an executable portion. The method also includes searching, employing the executable portion, for a transaction approval device associated with the requesting terminal. If the transaction approval device is detected, the method includes employing the transaction approval device to approve the transaction request. There is further included transmitting, using the requesting device, an approved transaction request to the server to complete the electronic transaction. The approved transaction request signifies an approval of the transaction request.

Claims

1. A method for completing a transaction request pertaining to an electronic transaction conducted over an electronic network having a server and a requesting device, comprising:

receiving from said server at said requesting device a transaction program, said transaction program including an executable portion;

searching, employing said executable portion, for a transaction approval device associated with said requesting terminal;

if said transaction approval device is detected, employing said transaction approval device to approve said transaction request;

transmitting, using said requesting device, an approved transaction request to said server to complete said electronic transaction, said approved transaction request signifying an approval of said transaction request.

2. The method of claim 1 wherein said transaction approval device represents a portable electronic approval device (PEAD).

3. The method of claim 2 wherein said employing said transaction approval device to approve said transaction request includes encrypting approval data within said PEAD and transmitting said approval data to said requesting device to approve said transaction request.

4. The method of claim 3 wherein said encrypting said approval data is performed using a public key cryptography technique.

5. The method of claim 3 wherein said encrypting said approval data includes encrypting said approval data using a user'"'"'s private key, said user'"'"'s private key being kept within said PEAD thereby eliminating a need to exchange said user'"'"'s private key between said PEAD and said requesting device for approving said transaction request.

6. The method of claim 3 further comprising:

authenticating a user prior to permitting said user to approve said transaction request using said PEAD, said authenticating requires one of a pass word, a voice print, and a finger print at a user authentication mechanism associated with said PEAD.

7. The method of claim 1 wherein said executable portion further includes codes for authenticating a user by obtaining identification data pertaining said user.

8. The method of claim 7 wherein said identification data including one of a signature and a unique biometrics feature pertaining to said user.

9. The method of claim 8 wherein said unique biometrics feature represents a facial image of said user.

10. The method of claim 8 wherein said unique biometrics feature represents a finger print.

11. A method for completing a transaction request pertaining to an electronic transaction conducted over an electronic network having a server and a requesting device, comprising:

receiving from said server at said requesting device a transaction program, said transaction program including an executable portion;

receiving from a user at said requesting device transaction approval data, wherein said executable portion of said transaction program includes a first set of codes configured to encrypt said transaction approval data;

encrypting said transaction approval data using said first set of codes;

transmitting, using transaction program, said encrypted transaction approval data to said server to complete said electronic transaction.

12. The method of claim 11 wherein said executable portion is transmitted to said requesting device only if a prior version of said executable portion needs updating to facilitate a completion of said electronic transaction.

13. The method of claim 11 wherein said executable portion is transmitted to said requesting device from said server with every transaction request.

14. The method of claim 11 wherein said executable portion further includes codes for authenticating a user by obtaining identification data pertaining said user.

15. The method of claim 14 wherein said identification data including one of a signature and a unique biometrics feature pertaining to said user.

16. The method of claim 15 wherein said unique biometrics feature represents a facial image of said user.

17. The method of claim 15 wherein said unique biometrics feature represents a finger print.

18. The method of claim 11 wherein said encrypting said transaction approval data is performed using a public key cryptography technique.

19. A method for completing a transaction request pertaining to an electronic transaction conducted over an electronic network having a server and a requesting device, comprising:

receiving from said server at said requesting device a transaction program, said transaction program including an executable portion;

searching, employing said executable portion, for a transaction approval device associated with said requesting terminal;

if said transaction approval device is detected, employing said transaction approval device to approve said transaction request;

if said transaction approval device is not detected, employing an input device associated with said requesting device to approve said transaction request;

transmitting, using said requesting device, an approved transaction request to said server to complete said electronic transaction, said approved transaction request signifying an approval of said transaction request by a user via at least one of said transaction approval device and said input device.

20. The method of claim 19 wherein said transaction approval device represents a portable electronic approval device (PEAD).

21. The method of claim 20 wherein said employing said transaction approval device to approve said transaction request includes encrypting approval data within said PEAD and transmitting said approval data to said requesting device to approve said transaction request.

22. The method of claim 21 wherein said encrypting said approval data is performed using a public key cryptography technique.

23. The method of claim 21 wherein said encrypting said approval data includes encrypting said approval data using a user'"'"'s private key, said user'"'"'s private key being kept within said PEAD thereby eliminating a need to exchange said user'"'"'s private key between said PEAD and said requesting device for approving said transaction request.

24. The method of claim 19 wherein said executable portion further includes codes for authenticating a user by obtaining identification data pertaining said user.

25. The method of claim 24 wherein said identification data including one of a signature and a unique biometrics feature pertaining to said user.

26. The method of claim 25 wherein said unique biometrics feature represents a facial image of said user.

27. The method of claim 25 wherein said unique biometrics feature represents a finger print.

28. The method of claim 19 wherein said approved transaction request is encrypted by said requesting device prior to being transmitted to said server if said input device is employed in the absence of said transaction approval device.

29. The method of claim 19 wherein said transaction approval device is a credit card reader.

30. The method of claim 19 wherein said transaction approval device is a smart card reader.

31. The method of claim 19 wherein said executable portion is transmitted to said requesting device only if a prior version of said executable portion needs updating to facilitate a completion of said electronic transaction.

32. The method of claim 19 wherein said executable portion is transmitted to said requesting device from said server with every transaction request.