Multi-way transactions related data exchange apparatus and methods

• US 7,814,024 B2
• Filed: 05/13/2005
• Issued: 10/12/2010
• Est. Priority Date: 05/14/2004
• Status: Active Grant

• Current Assignee: Peter N. Ching
• Original Assignee: Peter N. Ching
• Inventors: Ching, Peter N.
• Primary Examiner(s): Elisca; Pierre E
• Application Number:
  US11/129,538
• Publication Number:
  US 20050273440A1
• Time in Patent Office: 1,978 Days
• Field of Search: 705/64, 705/50, 705/51
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods and apparatus for conducting electronic transactions such as commerce transactions or purchases and exchanging related information. In one aspect, a robust and integrated apparatus and associated method is provided whereby a purchaser can securely provide transaction data and/or information in an electronic format to another party such as a vendor. In one exemplary embodiment, the purchaser can authenticate his or her right to use the billing information contained therein to complete a purchase without actually having to disclose the billing information in a human readable format, thereby enabling the vendor to obtain and authenticate the purchaser'"'"'s identity and billing information while still protecting the purchaser'"'"'s privacy, and without requiring disclosure of the purchaser'"'"'s billing information to the vendor'"'"'s employees or any other parties. In another aspect, the vendor can provide information about the transaction in an electronic form that can be authenticated and verified for accuracy.

Claims

1. A method of processing transaction-related data, comprising:

generating an electronic file comprising transaction-related data;

processing said file to create a first indicator of at least the content of said file at a first time;

encrypting said first indicator to produce at least one encrypted indicator;

combining said encrypted indicator and said file to form a data structure;

placing a portable radio frequency-identification (RFID) capable data transfer device in wireless data communication with a device on which said data structure is resident, said RFID capable data transfer device being adapted to store transaction specific data in encrypted form;

authenticating the identity of a user of said portable RFID capable data transfer device; and

transferring said data structure to said RFID capable data transfer device if said user'"'"'s identity is authenticated;

wherein said act of processing is performed substantially by a point-of-sale device, and said portable RFID capable data transfer device is adapted for data communication with said point-of-sale device via at least one of;

(i) direct data communication with point-of-sale device, or (ii) a data networking hub.

2. The method of claim 1, wherein said act of authenticating said identity of said user occurs without disclosing any data used in said authentication in human-cognizable form, said authentication requiring said user to physically possess said data transfer device.

3. The method of claim 1, wherein said authentication comprises using at least dual key encryption.

4. The method of claim 1, further comprising validating at least a portion of said transaction-related data using at least a one-way hash algorithm.

5. The method of claim 1, wherein said act of encrypting comprises encrypting said first indicator such that it may only be decrypted with a decryption key designated by an entity performing said act of encrypting.

6. The method of claim 5, further comprising verifying that said contents of said file are in their original form based at least in part on said content.

7. The method of claim 6, further comprising:

processing said file to identify said encrypted indicator;

using said designated decryption key to decrypt said identified encrypted indicator in order to obtain said first indicator; and

using said first indicator to confirm that at least a portion of said transaction-related data is unchanged.

8. The method of claim 1, further comprising performing at least a portion of said acts of generating, processing, encrypting and combining using at least one software application, said at least one software application being adapted to enable a user to at least capture, annotate, and analyze said transaction-related data.

11. The apparatus of claim 8, wherein said computer apparatus is configured to support (i) authentication using at least dual key encryption;

and (ii) validation of at least a portion of said data using at least a one way hash algorithm, by a recipient of said data structure.

9. Apparatus adapted to process data selected from the group consisting of:

(i) transaction-related data, (ii) personal data;

(iii) health care data, and (iv) equipment performance or diagnostics data, the apparatus comprising;

an input apparatus adapted to receive said data from at least one source; and

a computer apparatus operatively coupled to said input apparatus and adapted to;

generate at least one electronic file comprising said data;

process said at least one file to create a first indicator of at least the content of said at least one file at a first time;

encrypt said first indicator to produce an encrypted indicator;

combine said encrypted indicator and said at least one electronic file to form a data structure;

store said data structure; and

transmit said data structure from said apparatus to a point of sale device disposed at a seller'"'"'s premises.

10. The apparatus of claim 9, wherein said computer apparatus comprises a digital processor and at least one software application adapted to run thereon, said software application being configured for logical communication with a software process of at least one of (i) said at least one source, and/or (ii) said point of sale device.

12. The apparatus of claim 9, wherein said computer apparatus is configured to support authentication of said data structure without disclosing said data in a human-cognizable form.

13. The apparatus of claim 9, wherein said computer apparatus is further adapted to periodically synchronize said data structure with a second data structure residing on a remote computer device accessible via a local or wide area connection established between a first device hosting said first data file and said remote computer device.

14. The apparatus of claim 9, wherein said computer apparatus is further adapted to:

store biometric information relating to a party; and

allow said party to authenticate his or her right to use said data to complete a transaction without disclosing said data in any human-cognizable form, said authentication being based at least in part on said biometric information.

15. The apparatus of claim 9, wherein said computer apparatus is further adapted to generate at least one additional file comprising second data.

16. The apparatus of claim 15, wherein said second data comprises electronically readable notations to said data in said electronic file, said notations being selected from the group consisting of:

(i) instructions relating to decryption of said at least one electronic file; and

(ii) information relating to the content of said at least one electronic file.

17. A paper-less method of doing business, comprising:

generating via a first entity at least one first data structure comprising business-related data;

processing said at least one first data structure to create a first indicator of at least the content of said at least one first data structure at a first time;

encrypting said first indicator to produce an encrypted indicator;

combining said encrypted indicator and said at least one first data structure to form a second data structure;

transmitting said second data structure to a second entity;

authenticating and verifying said second data structure;

placing a data transfer device in wired or wireless data communication with a device on which said data structure is resident, said data transfer device being adapted to store transaction specific data in encrypted form; and

transferring said data structure to said data transfer device;

wherein said act of transferring is performed substantially by a point-of-sale device disposed at a seller'"'"'s premises, and said data transfer device is adapted for data communication with said point-of-sale device; and

wherein said authenticating and verifying obviate paper or other tangible records of said business-related data.

18. The method of claim 17, wherein said business-related data comprises data related to purchase or service transactions, and said paper or other tangible records comprise receipts of said transactions.

19. The method of claim 18, wherein said authenticating comprises authenticating that the business-related data was created by a designated source, and said verifying comprises verifying that at least a portion of contents of said second data structure are unchanged as compared to corresponding contents of said first data structure.

20. The method of claim 17, further comprising storing said data structure in a data file that is part of one or more independent distributed databases.

21. The method of claim 20, wherein at least a portion of said data file is periodically synchronized with a second data file that is also part of said one or more distributed databases.

22. The method of claim 21, wherein said second data file is located on said data transfer device, and after said synchronization, information in said data file and said second data file are substantially identical.

23. The method of claim 21, wherein conflicts in said synchronization are identified and resolved according to at least one predefined criterion.

24. The method of claim 17, further comprising making said data structure available for use by or transfer to a third party.

25. The method of claim 24, further comprising said third party utilizing said encrypted indicator and said first indicator to authenticate and verify, respectively, at least a portion of said data structure.