Managing transactions on a network: four or more parties

• US 7,324,972 B1
• Filed: 06/22/2000
• Issued: 01/29/2008
• Est. Priority Date: 03/07/1997
• Status: Expired due to Term

• Current Assignee: Clickshare Service Corp.
• Original Assignee: Clickshare Service Corp.
• Inventors: Callahan, Michael J., Oliver, David M., Densmore, William P. Jr.
• Primary Examiner(s): NGUYEN, NGA B
• Application Number:
  US09/599,163
• Time in Patent Office: 2,777 Days
• Field of Search: 705/26, 705/27, 705/37, 705/39, 705/40, 705/64, 705/65, 705/74, 705/80, 709/229, 717/113
• US Class Current: 705/40
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A system for managing user accounts and controlling anonymous access to resources over data networks for a plurality of provider members in a manner to preserve the secrecy of the identity of a user who is in a home provider'"'"'s user/customer base. The system includes a means for sharing non-identifying user information and charges among a plurality of service provider members, including a home provider and an outside provider, a means for enabling a user who is registered as a customer with the home provider to anonymously access the resources of the outside provider, a sharing means adapted to allow the system to permit the home provider to enable access by the user to the resources of the outside provider without requiring either personal identification or an open account for the user at the outside provider, and a verification means separate from the home provider adapted to allow the outside provider to determine the user'"'"'s access privileges and criteria. The verification means may include a token and authentification server. The verification means preferably does not have access to personal identification information of the user. Preferably the verification server is separate from the provider members. In another aspect, the system includes means for enabling a user who is registered as a customer with the home provider to access the resources of the outside provider, while allowing the appearance that the resources are accessed directly from the home provider.

Claims

1. A system for managing user accounts and controlling anonymous access to resources over data networks for a plurality of provider members in a manner to preserve the secrecy of the identity of a user who is in a home provider'"'"'s user/customer base, said system comprising:

(a) a means sharing non-identifying user information and charges among a plurality of service provider members comprising a home provider and an outside provider,

(b) a means enabling a user who is registered as a customer with the home provider to anonymously access the resources of the outside provider,

(c) a settling means allowing the system to settle accounts among service providers by charging the home provider for access by its user to the resources of the outside provider,

(d) a payment means assuring that the outside provider is then anonymously paid for said access through the system,

(e) a sharing means allowing the system to permit the home provider to enable access by the user to the resources of the outside provider without requiring either personal identification or an open account for the user at the outside provider, and

(f) a verification means separate from the home provider allowing the outside provider to determine the user'"'"'s access privileges and criteria.

2. A system as recited in claim 1 wherein said verification means comprises a token and authentification server.

3. A system as recited in claim 1 wherein said verification means does not have access to personal identification information of said user.

4. A system as recited in claim 2 wherein said verification means does not have access to personal identification information of said user.

5. A system as recited in claim 1, wherein a plurality of provider members of the system may aggregate, transfer, and share data about the users of the system, in a standardized form which identifies each user by a unique alpha-numeric sequence, but wherein personal identifying attributes of the client do not need to be known to any provider member except the member responsible for enrolling the user.

6. A system as recited in claim 5, to handle a potential user, wherein a verification server separate from said provider members is adapted to allow a member to verify that a potential user is a client of the system/a customer of a member provider, but wherein the server does not have access to the personal identity of said potential user.

7. A system as recited in claim 1, further comprising a means for enabling a user who is registered as a customer with the home provider to access the resources of the outside provider, said means allowing the appearance that the resources are accessed directly from the home provider.