System and method for secure authentication of a subscriber of network services

• US 6,978,380 B1
• Filed: 06/06/2000
• Issued: 12/20/2005
• Est. Priority Date: 06/06/2000
• Status: Expired due to Term

• Current Assignee: Finastra Merchant Services Incorporated (Finastra Group Holdings Ltd.)
• Original Assignee: Commerciant
• Inventors: Husain, Mohammad, Desai, Manish
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US09/588,453
• Time in Patent Office: 2,023 Days
• Field of Search: 705/43, 705/18, 705/21, 713/200, 713/155
• US Class Current: 726/4
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/02 by keys or other credit registering devices
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data

Abstract

A system and method for electronically authenticating a subscriber account for a network service is disclosed. In the preferred embodiment, a subscriber account provider receives initial information from a subscriber. The received information is stored by the subscriber account provider. A transaction processing device is provided to the subscriber and the subscriber is electronically authenticated prior to enabling the subscriber account for performing the network service. In the preferred embodiment, the step of electronically authenticating the subscriber comprises receiving captured information from subscriber through said transaction processing device. After receiving the captured information the subscriber account provider utilizes the captured information to receive verifying information about the subscriber; and then compares the verifying information with the initial information to authenticate the subscriber.

Claims

1. A method for activating a subscriber account for providing a network service, comprising the steps of:

receiving initial information from a subscriber;

storing said received information;

providing a transaction processing device to said subscriber;

receiving captured information from said subscriber through said transaction processing device;

utilizing said captured information to receive verifying information about said subscriber; and

comparing said verifying information with said initial information to authenticate said subscriber.

2. The method of claim 1, wherein said captured information is information provided to said subscriber by a third party certifying authority.

3. The method of claim 1, wherein said initial information is received by a provider of said subscriber account.

4. The method of claim 3, wherein said captured information is information that has not been previously provided to said provider of said subscriber account by said subscriber.

5. The method of claim 3, wherein said receiving captured information step includes the step of:

receiving by said transaction processing device identifying information from said subscriber, wherein said identifying information is captured by said transaction processing device.

6. The method of claim 5, wherein said receiving captured information step further includes the step of:

receiving securely from said transaction processing device said captured information by a remote server associated with said provider of said subscriber account.

7. The method of claim 6, wherein at least a portion of said captured information is encrypted prior to being transmitted to said remote server over a communication network.

8. The method of claim 7, wherein said encryption is performed utilizing a private key unique to said transaction processing device.

9. The method of claim 8, wherein said captured information is further encrypted utilizing a public key of said subscriber account provider.

10. The method of claim 7, wherein said encryption is performed utilizing a public key of said subscriber account provider.

11. The method of claim 8, wherein said communications network is a public network.

12. The method of claim 11, wherein said public network is capable of TCP/IP communication.

13. The method of claim 8, wherein said utilizing said captured information step comprises the steps of:

decrypting said received captured information by said subscriber account provider utilizing a public key of said transaction processing device in order to verify the source of said received captured information.

14. The method of claim 13, wherein said received captured information is further decrypted utilizing the private key of a payment processor.

15. The method of claim 13, further comprising the step of:

providing at least a portion of said decrypted information to a third party server; and

receiving said verifying information from said third party server in response to providing said decrypted information to said third party server.

16. The method of claim 13, further comprising the step of:

retrieving, by said subscriber account provider, verifying information from said remote server, wherein said verifying information had been previously retrieved by said subscriber account provider from a third party server.

17. The method of claim 5, wherein said identifying information is received by said transaction processing device by scanning a card across a card reader associated with said transaction processing device.

18. The method of claim 17, wherein said card reader is part of said transaction processing device.

19. The method of claim 1, wherein said captured information is a driver'"'"'s license number.

20. The method of claim 1, wherein said captured information is provided to said subscriber by a provider of said transaction processing device.

21. The method of claim 2, wherein said certifying authority provides independent verification of said subscriber based in part on said initial information.

22. The method of claim 1, further comprising the step of:

activating said transaction processing device for performing said network service upon successful verification of said subscriber.

23. The method of claim 1, further comprising the step of:

activating said subscriber account for providing said network service upon successful verification of said subscriber.

24. The method of claim 1, further comprising the step of:

activating said subscriber account for providing said network service upon successful verification of said subscriber and said transaction processing device.

25. The method of claim 23, wherein said activating step comprises the step of:

associating said subscriber account with said transaction processing device; and

enabling said subscriber account.

26. The method of claim 25, further comprising the step of:

transmitting data back to said transaction processing device.

27. The method of claim 26, wherein said transmitted data is configuration data.

28. The method of claim 1, wherein said network service is a payment processing service.

29. The method of claim 1, wherein said payment processing service includes credit card processing.

30. The method of claim 28, wherein said payment processing service is selected from the group consisting of debit card processing, check verification, check guarantee, payroll processing, gift certificate issuance, issuance of electronic tickets, and issuance of money order.

31. The method of claim 1, wherein said initial information is provided to a payment processor by said subscriber by entering information at a web site maintained by said payment processor.

32. The method of claim 31, wherein said information is entered by said subscriber via a wireless device.

33. The method of claim 1, wherein said transaction processing device is a standalone internet enabled transaction processing device.

34. The method of claim 1, wherein said transaction processing device is a standalone internet enabled wireless transaction processing device.

35. The method of claim 1, further comprising the step of:

providing by a provider of said subscriber account an identifying token to said subscriber separate from said transaction processing device.

36. The method of claim 35, wherein said identifying token is a username and a password.

37. The method of claim 35, wherein said identifying token is provided to said subscriber electronically in response to receiving said initial information from said subscriber.

38. The method of claim 35, wherein said identifying token is selected by said subscriber.

39. The method of claim 35, wherein said identifying token is selected by a provider of said subscriber account.

40. The method of claim 35, wherein said identifying token is encoded in a physical device provided to said subscriber by a provider of said subscriber account.

41. The method of claim 35, wherein said received captured information includes said identifying token that had been previously provided to said subscriber by said subscriber account provider.

42. A method for electronic authentication of a subscriber requesting a subscriber account for providing a payment processing service, comprising the steps of:

receiving initial information from said subscriber, wherein said initial information is received by a payment processor;

storing said received information in a database associated with said payment processor;

providing a point of sale terminal to said subscriber;

receiving by said point of sale terminal identifying information from said subscriber, wherein said identifying information is captured by said transaction processing device, wherein at least a portion of said captured information is encrypted by said point of sale terminal;

receiving said encrypted information from said point of sale terminal via a public network;

decrypting said received encrypted information by said payment processor;

providing at least a portion of said decrypted information to a third party server;

receiving verifying information from said third party server wherein said verifying information is related to said decrypted information provided to said third party server;

comparing said verifying information with said initial information by said payment processor to authenticate said subscriber; and

activating said subscriber account for performing said payment processing service upon authentication of said subscriber.

43. The method of claim 42, wherein said point of sale terminal utilizes a private key unique to said point of sale terminal for said encryption of said captured information.

44. The method of claim 43, wherein said payment processor utilizes a public key of said point of sale terminal for said decryption of said received encrypted information.

45. A method of activating a subscriber account for providing a network service via a transaction processing device, comprising:

receiving initial information from a subscriber;

storing said initial information;

providing said transaction processing device to said subscriber;

receiving identification information from said subscriber through said transaction processing device;

communicating, by said transaction processing device through a network, said identification information to an authenticating server;

using, by said authenticating server, said identification information to obtain verifying information related to said subscriber; and

activating, by said authenticating server, said subscriber account when said verifying information is consistent with said initial information, wherein said activating enables said transaction processing device to initiate payments into said subscriber account from third parties via said network.

46. The method of claim 45 further comprising:

retrieving said verifying information through a third party server.

47. The method of claim 46 wherein said identification information is driver'"'"'s license information and said retrieving communicates said driver'"'"'s license information to said third party server to obtain said verifying information.

48. The method of claim 46 further comprising:

communicating at least one challenge question from said authenticating server to said subscriber through said transaction processing device as a condition to said activating.

49. The method of claim 45 further comprising:

verifying an identifier of said transaction processing device by said authenticating server as a condition to said activating.

50. The method of claim 45 wherein said activating comprises:

communicating configuration information to said transaction processing device.