System and method for providing secure services over public and private networks using a removable portable computer-readable storage

• US 7,386,516 B2
• Filed: 09/10/1999
• Issued: 06/10/2008
• Est. Priority Date: 09/10/1999
• Status: Expired due to Term

• Current Assignee: Fidelity Information Services, LLC (Fidelity National Information Services Incorporated)
• Original Assignee: Metavante Corporation (Fidelity National Information Services Incorporated)
• Inventors: Turgeon, Paul Charles
• Primary Examiner(s): Hewitt, II; Calvin L.
• Application Number:
  US09/394,143
• Publication Number:
  US 20030014371A1
• Time in Patent Office: 3,196 Days
• Field of Search: 705/1, 705/50, 705/51, 705/64, 705/35, 705/39, 705/40, 705/41, 705/42, 705/65, 705/67, 705/78, 705/79
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1066 PIN data being compared to data on card

Abstract

A system and method provides secure access over public communication lines using encrypted information on a removable, portable storage medium. Information relating to a customer'"'"'s financial account is encrypted and stored to a disk. When a customer desires to purchase goods and/or services on-line or access his financial account, he inserts the CD into a disk drive of a personal computer. The encrypted information is retrieved from the disk and transmitted, via public communications lines, to a computer maintaining a Web site for providing the requested goods and/or services. The computer then forwards the encrypted information to a secure network. A processor on the secure network processes the customer'"'"'s request, and denies or approves the transaction based on the received information. The results of such processing are returned to the computer maintaining the Web site for completing or aborting the transaction.

Claims

1. A method for providing financial services over a public network accessible by a plurality of customers via respective network access devices with modems and over a private network accessible by a plurality of financial institutions via computers with modems, said financial institutions maintaining respective financial accounts for said plurality of customers, at least some of said financial accounts being maintained at different ones of said financial institutions, said method comprising:

for each customer,

receiving a computer-readable portable storage medium by a computer interfaced with a respective one of the network access devices to initiate a financial transaction;

retrieving encrypted information from the computer-readable portable storage medium by the computer, the encrypted information identifying said each customer'"'"'s financial account and including a first identifier;

receiving a second identifier from said each customer by the computer;

decrypting the encrypted information to retrieve the first identifier and identifying the customer'"'"'s financial account by a decryption processor;

re-encrypting the first identifier by the decryption processor;

combining the re-encrypted first identifier with the second identifier to generate a request message by the decryption processor;

transmitting the request message for authorization of the financial transaction over the private network to a one of the financial institutions that maintains the customer'"'"'s financial; and

receiving authorization of the financial transaction in response to the request message over the private network for the one of the financial institutions.

2. The method according to claim 1, further comprising receiving an active module from a second computer at said network access device via said public network.

3. The method according to claim 1, wherein said computer-readable portable storage medium has unencrypted information that includes an audio message pertaining to said one of the financial institutions, the method further comprising playing said audio message with the decryption processor.

4. The method according to claim 1, wherein said computer-readable portable storage medium has unencrypted information that includes advertising information pertaining to said one of the financial institutions, the method further comprising displaying said advertising information with the decryption processor.

5. The method according to claim 1, wherein said computer-readable portable storage medium is a CD-ROM.

6. The method according to claim 1, further comprising receiving a code indicating whether or not access to said customer'"'"'s financial account has been approved.

7. The method according to claim 6, wherein said encrypted information further identifies said customer'"'"'s address, the method further comprising displaying said customer'"'"'s address on a monitor of said network access device if said code represents an access approval.

8. The method according to claim 1, wherein the request message includes a request to debit the customer'"'"'s financial account by a transaction amount.