Method and apparatus for the secure identification of the owner of a portable device

• US 6,957,185 B1
• Filed: 02/25/2000
• Issued: 10/18/2005
• Est. Priority Date: 02/25/1999
• Status: Expired due to Fees

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Enco-Tone, Ltd.
• Inventors: Labaton, Isaac J.
• Primary Examiner(s): Lerner, Martin
• Application Number:
  US09/913,815
• Time in Patent Office: 2,062 Days
• Field of Search: 704/200, 704/500, 704/501, 380/277, 380/279, 705/39, 705/53, 705/71, 705/75, 713/168, 713/175, 713/176, 713/179
• US Class Current: 704/500
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

Methods for the secure identification of the owner of a portable device by a service provider, wherein the portable device may be in communication with the service provider over a voice line such as a telephone line or the like, and the portable device does not require a personal computer. Furthermore, the methods provide for one-way, non-repudiable, non-trackable identification of the owner of a portable device, and for the arbitration of a disputed transaction between the owner of a portable device and a service provider.

Claims

1. A method for identifying the owner of a portable device, comprising the steps of:

computing a dynamic identification code at the portable device;

encoding the identification code into an acoustic signature at the portable device;

causing the portable device to transmit the acoustic signature over a voice line to a service provider;

decoding the acoustic signature into the identification code at the service provider;

transmitting the identification code from the service provider to a certification service;

generating indicia of the identification code at the certification service;

comparing the indicia of the identification code to a plurality of possible owners;

producing a true owner from the comparison; and

causing the certification service to transmit to the service provider a digital certificate corresponding to a digital signature of the true owner.

2. The method of claim 1 further comprising the step of digitally storing the acoustic signature at the service provider.

3. The method of claim 1 further comprising the steps of:

entering a personal identification number into the portable device; and

comparing the entered personal identification number to a stored personal identification number.

4. The method of claim 1 further comprising the step of entering transaction data for a transaction into the portable device, wherein:

the encoding step further comprises encoding the transaction data into the acoustic signature, wherein the acoustic signature comprises the identification code and the transaction data;

the decoding step further comprises decoding the acoustic signature into the transaction data;

the transmitting step further comprises transmitting the transaction data to the certification service; and

upon identification of the true owner from the producing step, transmitting, by the certification service, a digital document comprising the digital certificate and the transaction data.

5. The method of claim 4 further comprising the steps of:

entering a credit card selection into the portable device;

retrieving credit card information associated with the credit card selection at the certification service upon identification of the true owner,

obtaining authorization for the transaction from a credit card company associated with the credit card selection; and

wherein;

the encoding step further comprises encoding the credit card selection into the acoustic signature, wherein the acoustic signature comprises the identification code, the transaction data, and the credit card selection;

the decoding step further comprises decoding the acoustic signature into the credit card selection;

the transmitting step further comprises transmitting the credit card selection to the certification service; and

the step of transmitting a digital document comprises transmitting credit card information.

6. A method for identifying the owner of a portable device, comprising the steps of:

computing a dynamic identification code at the portable device;

encoding the identification code into an acoustic signature at the portable device;

calling a public server configured to interpret speech and to browse the internet based on verbal commands;

causing the public server to access a web-site associated with a service provider;

causing the portable device to transmit the acoustic signature over a voice line to the public server;

decoding the acoustic signature into the identification code at the public server;

transmitting the identification code from the public server to a certification service;

generating indicia of the identification code at the certification service;

comparing the indicia of the identification code to a plurality of possible owners;

producing a true owner from the comparison; and

causing the certification service to transmit to the service provider a digital certificate corresponding to a digital signature of the true owner.

7. The method of claim 6 further comprising the steps of:

entering a personal identification number into the portable device; and

comparing the entered personal identification number to a stored personal identification number.

8. The method of claim 6 further comprising the step of entering transaction data for a transaction into the portable device, wherein:

the encoding step further comprises encoding the transaction data into the acoustic signature, wherein the acoustic signature comprises the identification code and the transaction data;

the decoding step further comprises decoding the acoustic signature into the transaction data;

the transmitting step further comprises transmitting the transaction data to the certification service; and

upon identification of the true owner from the producing step, transmitting, by the certification service, a digital document comprising the digital certificate and the transaction data to the service provider.

9. The method of claim 8 further comprising the steps of:

entering a credit card selection into the portable device;

retrieving credit card information associated with the credit card selection at the certification service upon identification of the true owner;

obtaining authorization for the transaction from a credit card company associated with the credit card selection; and

wherein;

the encoding step further comprises encoding the credit card selection into the acoustic signature, wherein the acoustic signature comprises the identification code, the transaction data, and the credit card selection;

the decoding step further comprises decoding the acoustic signature into the credit card selection;

the transmitting step further comprises transmitting the credit card selection to the certification service; and

the step of transmitting a digital document comprises transmitting credit card information.